Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: udXwKZYfNb268WeBGzl+Akh6LDVJLvQzf4049Bx6/DM=
Subject key identifier: 9F:C8:4A:55:92:FF:C1:77:E8:9F:C3:2F:A0:06:B3:2F:97:67:77:D0
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 01A1250C726EC64ABFB6A33D4FFEF68366A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1870
Signing time: Sat 10 Oct 2026 09:02:14 +0000
Manifest this update: Sat 10 Oct 2026 09:02:14 +0000
Manifest next update: Sun 11 Oct 2026 09:02:14 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: x06kJkLnnH5z7/VJ20/i5a8PTPE8cseXvt1wg0iNcPk=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:72:6e:c6:4a:bf:b6:a3:3d:4f:fe:f6:83:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Oct 10 09:02:14 2026 GMT
Not After : Oct 11 09:02:14 2026 GMT
Subject: CN=9fc84a5592ffc177e89fc32fa006b32f976777d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:c1:4f:2c:44:9a:53:18:38:c8:95:93:99:
5e:b5:ea:60:07:6f:26:bb:3d:f2:70:11:d6:ad:c1:
55:6b:4a:2a:66:ae:a4:0d:6e:a4:99:a1:9d:d9:81:
db:f5:dd:2c:78:4c:7d:9b:2f:69:84:25:e3:50:0a:
6a:55:59:cc:bf:0f:4a:6a:b9:3e:47:a6:8e:cc:f9:
3d:1e:d1:38:6c:8b:fe:75:f1:30:94:13:e2:cd:f4:
a1:7d:20:6f:c1:43:32:ee:12:f1:df:aa:71:f1:9d:
ef:ca:8d:36:31:eb:f6:8f:46:96:fe:67:0d:66:7d:
28:bd:20:3c:c0:f8:a8:2c:34:ff:07:c3:e8:7b:80:
5b:d4:a3:bf:40:cd:b7:65:59:6b:70:e2:c6:f0:cf:
58:45:5a:d7:ca:4b:2b:99:7c:9f:00:12:d9:3c:37:
13:a6:5f:a0:3d:f7:9b:cd:99:81:ee:6a:f5:b5:d7:
43:b6:fd:87:a4:8d:2c:4c:bf:9f:5f:31:48:4b:39:
95:da:3b:9d:22:b2:e3:a3:ef:73:c3:8e:4b:8c:ae:
77:f7:32:a0:04:55:5d:9f:b7:b3:0a:b5:33:ee:4c:
33:43:5f:e0:97:b8:17:5b:fe:35:ed:e1:a9:79:a0:
b0:e1:16:2e:c2:cc:ef:f0:69:fb:43:54:33:2c:35:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:4A:55:92:FF:C1:77:E8:9F:C3:2F:A0:06:B3:2F:97:67:77:D0
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:67:1d:dc:9d:f9:47:aa:ad:70:ce:20:e3:a4:f3:39:3b:b8:
d1:90:71:fe:75:ed:08:80:a4:8f:5c:2d:a7:92:be:13:35:4e:
28:01:8e:5a:cb:80:e9:04:60:70:a4:a9:ff:f0:e1:4e:40:87:
2b:ca:3f:69:16:f3:10:43:6e:c9:f8:ab:e2:bf:3a:5d:0f:48:
3b:83:fc:07:1a:92:57:99:2c:cc:38:ac:7f:c3:a5:04:5a:05:
68:53:6d:fc:65:8b:22:66:1e:fa:44:4a:5a:5e:12:ec:f4:cf:
fd:16:ba:dc:93:b1:16:9b:88:a0:4d:39:33:cf:de:06:13:72:
f0:ba:c0:a5:17:93:b4:73:85:5e:ce:f6:68:ee:f6:ba:c2:b4:
9d:fc:1a:e0:70:c3:c4:70:76:e7:18:e2:27:bd:18:fe:f4:d7:
2f:b7:6a:44:3c:1a:cb:8a:ca:4f:52:a4:34:22:f0:45:93:8a:
70:5b:9a:00:cc:51:0f:00:97:f9:5b:ac:62:9d:b3:af:ee:08:
ab:e2:40:ba:64:14:27:f2:78:5f:2b:a5:46:af:2d:6d:af:29:
ae:69:54:21:e7:91:4e:4b:c5:90:2c:c1:a4:d7:ab:1a:77:eb:
ed:7b:b6:29:73:7f:e7:5e:d2:52:99:20:5c:c3:f8:eb:c1:cc:
62:01:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:06:00 2026 by rpki-client