Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: 7YM/zLWlH62WeJTya0tp/ZJTkJunJq24N5uCnFZ2vIk=
Subject key identifier: 4B:F1:EB:DB:56:D7:52:5A:55:BA:5E:86:9A:44:49:C0:9D:27:05:FD
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019F90C77FCED445439699FCE90332523892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 18D3
Signing time: Thu 23 Jul 2026 21:00:21 +0000
Manifest this update: Thu 23 Jul 2026 21:00:21 +0000
Manifest next update: Fri 24 Jul 2026 21:00:21 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: ujxI3JHtA7OQu4VN/OOQx34PVpMXJN7IklR4hW4IrdY=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:7f:ce:d4:45:43:96:99:fc:e9:03:32:52:38:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jul 23 21:00:21 2026 GMT
Not After : Jul 24 21:00:21 2026 GMT
Subject: CN=4bf1ebdb56d7525a55ba5e869a4449c09d2705fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:99:57:c1:df:1a:36:94:f4:fc:a0:fc:77:
47:1f:8b:c3:d3:28:79:a2:36:37:5f:5b:3a:1e:f6:
31:90:c3:25:e2:61:5d:e8:a8:5c:e8:30:3b:e9:23:
a2:fc:f6:6a:01:28:7e:7a:c8:24:29:2e:67:53:fd:
fe:de:ce:21:d3:79:e8:25:63:36:0e:c9:bb:46:c2:
25:39:14:4d:9f:db:50:13:c8:a5:74:4b:44:b1:9e:
07:ee:12:bd:ce:ca:57:7d:fa:43:3f:32:81:20:c4:
40:ac:81:ba:c0:2a:05:02:95:39:40:e5:d4:07:3e:
7a:ed:df:3e:80:d4:4b:7b:e1:63:79:e3:b6:df:c4:
1a:e0:ef:69:4d:89:2b:b3:fc:4c:0c:df:ad:21:4f:
8f:85:4d:0a:ef:bc:cc:d6:18:1f:46:b5:49:f3:ab:
b5:08:b8:d6:0b:59:f7:0a:02:aa:f3:03:ee:c0:53:
43:1a:6f:43:b6:9f:8f:52:1b:b0:c6:6d:a6:8c:f4:
76:93:79:4c:ac:43:84:16:d4:dd:28:4e:0e:41:5d:
ba:13:0a:6a:2a:eb:51:96:fe:6f:20:9d:75:3f:e6:
c1:fe:ec:60:a6:ce:0a:11:5e:eb:4d:52:08:65:50:
98:ad:3c:9e:4c:f5:0f:86:ab:d7:1b:24:6b:ab:40:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:EB:DB:56:D7:52:5A:55:BA:5E:86:9A:44:49:C0:9D:27:05:FD
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:db:6e:c9:b8:00:48:19:04:5f:0e:1b:59:be:89:5e:3b:9b:
ae:9c:dd:0c:2b:a2:29:27:f5:1a:ad:1f:db:15:5c:b3:a9:1f:
bb:52:d4:87:ae:b1:91:13:88:a5:28:06:c1:f1:ca:fd:43:55:
90:37:a8:b7:8a:92:12:d5:92:49:ec:4f:66:a8:d5:50:64:35:
20:4d:18:51:80:48:73:92:d5:c9:90:81:6c:31:b3:3a:9f:60:
1e:a1:48:eb:81:c5:eb:c9:b3:4e:29:11:4c:a5:fd:67:de:4b:
a9:2e:dc:12:91:f4:c4:28:1e:7e:23:07:99:ac:24:e7:80:d4:
15:7c:b3:ac:d8:33:dc:9d:9f:a6:fb:97:7b:23:c5:b8:2c:e0:
bd:2f:e1:40:6a:08:1d:f2:d5:70:56:d9:6c:5c:ca:5e:5d:c4:
88:f4:4d:23:c4:03:b4:38:57:81:91:52:57:21:9a:48:80:bf:
05:9d:1a:3d:f9:04:40:ea:b9:10:07:95:30:54:bd:8c:af:c8:
c0:e9:b0:74:00:4f:f1:81:0e:e5:da:d4:fa:b4:0a:64:11:1a:
e7:61:36:c9:11:b2:c6:f7:8f:15:11:44:72:6f:1a:ae:05:cd:
f1:19:27:63:6e:90:d7:3d:e3:7f:38:c1:be:28:8f:61:36:3a:
de:15:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:41 2026 by rpki-client