Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: NhnBGcodZSEUuw81KwniMjkGrf7Wuu2xB8eRw4JKAwU=
Subject key identifier: D3:55:09:6F:5B:B6:31:05:FF:A1:3C:68:F3:BB:73:44:D4:51:67:DA
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01A0E02A860C940D812F5D96A41EC50C7C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0A1E
Signing time: Sun 27 Sep 2026 00:01:18 +0000
Manifest this update: Sun 27 Sep 2026 00:01:18 +0000
Manifest next update: Mon 28 Sep 2026 00:01:18 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: dGCItsCFS9Pi7UnixN7cyRejOXW+Ab3sXATuS4UljQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:86:0c:94:0d:81:2f:5d:96:a4:1e:c5:0c:7c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Sep 27 00:01:18 2026 GMT
Not After : Sep 28 00:01:18 2026 GMT
Subject: CN=d355096f5bb63105ffa13c68f3bb7344d45167da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:c1:94:1f:b9:b1:34:29:48:2e:7d:2e:f8:
b7:49:d6:61:23:5a:3e:d6:32:fb:90:e3:50:b0:c6:
2a:1f:66:4f:f4:b5:29:91:70:3b:00:ca:4d:e4:dd:
22:47:53:b1:36:d7:c2:b3:a4:d5:97:12:68:ef:8f:
d3:de:8d:52:bc:73:3f:95:3d:23:33:1a:e9:73:61:
c4:18:3c:69:7e:59:88:38:ca:ff:b0:5d:63:8a:b9:
64:45:2c:cb:90:68:cb:d1:97:1c:8e:a5:c2:60:8d:
97:53:41:4c:fc:fb:09:fc:6c:36:10:4c:f6:ff:78:
bd:3d:77:54:2b:46:43:40:11:cb:d9:f1:43:8d:e0:
e3:b7:2b:31:78:a1:53:a3:3d:15:3a:76:b5:39:6b:
39:df:53:20:0e:a5:7b:90:28:d2:40:17:f0:fb:4d:
6f:f4:85:cd:55:a5:5c:da:3c:3e:83:4c:ae:21:81:
ba:7b:ec:9a:c9:9a:ce:9a:26:ca:c6:42:77:5e:3d:
9e:68:89:bf:22:3f:2a:29:59:31:f7:61:16:e1:61:
ce:a7:af:8c:45:a1:74:06:c6:33:e2:5b:c5:f9:c2:
2b:57:cb:a8:e1:b3:23:17:f1:0e:dd:44:f9:81:2d:
80:f2:3a:5d:3d:84:61:ee:64:81:da:ff:20:30:47:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:09:6F:5B:B6:31:05:FF:A1:3C:68:F3:BB:73:44:D4:51:67:DA
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:44:88:b5:1f:3e:d7:1f:0c:d6:9f:23:46:8a:73:44:5d:6d:
fb:bc:61:c5:67:de:d1:68:c8:bd:38:c6:00:ec:ac:f8:2d:b0:
56:2a:38:eb:52:b4:8e:04:58:ed:2d:9d:29:d6:3b:52:f7:1c:
2c:37:fb:47:f5:46:5e:c6:fc:ca:58:7a:59:0a:76:6b:21:05:
e0:5a:7c:39:b7:ea:cb:25:c6:23:d0:c2:11:6e:41:3c:db:b2:
94:0a:31:43:89:96:d2:fa:79:5d:9d:55:23:e4:62:cf:f0:6f:
db:29:97:f2:83:fd:a8:2d:57:60:20:7d:9c:e1:be:35:9a:fe:
6c:43:0f:8b:a1:e6:c2:63:7a:7d:1b:9d:d6:48:77:4f:55:e9:
e1:f7:58:45:ed:f0:45:c7:18:35:57:28:bb:19:67:13:3b:9e:
3b:c2:db:48:2c:60:47:bd:13:4e:b9:33:09:f8:f9:f7:87:8d:
24:4d:95:8e:89:fc:38:ca:07:22:6e:07:b7:c5:97:b6:d7:81:
82:4b:01:56:fd:1c:b0:01:05:22:d8:be:6a:cd:29:62:f1:16:
b9:b6:9e:ba:7b:8f:a4:81:24:2f:87:03:39:77:91:06:d4:2d:
ab:48:e5:51:46:f8:13:79:55:e2:b5:98:da:58:34:22:67:5a:
06:06:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:10 2026 by rpki-client