Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: NyjykvzqmT0BMl5kadvphYWJHgiYxHrCXsc0TFPs2Ik=
Subject key identifier: 80:1E:F9:11:6A:D4:6F:4E:4B:98:15:DA:C2:06:A4:6F:1B:86:7B:0B
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019D98BDC16D7AA22E47CCECCC26D4F09EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 17CE
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: nwDyPcfZr47jvZW5YOp7cUOfqeSRx3EZleAiGOfSfec=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c1:6d:7a:a2:2e:47:cc:ec:cc:26:d4:f0:9e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=801ef9116ad46f4e4b9815dac206a46f1b867b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:02:23:f7:9e:f9:7a:c0:bc:a7:ce:5b:4d:
98:9a:09:fa:f0:40:23:3e:3d:ae:7c:b8:c8:38:f8:
e5:c4:fa:67:70:23:a1:ad:ed:5d:fa:bf:e5:5a:d6:
96:e8:f5:c3:da:3d:67:18:a0:f5:48:7d:69:e4:12:
4e:d2:d8:25:16:77:88:2f:ea:6a:7a:46:15:60:f0:
30:62:aa:b7:02:bc:d7:96:a9:2c:ed:53:37:56:e2:
c3:b8:35:52:5b:c7:10:95:fe:1d:32:a1:b6:5a:d7:
6b:6a:0f:ef:51:12:bb:dc:b3:98:ea:a4:07:3c:71:
30:4d:fb:fc:d6:6a:16:01:41:94:80:4c:16:16:6d:
93:25:0e:da:5e:1d:69:b9:9c:e3:5f:f9:16:ea:f1:
2b:96:19:26:f6:22:84:9a:27:43:6d:ea:01:7a:93:
f0:e2:d9:75:01:ec:fd:12:8e:a0:19:83:27:a2:46:
a2:bc:c1:80:d8:4f:b0:3a:f9:74:2d:a5:6b:73:6f:
f2:e9:80:f5:00:2f:5d:34:29:23:5a:b6:80:09:b4:
48:6f:9a:89:67:d1:c7:8f:88:3f:fa:9a:57:d8:7f:
20:9b:c3:c8:88:4e:a5:ca:c8:83:e8:2f:66:44:70:
60:fd:47:bd:d8:7b:12:63:4c:06:28:79:f7:67:e0:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:F9:11:6A:D4:6F:4E:4B:98:15:DA:C2:06:A4:6F:1B:86:7B:0B
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:f1:dc:d0:e0:78:b8:23:34:40:d6:b6:59:d4:6e:16:87:
10:d7:5d:08:73:8e:67:62:ad:8f:3a:a6:ba:2d:a0:ac:ae:92:
7f:cd:fa:1e:6d:9a:2c:8f:d1:ed:98:15:96:29:a4:43:a3:4c:
00:84:4c:6f:6f:18:85:48:39:88:60:ee:e7:df:05:6e:5a:c3:
ad:b4:89:52:73:46:91:97:6d:0e:2f:2f:ab:8e:2f:22:26:0d:
62:00:fe:f3:37:66:2b:47:48:db:db:74:5f:c9:66:35:24:89:
ac:65:e1:84:46:c0:1c:58:3f:93:aa:67:cf:94:e0:e2:f6:35:
41:4d:c2:d3:2d:f4:99:cb:f6:0a:e4:d7:d0:71:ca:3c:5e:fb:
3f:ca:0d:6d:90:b3:70:ba:e0:77:a3:5c:b0:9c:ef:ac:c4:da:
40:d0:52:1a:e8:59:ef:9c:19:f6:46:0f:c5:fe:86:dc:95:9b:
1e:83:5c:54:ce:c6:99:a2:93:94:70:5a:b5:40:fd:63:15:32:
0b:1e:f9:67:66:fd:a3:c6:d5:59:fc:7e:3f:23:c1:70:92:e5:
98:5e:2c:15:84:68:d6:17:b6:b1:ba:1f:4d:ce:39:33:13:c1:
28:a1:8c:10:37:b5:4f:e6:ac:3f:af:3b:95:6c:47:ba:d6:b8:
0f:3e:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:34 2026 by rpki-client