Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: jBTCV+/OuELxpV9ZcgY98q+wln/BieIRPQFxuzjiNoM=
Subject key identifier: 5F:F8:9F:74:64:5E:BB:A8:75:BF:7F:7F:3E:4C:8C:AB:EB:59:0F:57
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019D28166DD55C3A1EC9DB247C6A4FC728DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0831
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: YfMbK2BHB/aQhpDpxR1Ds3+WyiAXzXeReLRZBkzrCRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6d:d5:5c:3a:1e:c9:db:24:7c:6a:4f:c7:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=5ff89f74645ebba875bf7f7f3e4c8cabeb590f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:17:e1:5a:d3:76:e7:88:3a:9f:03:0f:02:
6c:d8:50:47:aa:9f:fc:cf:d2:8f:72:5a:84:26:c9:
98:42:14:d6:4d:5b:51:93:f9:ce:79:be:70:8a:2d:
72:b9:91:fb:09:03:82:de:0d:ce:78:78:85:11:ad:
b6:1c:54:05:d9:f4:91:c5:6a:25:7b:93:e6:10:5a:
90:14:6a:9d:4d:6b:d2:a0:ce:0c:da:d9:6c:44:0c:
c5:49:27:84:25:72:7e:ea:1f:bc:54:1b:e4:cc:cd:
82:15:70:cf:10:03:60:f9:c3:d7:53:3f:e3:1d:b5:
dd:86:36:71:8c:78:e0:7a:6a:1e:5d:6f:15:ed:5d:
fd:dd:86:6c:8c:b7:e4:59:fb:de:2b:e7:1a:e7:8e:
e3:8e:fb:e6:48:20:ec:7b:87:d9:b6:9c:07:23:9a:
f3:e5:11:05:5a:10:d7:13:76:b1:92:9e:6d:d3:36:
2d:df:24:5e:78:26:ea:ed:f4:9f:a3:15:6a:20:8e:
46:0c:63:71:41:0c:47:5d:7e:36:2a:18:3f:a5:ca:
20:87:3f:6d:07:30:90:49:d7:af:66:ab:19:82:10:
e2:22:d8:bd:45:6d:2f:da:af:23:8a:2e:3a:b7:f4:
2b:74:a9:67:4f:ae:12:5d:7a:af:dd:3a:c1:6f:76:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:9F:74:64:5E:BB:A8:75:BF:7F:7F:3E:4C:8C:AB:EB:59:0F:57
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:5e:4a:f5:ba:e1:a6:79:3e:f5:27:d2:e4:ff:52:e3:68:
ff:53:ba:c0:2e:ed:0e:fb:e5:16:fe:c3:a5:c2:fb:dc:a5:e4:
6b:34:ab:76:12:e3:ec:15:90:63:26:14:dc:2e:6b:ee:50:2b:
37:54:2a:ed:b2:10:86:58:7b:10:e4:d7:d2:b3:da:9a:17:97:
f4:d7:c1:72:55:72:5e:91:ac:38:38:ae:7e:5d:ed:6a:cd:0d:
80:5b:bd:3f:9d:2d:2a:9d:04:93:10:4c:36:c5:3b:7b:dc:a1:
50:34:7e:8b:5f:69:79:8f:44:ca:ea:74:53:88:aa:93:03:30:
5a:b3:6b:39:12:5f:15:0e:a4:4c:20:3b:df:41:b6:ea:bc:26:
b7:b7:87:3a:09:be:a6:35:70:a3:40:23:2c:d1:72:87:a0:72:
29:c1:7c:67:25:3e:d9:28:67:b3:f1:24:6b:b5:7a:93:29:16:
35:98:e5:32:fd:c5:01:e5:80:16:7d:5d:74:5d:bc:0a:27:c8:
0d:8d:0b:44:2c:83:61:a0:a2:39:ba:7d:fb:ca:c7:ce:e1:bf:
3e:a4:6a:71:55:96:9b:4a:04:3d:99:31:60:1b:4d:37:b8:8b:
f5:50:6d:b9:5a:fa:f2:4e:74:6d:a4:cf:57:0e:ec:45:d5:70:
9f:af:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:49 2026 by rpki-client