Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: U1ZItytaigDV8sOr2iGdXXOGPbSVSXDQvZpyfTHhTm4=
Subject key identifier: 06:0B:95:5A:8F:AA:F5:24:5F:80:91:F3:09:7D:5F:86:B5:56:66:6B
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019F94A48F03A451DFB7A09EEE42975A4E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 18D5
Signing time: Fri 24 Jul 2026 15:00:40 +0000
Manifest this update: Fri 24 Jul 2026 15:00:40 +0000
Manifest next update: Sat 25 Jul 2026 15:00:40 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: RASQGjgg6zmBKBcAMwGwtIZiGhFzRGA8+lPrSoKiMog=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:8f:03:a4:51:df:b7:a0:9e:ee:42:97:5a:4e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jul 24 15:00:40 2026 GMT
Not After : Jul 25 15:00:40 2026 GMT
Subject: CN=060b955a8faaf5245f8091f3097d5f86b556666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:9f:6b:52:87:d5:be:f3:e0:d9:06:f8:56:
92:3e:5a:ea:15:0f:0a:6e:f6:64:ac:16:6c:67:33:
20:25:4b:a2:4e:bd:4e:25:6c:08:4a:b2:2f:32:c6:
5b:94:98:b6:05:14:24:b8:00:42:c8:da:89:1f:4e:
6b:d9:80:21:ce:02:5e:45:73:d6:a0:f1:6a:b3:21:
2f:45:76:87:31:62:c7:53:96:c3:38:3a:c4:fa:79:
b8:7a:f7:15:19:77:c5:04:e4:79:0f:01:ab:69:46:
86:d5:38:b4:35:81:10:7c:e0:d8:48:31:7f:5c:03:
97:2f:e9:3a:03:b5:2b:43:79:2d:2c:1b:12:b3:a9:
d1:6a:01:71:09:c3:9e:e0:7b:2c:4b:bd:68:83:b1:
74:f1:66:25:cb:f6:05:e7:be:eb:19:ad:a7:10:38:
12:a3:e9:17:a6:c6:2c:02:cf:73:c8:90:9c:e5:c3:
7d:f7:67:70:98:0b:74:47:3c:cd:3f:53:63:8d:28:
33:68:59:1d:d3:6a:9a:7a:9b:68:fb:2d:03:e8:8f:
f1:25:03:1d:03:7d:e2:a2:8d:e3:0e:58:87:59:ef:
f9:b8:a5:28:24:e8:f4:ec:13:45:4b:8a:79:d5:57:
d1:79:49:0d:46:a2:96:19:5a:5f:81:4a:9f:ce:be:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:95:5A:8F:AA:F5:24:5F:80:91:F3:09:7D:5F:86:B5:56:66:6B
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0b:89:28:7f:1c:f4:5c:39:45:7d:e5:e8:6d:1b:4d:77:54:
c3:b8:6a:60:fa:c1:ce:d6:0d:94:43:d1:d4:96:b1:79:d3:93:
65:94:a9:3a:cc:2f:27:e2:b1:2a:af:84:d3:d9:24:63:86:10:
c0:de:c8:11:06:e4:ac:aa:31:0d:c1:88:0e:ae:5f:f5:3d:7b:
e6:34:14:52:95:93:e5:5f:42:46:6e:6b:ff:60:c6:b1:4e:55:
bf:b2:06:07:72:ef:fe:16:5c:ce:c6:bc:fd:b3:40:ed:51:b5:
e8:70:80:89:9f:a5:8f:78:12:6b:8e:c2:af:e7:79:2c:e4:4c:
8b:91:6d:a2:0d:24:57:0a:79:73:8f:5c:6b:95:8a:8d:91:85:
fa:29:d6:2d:2b:c1:ef:46:2c:ec:ba:3c:c4:64:02:4a:9a:1e:
93:cd:a5:82:73:49:91:4a:14:9f:87:8e:55:63:0d:09:5b:a5:
7b:52:ba:7c:57:76:a1:a2:5c:85:37:14:24:72:bc:80:3a:c5:
e3:d2:e3:24:a8:79:0c:bb:aa:b3:8a:3c:05:52:91:ca:bf:72:
5b:2c:75:93:fa:53:56:ed:1d:aa:d1:2a:c3:0c:11:bb:8a:81:
a5:82:35:19:77:ac:d4:b6:1c:4e:f5:93:35:13:cc:4f:f2:43:
2f:90:90:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpI8DpFHft6Ce7kKXWk5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjYwNzI0MTUwMDQwWhcNMjYwNzI1MTUwMDQwWjAzMTEwLwYDVQQD
EygwNjBiOTU1YThmYWFmNTI0NWY4MDkxZjMwOTdkNWY4NmI1NTY2NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpCfa1KH1b7z4NkG+FaSPlrqFQ8K
bvZkrBZsZzMgJUuiTr1OJWwISrIvMsZblJi2BRQkuABCyNqJH05r2YAhzgJeRXPW
oPFqsyEvRXaHMWLHU5bDODrE+nm4evcVGXfFBOR5DwGraUaG1Ti0NYEQfODYSDF/
XAOXL+k6A7UrQ3ktLBsSs6nRagFxCcOe4HssS71og7F08WYly/YF577rGa2nEDgS
o+kXpsYsAs9zyJCc5cN992dwmAt0RzzNP1NjjSgzaFkd02qaepto+y0D6I/xJQMd
A33ioo3jDliHWe/5uKUoJOj07BNFS4p51VfReUkNRqKWGVpfgUqfzr7FuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYLlVqPqvUkX4CR8wl9X4a1VmZrMB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAuJKH8c
9Fw5RX3l6G0bTXdUw7hqYPrBztYNlEPR1JaxedOTZZSpOswvJ+KxKq+E09kkY4YQ
wN7IEQbkrKoxDcGIDq5f9T175jQUUpWT5V9CRm5r/2DGsU5Vv7IGB3Lv/hZczsa8
/bNA7VG16HCAiZ+lj3gSa47Cr+d5LORMi5Ftog0kVwp5c49ca5WKjZGF+inWLSvB
70Ys7Lo8xGQCSpoek82lgnNJkUoUn4eOVWMNCVule1K6fFd2oaJchTcUJHK8gDrF
49LjJKh5DLuqs4o8BVKRyr9yWyx1k/pTVu0dqtEqwwwRu4qBpYI1GXes1LYcTvWT
NRPMT/JDL5CQdw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:20 2026 by rpki-client