Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: DRst25hum8if26cWcLUVHyyudLfrWylmxHj5JFQ4pRg=
Subject key identifier: 06:73:27:3B:CA:4E:3F:EE:2C:65:98:B0:31:16:BE:20:C3:4F:33:58
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01A0DCF2AAEBE0E9EC2FC471A7E1783DFCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 197F
Signing time: Sat 26 Sep 2026 09:01:25 +0000
Manifest this update: Sat 26 Sep 2026 09:01:25 +0000
Manifest next update: Sun 27 Sep 2026 09:01:25 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: Dz90lWjq5i6tKYEKwlYScT9V9cPFMA5VsQ5bCpQMdi0=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:aa:eb:e0:e9:ec:2f:c4:71:a7:e1:78:3d:fc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Sep 26 09:01:25 2026 GMT
Not After : Sep 27 09:01:25 2026 GMT
Subject: CN=0673273bca4e3fee2c6598b03116be20c34f3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:5c:f0:7d:6d:b7:07:fc:71:03:df:20:e8:
b2:86:9f:25:50:98:ab:5b:fa:44:38:42:15:6c:1a:
d9:7c:c8:ec:25:46:1c:9a:8c:65:3d:49:73:b5:41:
22:44:93:e3:f7:25:8c:2e:2a:6c:9a:b2:0e:4c:2a:
c3:30:96:3f:80:12:4b:a8:c0:36:6b:74:96:55:40:
9a:a6:47:cd:c3:f5:3f:44:77:b8:21:9f:4e:ca:39:
eb:7c:bf:bd:2f:32:26:03:c9:4f:f8:31:38:a5:b4:
24:66:64:fb:3b:97:4b:c0:85:59:10:6a:d8:9a:6d:
7a:f6:26:f9:22:34:2d:cc:48:49:78:ec:65:f4:16:
2e:f1:37:a2:32:aa:ae:13:9c:33:91:ed:d7:a4:45:
e6:b4:7a:70:7d:9c:4a:d4:07:d0:5b:fb:1f:61:fe:
5b:98:cf:00:66:15:92:9e:cb:71:eb:2d:e3:94:00:
5f:d1:39:28:ec:0e:9b:2b:70:8e:2f:a4:77:2e:c2:
9a:cb:c4:3d:85:67:a2:de:8e:b5:0c:e3:2d:e6:55:
9d:98:71:0e:51:9f:a4:b2:bc:51:ea:0a:f0:69:92:
da:b8:15:da:33:d5:b0:f1:87:3c:6d:17:9b:0d:02:
f3:e0:46:fd:f9:28:78:ab:ad:2f:4c:cf:d1:19:7f:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:27:3B:CA:4E:3F:EE:2C:65:98:B0:31:16:BE:20:C3:4F:33:58
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:9c:5b:b3:a9:8e:4c:c1:9e:e4:eb:6d:48:2a:12:4f:7f:
1d:94:74:ab:d8:48:41:51:e7:ed:3b:34:45:17:36:36:9c:a1:
2e:25:4e:82:4e:74:a3:2a:80:c2:27:76:1c:3f:5b:1c:a0:b8:
87:34:8d:e0:70:57:ce:0b:43:41:84:78:4e:bd:e8:0f:8b:da:
5e:8f:97:7d:c6:2c:e9:56:8f:7d:64:f5:db:61:a3:95:1d:d0:
f2:b6:2e:45:c1:0d:9c:d8:6f:26:ee:49:c8:07:ad:fa:a8:e0:
a9:cf:f4:6d:c9:c3:2a:0e:54:d2:eb:75:68:96:f9:a6:00:bd:
68:20:6b:58:4f:a7:2f:39:0f:e6:07:19:c5:af:35:3f:d0:99:
32:1a:dd:54:6f:6d:d3:0c:10:2f:6b:31:71:3a:8a:c5:6b:72:
62:e9:e3:eb:bc:af:85:73:64:e4:4b:7d:1a:1d:40:43:d6:d6:
d9:14:83:67:a8:28:52:8b:75:a6:e2:fb:1e:71:64:17:41:97:
b9:c5:65:ce:10:03:79:75:11:f0:dc:67:a8:bb:74:90:34:02:
c2:cb:49:4f:7b:37:b7:77:18:a5:44:27:3a:78:31:fe:9e:c7:
1c:bd:6c:2e:42:e7:ea:8c:86:bc:8d:04:af:c3:ed:57:ec:e7:
33:4c:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:46:38 2026 by rpki-client