Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: 7UOppD/hw1uu8RcxHGawAzZI2RAG9CDd7QadLiEbb+4=
Subject key identifier: D7:E5:EE:F0:BD:05:49:82:54:22:AA:1C:F2:10:78:47:B0:8A:85:B6
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019EC0367C68230F23ADE5378639D1EF325D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1867
Signing time: Sat 13 Jun 2026 09:00:56 +0000
Manifest this update: Sat 13 Jun 2026 09:00:56 +0000
Manifest next update: Sun 14 Jun 2026 09:00:56 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: ezKkp9PVc8O7MEFdXb6u5OCjWbc10cfP/IvJbGNwYNw=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:7c:68:23:0f:23:ad:e5:37:86:39:d1:ef:32:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jun 13 09:00:56 2026 GMT
Not After : Jun 14 09:00:56 2026 GMT
Subject: CN=d7e5eef0bd0549825422aa1cf2107847b08a85b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:da:0d:29:e2:c4:57:c0:6c:1e:11:80:88:
9a:f1:32:11:11:fe:15:af:9e:74:29:59:d1:f8:8b:
75:f5:15:00:a4:fa:6a:4f:a3:ca:66:3f:e2:fd:57:
b5:7b:82:01:ce:8e:03:2b:b7:ce:5d:f1:8e:58:9d:
ff:15:fb:e1:b5:8a:96:3c:4c:5d:ec:18:60:79:6c:
59:df:1b:12:33:59:f7:26:4f:6a:95:54:bc:ae:2c:
de:3d:3f:62:1b:1e:75:10:8b:13:6f:19:ab:ce:ef:
cc:32:1c:74:68:17:be:44:5d:40:5d:e6:66:e3:02:
f7:74:63:73:68:c9:42:94:58:04:6b:da:e2:79:77:
c0:94:89:e1:37:af:fb:b2:04:3f:7c:04:0d:a0:d4:
60:48:35:76:e1:e8:66:13:dc:cf:6e:94:cd:e3:fe:
0f:0b:47:3e:c8:6b:47:54:a5:1c:24:0e:1f:51:63:
fe:a6:70:1b:1b:55:39:c1:8f:dd:99:16:88:84:4a:
20:1a:c9:ab:a6:5e:95:07:07:51:90:c8:ad:16:52:
47:42:7f:9a:66:9c:ae:b9:b6:53:85:15:a7:76:21:
5e:fe:07:3a:02:f2:9c:da:38:94:11:cb:83:6e:6f:
1b:83:45:50:cf:eb:00:0d:c9:5d:c7:20:bc:16:4f:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:EE:F0:BD:05:49:82:54:22:AA:1C:F2:10:78:47:B0:8A:85:B6
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ba:f8:e3:be:3e:d3:85:c0:6d:74:59:89:5f:f7:dc:5f:53:
6a:15:9a:3a:28:f1:b5:9c:59:89:55:d7:dc:8e:23:d4:95:08:
1b:ae:5e:5b:36:33:7d:99:bb:53:ff:78:ed:52:01:44:a2:33:
d2:b5:85:0c:ff:9a:97:99:dc:3d:5d:c3:5d:a7:80:31:33:b7:
da:01:74:61:e0:3a:b3:c7:ff:d1:f3:e0:9b:37:93:b5:ce:ca:
b7:8f:3a:4c:01:40:f7:8e:2d:cc:53:82:d0:0d:7d:48:a3:54:
e3:9d:41:c7:32:a0:63:ed:64:5e:bf:02:ca:1b:64:59:c7:86:
ab:b8:5e:c8:e9:c4:20:ec:8f:6c:d2:f6:60:e5:18:24:44:d5:
b9:89:8b:24:e8:fb:df:b8:f7:6c:24:e5:3d:52:02:d2:8a:29:
5e:39:10:d8:2e:b9:0f:c4:7e:3c:02:88:79:ab:4d:a2:13:1d:
c9:ef:88:1d:b6:60:47:45:e6:26:b5:ed:9c:fd:36:a2:07:34:
cd:cd:2e:b7:66:c5:d6:86:33:93:09:86:98:cd:d0:a3:2a:55:
ce:31:85:e4:19:17:8d:36:2c:ff:0a:b7:36:5e:b5:50:3b:dc:
57:8e:e8:20:73:06:09:5f:1c:8c:0b:69:08:fd:b3:b0:e1:a4:
d3:bf:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:40 2026 by rpki-client