Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: /fsk1DAqVLLkBKNyj9C/UfF7st8itBgsiXSavpvspL8=
Subject key identifier: 7A:09:78:39:BA:C7:E5:49:CE:F8:90:A2:F1:84:BA:70:F1:1D:EA:C7
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01A0DA5FC982B56F16FF97BEE655E56D3F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0A1B
Signing time: Fri 25 Sep 2026 21:01:45 +0000
Manifest this update: Fri 25 Sep 2026 21:01:45 +0000
Manifest next update: Sat 26 Sep 2026 21:01:45 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: 7g2Hql+Yaw49i2jZaZp1HBLeF9o0Y+YspTScEqyTSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:c9:82:b5:6f:16:ff:97:be:e6:55:e5:6d:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Sep 25 21:01:45 2026 GMT
Not After : Sep 26 21:01:45 2026 GMT
Subject: CN=7a097839bac7e549cef890a2f184ba70f11deac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:e3:2e:bc:3a:53:03:6d:cc:b9:3d:73:78:
51:76:12:e2:70:6c:2c:f4:6c:34:73:c8:ce:f1:3c:
1c:a5:e7:27:d6:d6:dd:38:ba:6b:a0:27:03:d7:f1:
8d:15:bc:89:91:ea:18:df:26:af:06:d3:a4:b2:d9:
9c:f5:78:cc:91:d4:77:c6:ed:6a:4a:37:f5:2a:eb:
0d:c7:71:70:a2:1b:ef:bd:7b:62:19:01:4f:2e:f7:
98:51:c7:5a:99:2f:75:ae:a2:02:54:3c:50:9e:aa:
a6:89:de:bb:62:46:59:16:c9:b0:2f:38:d5:4c:bb:
02:27:b9:82:70:29:6e:2a:3b:d9:97:4d:f7:53:33:
4d:6b:22:45:49:13:d3:6c:71:b9:8b:a2:43:ae:0e:
03:6b:46:24:70:79:b9:e9:21:6a:f7:2f:41:6f:79:
a0:dd:ce:cf:64:14:9b:77:3b:cd:73:56:c4:a4:2d:
b4:ee:6c:d5:61:bd:aa:92:06:5a:a3:38:02:8d:6b:
9b:04:2b:cd:02:b0:04:8f:4f:ef:23:92:a3:f0:ae:
93:80:ff:c4:81:74:73:50:72:91:02:72:e1:b2:59:
ac:6d:5f:16:31:ca:df:bc:54:56:56:e1:e0:62:84:
1f:8b:9a:5f:c1:1e:04:67:fa:b4:63:a3:20:8a:70:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:78:39:BA:C7:E5:49:CE:F8:90:A2:F1:84:BA:70:F1:1D:EA:C7
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9f:8f:cb:b1:88:a2:55:d7:b6:92:c6:20:0b:18:15:1b:28:
0a:f3:17:9c:ec:08:c7:57:66:aa:33:ef:e4:29:1d:d3:47:22:
e1:4f:76:38:b8:0d:51:9c:0d:9e:06:36:08:d0:00:65:f1:70:
57:40:92:e3:2b:fe:f7:b8:8e:9d:51:08:c5:02:16:df:f3:f1:
e3:7a:d6:21:20:ca:54:26:f9:5e:a4:ed:ec:0a:77:66:f8:50:
a6:f2:4a:49:e4:c9:d9:59:ff:f5:da:4f:f3:42:5d:78:f9:d3:
0e:cd:aa:69:75:9b:9f:64:ff:91:50:43:8a:16:e7:45:62:47:
03:a9:b3:5e:2c:a5:7b:52:9c:c2:cc:d0:28:7c:d8:ef:59:ec:
7d:ef:38:ff:87:67:6f:63:d7:3d:90:30:b1:fe:04:21:34:b7:
58:5f:0b:58:38:8c:08:6f:4b:5d:b4:92:35:8c:14:05:9c:c1:
80:19:9b:13:17:36:52:80:1c:f4:52:11:b2:88:d9:41:cd:23:
f9:c1:37:43:32:31:42:9a:c8:22:b3:fe:5e:38:e1:23:da:46:
e7:1d:7f:ca:08:aa:23:fe:8e:47:bf:d1:17:c5:23:ca:0a:47:
d2:b1:6b:08:f7:f4:51:d2:12:dc:28:2d:02:1f:e3:13:18:9b:
ef:22:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:20 2026 by rpki-client