Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: amLc7sF5Np/CVjupSybbuRRb7fnTidEC5qL45/Zpa8c=
Subject key identifier: 26:25:B0:79:D5:01:FD:FA:78:1C:50:B3:42:CD:BA:32:E5:61:9A:47
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019CAB348D6DB951F30E9DFB79380F46BC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1753
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: TE9SFzGRODTdh/V8Sv4hzfc8BpsYZCamSBu+aozfuXc=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8d:6d:b9:51:f3:0e:9d:fb:79:38:0f:46:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=2625b079d501fdfa781c50b342cdba32e5619a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:96:0a:ff:dd:5e:5b:66:dc:f5:f4:cf:54:
0f:32:8c:2c:e5:70:0f:aa:a5:ef:d6:a4:f8:3d:f1:
bb:89:57:78:ef:91:f1:f4:7d:1d:95:1f:6b:8a:d7:
ce:99:e6:a7:27:9b:3a:e4:35:6e:aa:20:93:da:61:
cf:fc:45:df:7a:40:c9:71:7f:94:9e:70:c6:db:3c:
e0:dc:85:7a:e4:80:b7:3d:51:b2:65:3b:fa:0a:f5:
98:7e:40:0f:e8:f0:2f:86:2c:29:6e:14:2e:d3:de:
b7:3b:4d:fb:17:ad:85:fc:63:9f:5a:2f:7b:80:d8:
3f:27:f0:32:b7:17:23:b1:95:7b:b0:aa:66:e4:00:
1b:4b:64:98:64:15:8b:c4:98:42:3d:b1:8c:c8:5f:
97:d0:92:aa:15:0d:0e:00:fd:ea:65:b5:ca:1f:b3:
ce:31:22:88:92:87:70:79:76:c3:0a:fd:ca:5c:b4:
42:8f:09:39:65:d4:d8:53:50:03:58:72:41:5c:d5:
77:31:be:09:ca:a2:d1:28:11:f2:af:02:4b:12:d8:
40:43:47:94:ef:87:10:76:ab:0d:d8:da:db:97:37:
c7:80:be:81:94:81:6b:0a:93:a6:cf:dd:ac:bd:6a:
85:75:69:87:4a:83:61:cc:cc:1f:bd:bb:c5:32:76:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:B0:79:D5:01:FD:FA:78:1C:50:B3:42:CD:BA:32:E5:61:9A:47
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:04:b9:93:a0:9c:7e:92:26:06:74:70:56:86:94:8e:fd:a9:
e6:ab:c5:1c:bc:b2:6c:48:19:d8:4b:df:62:8b:a5:c2:9d:b1:
e5:61:e7:73:4a:5b:0d:f7:5b:86:43:c2:2a:1a:a7:ba:f7:18:
19:b9:10:f8:c5:b6:c9:d9:6e:10:d5:d5:44:1b:e2:22:11:01:
bb:37:30:d2:e8:44:d3:ea:a8:c4:e9:f6:b2:e5:7e:4b:17:a5:
8c:dc:03:4b:00:e6:ec:5e:73:4d:95:57:1f:53:ef:b3:ff:6b:
47:0f:ae:0f:6f:7a:d0:aa:f1:83:66:5d:a7:9d:6a:0d:71:35:
33:23:69:5d:4f:75:33:e1:08:61:71:42:f0:66:ef:28:0c:d9:
f5:20:16:f4:d2:37:94:dd:05:f8:c1:ad:dd:e4:3d:01:0f:2d:
de:b8:23:53:ff:f9:9d:05:31:82:e4:1a:61:7f:61:e7:b5:b2:
71:15:66:49:12:e9:00:92:7b:84:73:80:9d:11:48:8e:0d:bb:
f8:1d:7a:46:e7:21:3b:e2:e2:62:5c:06:49:18:59:16:39:b8:
44:ef:3b:fc:11:f9:c5:9c:7d:3a:65:6a:4c:51:8c:45:6f:12:
e8:42:00:63:1d:51:b3:ca:69:d4:7a:62:66:2c:1c:e9:c3:c7:
69:c5:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:49 2026 by rpki-client