Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: 4V0dzshfOscTD22+YTJMnQZ5HC+Z1C68TcYpRk2MQzE=
Subject key identifier: 4A:0A:08:2B:50:35:77:09:E6:37:7C:46:F8:72:85:3D:FF:CC:C5:BB
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01A146844362FD4CC5A1D67ED971E937644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0A53
Signing time: Fri 16 Oct 2026 21:00:35 +0000
Manifest this update: Fri 16 Oct 2026 21:00:35 +0000
Manifest next update: Sat 17 Oct 2026 21:00:35 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: 2s+GfjXPyltMbe7j+6lqo9VEKBXFNMgd/XZrMDRzcg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:84:43:62:fd:4c:c5:a1:d6:7e:d9:71:e9:37:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Oct 16 21:00:35 2026 GMT
Not After : Oct 17 21:00:35 2026 GMT
Subject: CN=4a0a082b50357709e6377c46f872853dffccc5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:46:4b:e5:0d:97:9d:4a:b4:d4:e6:ff:9d:
f7:84:d8:11:7b:c5:2a:17:15:06:44:72:08:76:8a:
cf:5c:67:c6:8a:d4:36:90:9f:51:22:ee:98:e1:91:
3e:28:1c:58:7b:46:90:6d:02:a1:a8:1e:4d:31:0d:
64:3f:17:aa:75:56:11:72:44:9a:e6:86:91:4c:b1:
a5:e4:79:15:58:2d:22:e2:76:6a:6e:b3:d5:c8:68:
0a:57:09:5c:0a:22:27:8c:5c:39:40:b9:7b:2b:f5:
4d:38:78:41:32:71:86:c7:0c:1f:86:21:47:3c:a1:
a3:e6:60:00:a4:60:d8:4a:e5:11:76:d5:74:46:46:
72:6d:ff:9f:20:7d:44:24:b0:a9:b5:0c:35:36:e9:
3a:f3:f4:4a:20:7a:58:e4:8a:8d:b8:99:83:61:fb:
ab:bd:f6:19:09:30:aa:1d:a4:07:67:c6:66:ae:05:
1c:7a:17:a6:89:82:9a:df:71:ef:b1:57:e5:e8:ab:
cb:ba:ef:08:91:e7:e9:d0:ea:78:f0:b3:8a:8d:03:
f7:8c:d8:ac:b0:4c:a1:34:06:e8:a2:16:41:5b:ff:
c5:2e:19:4e:0a:03:c5:77:e5:91:f4:96:20:e7:05:
21:8e:a3:8e:09:e4:d4:da:47:72:09:3b:96:f4:c0:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:08:2B:50:35:77:09:E6:37:7C:46:F8:72:85:3D:FF:CC:C5:BB
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:e7:ef:6a:be:ed:ae:a6:75:04:d4:72:b3:7a:c3:3c:ca:
29:6e:f7:78:83:0c:37:06:e6:89:b6:fc:7e:f9:1e:35:11:2b:
4f:ac:f3:1f:87:08:c4:b6:cf:28:c6:4f:de:54:c1:7f:c1:bf:
62:e1:e7:25:dc:e7:65:e0:e3:6a:24:33:cb:71:29:98:bd:85:
da:44:e3:7c:fa:65:05:53:44:60:c3:85:f6:07:ee:76:3b:d7:
7f:98:f8:a4:21:0e:22:f9:30:26:d4:5f:67:4b:45:89:86:b0:
81:b2:a7:7a:47:8c:91:86:5f:80:a0:3c:52:95:df:7e:09:d1:
a6:a5:bf:3b:8e:10:c7:ab:cf:69:fb:ec:cd:75:b5:3f:76:07:
13:8a:17:33:76:40:cf:b4:9a:be:62:12:e1:bd:f4:b5:5a:c5:
4a:20:ef:5f:eb:01:34:b5:f9:be:ba:b9:df:ab:85:a7:ad:00:
e2:c6:de:66:be:67:a0:44:0c:b3:3f:c6:f1:27:16:51:2c:47:
5a:fa:cc:38:c4:1b:95:07:50:5a:7f:64:12:7a:a7:e6:86:0c:
56:ac:95:a3:6f:7a:18:2b:26:00:84:70:89:f2:d1:c9:31:65:
bc:da:b5:11:03:68:09:ce:65:1b:62:22:a7:8c:c5:14:40:be:
bc:f1:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:46:39 2026 by rpki-client