Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: g0giEk8kCQcRRLierwoisbZgakg1BstWLMhYi8b6Qgk=
Subject key identifier: 7A:41:A0:1C:82:89:60:CA:8E:04:2A:79:96:20:EE:0E:E0:8A:26:0B
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01A0C9A22844243957E4C0646AFB4D42D59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1975
Signing time: Tue 22 Sep 2026 15:00:42 +0000
Manifest this update: Tue 22 Sep 2026 15:00:42 +0000
Manifest next update: Wed 23 Sep 2026 15:00:42 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: yA0CAWHpnwNUmrKARMT8mNJbNKeGAkje2ntAa37M4P0=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:28:44:24:39:57:e4:c0:64:6a:fb:4d:42:d5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Sep 22 15:00:42 2026 GMT
Not After : Sep 23 15:00:42 2026 GMT
Subject: CN=7a41a01c828960ca8e042a799620ee0ee08a260b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:10:a4:81:92:58:f8:8a:6a:29:5a:71:0e:
4a:42:b2:a7:81:ed:26:90:bd:a6:3b:96:85:29:97:
bd:02:11:8b:ae:6e:d7:22:b1:37:fb:68:b4:e3:87:
ad:5d:a0:d5:9f:70:36:2a:14:b2:48:a7:0a:90:c9:
23:1b:9e:74:a2:6c:7e:c1:12:bb:45:3e:3c:d7:32:
c0:d9:4a:ba:1e:9f:e5:81:43:98:a3:b8:98:22:46:
ed:b7:8b:ab:d6:97:cd:f1:ef:22:4e:ae:47:e6:58:
e4:72:8a:ce:e9:98:2b:ba:3a:8e:3f:c0:f1:5f:5e:
a0:a3:19:d4:be:07:a4:0d:df:00:fc:3b:9b:5f:7b:
0d:a3:50:11:fe:29:f0:70:a9:81:17:bb:e1:34:48:
7e:d3:38:50:71:78:91:49:5c:22:32:c7:9a:22:d0:
41:c3:9f:71:0a:73:7d:dc:86:16:ac:db:f0:ed:89:
a8:b8:c7:ed:44:a3:82:73:b1:aa:b1:ea:85:fc:da:
21:a6:94:a4:66:7a:9d:ae:36:5a:a7:8e:a9:ca:c9:
34:d2:cc:d0:73:45:eb:70:56:47:c6:b2:08:13:d8:
d0:99:cc:18:8c:02:ca:bf:0f:6a:02:52:82:2a:b0:
cb:f3:c4:df:b7:4a:91:1d:32:5e:de:13:fc:64:12:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:41:A0:1C:82:89:60:CA:8E:04:2A:79:96:20:EE:0E:E0:8A:26:0B
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:22:66:3e:2f:39:02:09:15:4b:bf:c8:17:c3:a1:f7:0d:
90:31:57:b6:2e:2c:55:d8:4c:ff:ba:e2:0a:4c:5f:00:12:76:
d2:3d:d8:8d:3c:06:bf:48:4c:4a:3f:1f:da:56:f1:9d:71:fb:
c0:a4:86:23:2d:4b:da:02:23:c7:fd:20:b5:59:5b:21:88:16:
29:e4:43:ce:14:94:cb:9c:6b:17:fc:19:f7:f5:f1:27:b3:67:
a8:99:ab:18:3e:5f:b7:7d:97:9c:a8:d7:7e:4d:5b:cb:44:68:
b1:9e:9e:e7:c9:96:7e:94:33:21:24:bd:ec:d5:ce:97:9c:6a:
a3:ee:ec:62:4e:06:ba:70:b8:62:a3:e3:f8:fb:d4:54:f0:7a:
4e:ec:7f:92:35:9c:e2:9c:98:db:04:17:cb:fa:1b:15:70:e4:
61:cd:85:15:4c:ef:66:6e:e6:e9:82:89:be:fa:83:fa:2f:9f:
8f:2f:d1:ea:bd:25:4f:5a:fe:83:d0:27:0f:2a:37:40:8d:f8:
f6:d6:f1:be:e5:0e:d5:87:f3:29:dd:da:42:d7:f2:29:c4:46:
b8:e6:74:dd:bb:7d:fd:86:46:b5:fb:f3:26:cf:40:82:8f:dd:
41:d1:95:9d:04:c8:0d:82:62:2a:57:31:dc:6f:49:79:f8:06:
e7:06:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:59:35 2026 by rpki-client