Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: sJfGavgZVksRNQM8iV+pViMgB95D7TGQXdo6ssnE6jo=
Subject key identifier: 6F:1F:C4:BE:64:DF:0F:3D:F9:45:A5:CF:46:A9:4D:8F:72:3E:89:6A
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019E1DFEB1C1ECA54788C51D1BB5E56D6E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1813
Signing time: Tue 12 May 2026 21:01:31 +0000
Manifest this update: Tue 12 May 2026 21:01:31 +0000
Manifest next update: Wed 13 May 2026 21:01:31 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: nOaI5UQauCSkeBplknWToahM/hhdcBQvd2mAJ5/8+N0=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:b1:c1:ec:a5:47:88:c5:1d:1b:b5:e5:6d:6e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: May 12 21:01:31 2026 GMT
Not After : May 13 21:01:31 2026 GMT
Subject: CN=6f1fc4be64df0f3df945a5cf46a94d8f723e896a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:bd:26:db:eb:d1:b5:ba:09:e4:66:d4:4c:
9c:ea:cf:1e:d6:9f:4c:1a:fc:c0:db:fb:2d:04:34:
e2:70:e7:6d:e6:18:84:c4:7b:f2:2f:1b:05:50:18:
e3:f1:e0:f0:26:50:c9:a4:a7:04:de:12:ee:d1:e8:
1e:16:b4:a6:55:78:3e:04:a7:48:c3:f3:93:72:ad:
89:a2:17:09:df:b2:f2:20:05:3b:b8:31:78:37:ca:
8e:96:3b:f1:4c:92:3e:d2:e4:33:01:26:d5:3c:f8:
20:da:57:e6:41:25:c2:92:b9:96:48:29:ea:88:76:
61:0e:b3:7d:3f:86:cf:dc:f3:06:f0:e3:f7:cf:a7:
5b:9f:f5:67:de:c9:5e:c1:e5:ae:c5:47:87:3a:17:
08:d5:cf:88:25:5e:6a:0d:5b:e2:a3:be:b7:53:d3:
8f:38:d1:36:af:af:e5:2a:53:fe:e1:ed:22:05:9c:
e2:50:cd:91:a3:20:6c:3c:cd:23:a9:cc:31:e0:88:
56:aa:cd:4f:e2:d2:f1:dd:5a:19:7c:e1:f9:cc:da:
59:93:be:71:f4:e0:1f:76:1c:0a:7c:31:e5:5f:ac:
cc:e9:13:c2:83:f5:24:3f:04:36:0d:f4:da:45:05:
44:6c:4e:a1:5c:93:51:71:17:9b:06:20:6a:18:21:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:C4:BE:64:DF:0F:3D:F9:45:A5:CF:46:A9:4D:8F:72:3E:89:6A
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:36:59:ef:27:c1:63:17:d6:8c:ef:6d:d5:53:e0:fd:62:
d0:12:b4:ad:8b:02:a2:7c:5e:36:45:73:48:95:21:5e:94:c9:
9c:59:70:fc:a4:3b:f7:8e:bf:48:80:68:cc:d6:79:09:4a:bf:
42:16:0f:eb:fc:d0:ff:d7:74:ce:50:1b:e3:6b:5f:56:4b:1a:
c8:bd:7a:6f:02:1e:1c:0a:a6:39:8f:df:ab:2c:8e:25:62:ac:
1c:1a:77:31:09:f5:95:70:ae:19:d7:04:8d:6a:42:8d:ad:29:
04:aa:1c:2e:b2:30:c8:e3:43:d7:9d:50:19:2d:95:46:86:0f:
ef:22:cb:f4:d8:c3:73:49:94:23:27:ba:17:1b:8d:62:15:c5:
2c:42:4b:30:c2:e0:6b:f0:55:49:b7:f7:b6:ea:ea:42:68:b3:
b5:d3:09:3d:9b:46:f7:bb:72:66:a0:ce:da:36:58:e0:ac:78:
6a:61:43:fc:84:89:0a:ef:c0:0c:ac:e2:cb:3c:dd:e6:d5:99:
00:fb:98:7b:d0:a5:68:e5:81:f9:af:37:61:6d:16:51:5c:bd:
e2:23:ab:ab:af:b1:2b:3c:38:ed:51:cb:15:ea:e3:2a:c2:e1:
6c:5a:e4:f1:05:30:26:44:22:74:e7:4a:67:ba:83:e0:18:30:
ae:43:35:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/rHB7KVHiMUdG7XlbW6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjYwNTEyMjEwMTMxWhcNMjYwNTEzMjEwMTMxWjAzMTEwLwYDVQQD
Eyg2ZjFmYzRiZTY0ZGYwZjNkZjk0NWE1Y2Y0NmE5NGQ4ZjcyM2U4OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRC9Jtvr0bW6CeRm1Eyc6s8e1p9M
GvzA2/stBDTicOdt5hiExHvyLxsFUBjj8eDwJlDJpKcE3hLu0egeFrSmVXg+BKdI
w/OTcq2JohcJ37LyIAU7uDF4N8qOljvxTJI+0uQzASbVPPgg2lfmQSXCkrmWSCnq
iHZhDrN9P4bP3PMG8OP3z6dbn/Vn3sleweWuxUeHOhcI1c+IJV5qDVvio763U9OP
ONE2r6/lKlP+4e0iBZziUM2RoyBsPM0jqcwx4IhWqs1P4tLx3VoZfOH5zNpZk75x
9OAfdhwKfDHlX6zM6RPCg/UkPwQ2DfTaRQVEbE6hXJNRcRebBiBqGCFOywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8fxL5k3w89+UWlz0apTY9yPolqMB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORQ2We8n
wWMX1ozvbdVT4P1i0BK0rYsConxeNkVzSJUhXpTJnFlw/KQ7946/SIBozNZ5CUq/
QhYP6/zQ/9d0zlAb42tfVksayL16bwIeHAqmOY/fqyyOJWKsHBp3MQn1lXCuGdcE
jWpCja0pBKocLrIwyOND151QGS2VRoYP7yLL9NjDc0mUIye6FxuNYhXFLEJLMMLg
a/BVSbf3turqQmiztdMJPZtG97tyZqDO2jZY4Kx4amFD/ISJCu/ADKziyzzd5tWZ
APuYe9ClaOWB+a83YW0WUVy94iOrq6+xKzw47VHLFerjKsLhbFrk8QUwJkQidOdK
Z7qD4BgwrkM1Fg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:34:55 2026 by rpki-client