Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: ntF+AHAHnm+RR/z0h6Ar0rLYHXYvwmpShBuI4EbRnjI=
Subject key identifier: 54:17:6E:13:FF:F4:02:FE:E8:F3:57:CB:F4:DB:E3:B8:81:C7:2D:2A
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019FABD0F95B15997C830520A9CE7D655CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 18E1
Signing time: Wed 29 Jul 2026 03:00:26 +0000
Manifest this update: Wed 29 Jul 2026 03:00:26 +0000
Manifest next update: Thu 30 Jul 2026 03:00:26 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: V20aACA9WxwdwmtuMhd3oUsfa+hcsW9JPaeKVNQf07g=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:f9:5b:15:99:7c:83:05:20:a9:ce:7d:65:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jul 29 03:00:26 2026 GMT
Not After : Jul 30 03:00:26 2026 GMT
Subject: CN=54176e13fff402fee8f357cbf4dbe3b881c72d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:1a:71:97:a3:92:6c:31:9b:64:ce:ce:1e:
fa:bc:87:b5:91:ab:24:90:af:ae:8e:0f:06:95:2f:
05:43:0b:6d:25:a0:c8:e6:2c:6b:25:d3:be:49:97:
83:5d:c3:01:65:55:79:a4:29:b2:5c:af:09:d0:26:
9d:38:b4:e2:58:61:09:ec:22:a0:d6:46:e0:8f:16:
44:b1:71:bd:a8:22:95:6e:2a:96:95:95:7f:f2:c1:
0e:7c:55:b2:9b:46:b6:d7:62:c3:e5:e4:49:6c:80:
87:ca:93:c4:c6:a1:be:30:81:a4:bd:0d:a4:cf:71:
73:ab:ed:7a:63:72:5a:95:4a:ed:c2:ec:e5:99:3d:
0d:0a:38:b1:6e:c5:87:8b:e6:00:de:da:5d:f2:27:
5e:58:95:b2:b7:68:39:d6:47:1b:30:56:73:bc:d9:
5a:b5:93:cb:93:e3:18:84:72:42:b1:1a:66:8c:57:
0a:9f:5b:0c:56:7a:32:0e:ac:03:17:96:aa:a0:46:
d6:0c:50:d8:79:b5:b7:83:df:dd:9f:6a:bb:00:5a:
3b:c4:e1:88:4b:f4:48:51:84:63:1f:12:31:01:e6:
6b:f0:0d:6f:51:a2:44:5d:b2:d2:56:7e:90:0b:bb:
dc:f0:cd:12:fa:e5:03:1e:f4:c5:ed:5d:ce:15:e1:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:6E:13:FF:F4:02:FE:E8:F3:57:CB:F4:DB:E3:B8:81:C7:2D:2A
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:bf:35:a9:a1:07:6e:ea:f7:8d:ee:9f:54:bc:03:fd:cb:
85:c2:d3:29:83:d9:30:02:91:bc:75:52:ce:7f:b0:2a:e9:f6:
59:2f:d1:49:4d:05:ed:9c:45:1c:e5:f6:cc:f5:1f:7e:93:14:
4d:b8:e9:2b:5a:75:59:ad:27:ac:c4:ef:c1:38:b8:cc:00:2b:
2b:fd:22:4e:6d:3c:66:25:31:3c:b2:29:70:e4:15:84:4b:98:
64:5a:d5:47:fb:ed:23:30:b3:5b:13:aa:ee:77:6e:0e:44:9f:
72:95:4b:0b:f3:3a:6c:e6:4a:38:ae:94:4d:6f:48:03:52:4f:
31:ba:9d:bf:41:76:3e:a7:2f:4a:57:61:ff:1e:fd:51:0f:bb:
49:19:07:d5:98:80:4a:31:20:43:48:5c:23:42:8f:fd:af:ee:
7f:bc:71:f5:4f:21:ea:ae:49:ea:ee:18:d0:da:9d:b3:df:80:
09:eb:b5:a2:2f:de:93:64:0f:d0:20:43:21:b2:96:e1:c3:d4:
c3:bb:11:17:8e:43:87:ac:8f:cd:72:cf:84:8c:2c:75:5b:95:
e8:39:63:58:a6:69:e3:68:bb:19:fc:13:5f:72:c0:44:c5:4a:
5e:9b:54:d2:77:11:63:ff:2f:44:5a:41:72:44:0e:fb:5b:03:
5f:13:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:03 2026 by rpki-client