Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: 7SdfhHqqm33uxV3V/s/8pjrtLZIFZwG14KHRTMWFBRQ=
Subject key identifier: 21:98:77:48:1A:6E:C0:10:1A:4D:07:14:B5:30:89:7B:D9:D4:DC:4F
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01A1DFBA638C77AF749FEE88BF2BD49C04B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1A05
Signing time: Sun 15 Nov 2026 15:01:36 +0000
Manifest this update: Sun 15 Nov 2026 15:01:36 +0000
Manifest next update: Mon 16 Nov 2026 15:01:36 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: UH5rsYSeGaf4CYZRXEAnBU3+Z5peXk4QjNi+p3UwutI=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:63:8c:77:af:74:9f:ee:88:bf:2b:d4:9c:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Nov 15 15:01:36 2026 GMT
Not After : Nov 16 15:01:36 2026 GMT
Subject: CN=219877481a6ec0101a4d0714b530897bd9d4dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:ed:1d:a6:7e:e6:66:d8:90:7e:17:31:35:
6b:72:dc:16:07:f0:8c:42:e5:6c:7d:d6:3a:24:c1:
2c:bb:e6:38:7c:73:12:81:13:bb:9a:d0:a7:97:e3:
d9:ee:98:84:9e:b9:f3:47:1b:60:fd:1c:ab:31:d7:
ca:34:f8:66:97:f9:9f:33:2f:c8:d9:23:10:0e:21:
7c:04:b2:3e:44:2d:54:51:ec:d7:d9:e0:52:31:0d:
8c:fd:28:4e:73:a1:1b:7b:6b:38:ce:9d:0c:a9:7a:
c2:98:03:3d:3b:14:e4:bc:7b:7e:5d:02:9d:fe:cf:
80:2b:68:a8:5b:a9:fc:64:21:eb:11:1f:ba:6b:e7:
94:92:79:79:7f:98:ab:88:e7:ee:9c:e8:8c:84:f1:
30:b2:79:c6:14:fb:dd:90:77:0e:34:a7:12:72:fe:
00:90:8a:5e:34:60:7f:70:3a:90:8c:53:4f:d0:91:
ca:68:2e:02:98:2e:be:ec:9b:ed:f5:4b:23:55:3d:
55:ac:74:43:f8:7a:da:bd:6d:0e:83:1e:20:32:a0:
a7:b3:a5:8b:db:00:ad:a6:57:f0:b7:68:b1:cf:aa:
79:6c:42:43:e2:5b:1b:3d:b2:7f:5c:2e:9f:fe:e4:
c3:65:f1:3f:fe:09:21:8b:4e:ff:1b:68:e5:ac:48:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:77:48:1A:6E:C0:10:1A:4D:07:14:B5:30:89:7B:D9:D4:DC:4F
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:08:0d:f4:f5:c9:1f:28:93:c5:03:9a:6f:8c:18:77:f6:
c4:bc:61:8f:b3:63:c4:d2:d1:1d:82:a2:9a:89:fc:43:bf:d4:
af:27:1b:a9:d7:4b:6b:12:07:8e:10:07:92:35:83:e8:36:63:
a1:d0:d6:47:12:8c:f3:bc:21:09:ab:b1:b1:58:1a:51:d2:92:
bd:83:ea:7b:02:c6:86:19:69:7e:67:45:eb:75:12:bf:7e:31:
b1:08:39:d9:be:8e:1f:28:88:bb:d2:ec:09:4b:30:22:fd:2f:
31:8a:06:38:5a:18:29:62:ed:e6:1f:1c:35:cd:06:5e:75:a2:
92:2d:87:7d:16:74:a9:b6:5f:1f:24:0e:f1:91:cd:4c:3b:c4:
ad:54:38:96:d8:21:04:ab:d2:ff:af:67:09:85:90:c2:17:03:
fc:d5:84:49:85:81:1e:a0:05:15:18:be:b6:a3:51:e7:a2:d4:
48:a2:25:d0:55:85:01:ae:36:d2:49:80:36:a9:fe:36:48:2e:
68:0e:11:e3:0d:dc:32:8a:71:ee:5a:ea:bd:d1:63:67:d3:3a:
6a:8e:1c:24:7d:47:ff:0b:8a:ec:e2:4d:00:4f:ef:38:6d:ca:
e8:1c:86:7a:be:65:54:28:a1:fb:53:87:49:fb:26:76:80:9c:
92:ab:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:16:37 2026 by rpki-client