Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: QofPmdxqUyUf8Mp9YGItezSWf9XZOHmEfNm9qTKiZ1g=
Subject key identifier: 9C:11:CF:C0:FA:96:E0:72:79:02:DF:DE:BB:3B:C5:B3:A3:7B:60:E3
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019D26CCAA86C3FAE57589CE86C5C39A847E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1793
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: B581M/Tjdthw6vo77bcI4nibt8UtreP22sLc4rpRspI=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:aa:86:c3:fa:e5:75:89:ce:86:c5:c3:9a:84:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=9c11cfc0fa96e0727902dfdebb3bc5b3a37b60e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:89:bd:6e:90:f0:0b:6a:57:3e:24:ab:64:
75:fc:d8:04:e4:21:69:12:ea:e3:0a:b7:b6:48:6e:
37:3a:11:80:82:65:8a:b1:ba:82:32:f7:6e:7b:64:
aa:fb:91:bf:7f:f9:f0:11:a7:88:b2:27:62:b8:78:
6e:1b:c4:48:3b:56:ad:f4:9e:9e:c1:22:35:d1:f3:
c0:f2:80:29:30:e9:d7:78:a9:74:b6:3c:0c:2f:3d:
e4:48:a7:59:32:b5:de:b1:7c:ed:41:a6:6e:f2:b6:
db:36:79:da:12:cc:2f:e0:66:87:ff:48:cd:7c:1d:
c4:2e:51:7c:da:2a:6c:70:e4:ba:61:19:0f:dc:6f:
08:84:a7:34:18:9e:2c:d4:f4:fe:c4:8d:c2:5b:9a:
6c:ac:73:06:38:77:0d:e7:34:43:fe:1c:1d:ae:36:
2b:15:35:50:08:79:24:47:1a:2e:c8:ac:b1:4e:f8:
bb:cd:bf:ff:3a:74:17:de:5f:ce:25:90:5f:c8:0b:
8b:be:eb:10:b2:4c:67:29:45:47:29:91:60:a6:18:
ea:18:a5:e6:a9:0c:0f:8c:f2:fb:58:d2:a3:f1:0d:
b4:cf:ff:e6:dc:92:3c:20:c3:b7:a4:6b:59:10:55:
99:49:3b:e0:33:b5:d5:9c:f0:31:aa:e0:19:f5:0b:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:CF:C0:FA:96:E0:72:79:02:DF:DE:BB:3B:C5:B3:A3:7B:60:E3
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9a:68:5b:85:1e:8c:4a:85:2f:33:a9:c7:43:13:18:ef:ad:
4c:6f:79:b5:cd:41:ad:31:4d:ac:c6:ab:21:49:44:35:d4:fb:
eb:24:87:0f:42:11:8b:9c:76:b4:27:3a:72:93:ab:f7:f1:94:
c9:3f:f7:1a:ce:96:2b:cf:74:13:f8:ae:87:13:8a:68:59:0b:
91:c9:8b:03:06:87:4c:3f:08:02:8e:b7:05:64:ed:b2:66:d0:
9e:ff:e6:e9:83:a4:ca:13:1e:55:4c:e9:34:a6:73:66:9e:00:
27:78:d1:c4:e5:f5:75:ae:34:a1:43:82:ed:3f:e3:72:b9:22:
d8:9a:f3:94:f0:90:b9:44:f3:18:f7:4f:7c:58:1e:84:25:96:
70:3c:e2:90:d2:4e:e3:76:ad:98:3b:38:40:ea:86:44:34:a4:
18:58:29:6d:c1:cb:74:ce:75:df:1e:87:80:3f:b8:7c:e4:17:
a8:39:1b:09:a3:7d:27:01:53:33:a4:13:83:1c:68:36:a9:0b:
d2:da:5c:42:87:64:ed:35:9c:90:49:7f:d4:b2:c3:66:7a:8d:
89:60:3e:a5:a1:14:b8:fe:77:ad:33:51:b8:e7:47:63:0c:03:
15:24:25:4b:9b:f6:0d:dd:d4:73:8f:21:ae:34:64:1e:ae:7a:
0a:48:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:06 2026 by rpki-client