Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: mly3iiPQ3jDbKco45JmlJsnPxwd329JJo7X7OlID17k=
Subject key identifier: CB:29:3B:4C:40:54:E9:2A:8F:EC:78:C6:B4:A9:F3:0E:BB:C7:FC:87
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019E20922B570EF083DE58092DC3E1CDFB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 16E0
Signing time: Wed 13 May 2026 09:01:50 +0000
Manifest this update: Wed 13 May 2026 09:01:50 +0000
Manifest next update: Thu 14 May 2026 09:01:50 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: wZYUpsu3qmTnd/Fbp6pmmZUanQrIvYeSV0i7pZPLIFI=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2b:57:0e:f0:83:de:58:09:2d:c3:e1:cd:fb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: May 13 09:01:50 2026 GMT
Not After : May 14 09:01:50 2026 GMT
Subject: CN=cb293b4c4054e92a8fec78c6b4a9f30ebbc7fc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:26:41:53:32:35:6b:a5:08:ce:e5:5c:7e:
c0:62:ec:b7:c9:f9:48:7b:56:86:14:e8:f6:76:0f:
80:d8:0f:be:da:57:67:4c:ad:f9:45:5b:d6:71:00:
ca:30:56:db:fa:20:07:22:91:27:c0:f3:44:4f:57:
8d:35:63:84:51:73:09:2e:f8:54:1b:f3:46:b4:7a:
7a:6f:99:49:a2:06:a6:ee:bd:29:77:a1:46:60:9b:
3d:8e:a3:10:9d:8c:27:7a:2b:70:c4:3b:c7:a4:82:
5f:68:2f:9a:1e:cd:d6:2d:98:2f:c4:9b:73:5e:12:
18:ed:3a:b9:09:0d:5b:11:86:95:92:10:be:1d:76:
61:86:5b:42:a0:22:58:1d:e0:4d:df:94:14:e0:40:
48:25:99:e4:80:a7:ea:0f:30:e2:18:e6:a1:2a:92:
e9:3f:37:42:ae:11:48:14:32:77:4a:6c:e7:2a:87:
cf:aa:b7:35:1e:e8:a1:27:a3:71:22:b0:5e:e2:ea:
c9:fe:e8:bf:22:f2:9a:82:46:b0:e1:37:76:2a:6e:
44:93:d3:f3:01:03:2e:4d:29:fb:8e:30:ca:be:e4:
10:3d:fa:86:97:85:e4:ce:9b:38:21:b6:c9:6e:86:
77:2f:aa:ae:b3:d9:59:89:16:6f:29:d2:4a:2e:cc:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:29:3B:4C:40:54:E9:2A:8F:EC:78:C6:B4:A9:F3:0E:BB:C7:FC:87
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:d5:0c:a5:8c:f7:90:ce:c0:31:c5:dd:a2:f5:75:09:55:
1c:f7:db:31:0f:ab:6c:84:b3:b3:9e:6d:fc:46:5c:c7:cd:8f:
4e:ba:2e:62:bb:65:cc:aa:08:a4:45:3b:d0:39:36:27:48:a5:
1f:36:a2:e6:f4:a3:d6:96:e2:7c:c3:62:b3:92:93:c4:2a:dc:
bf:d5:38:ad:24:d5:3b:65:6e:5b:f6:b3:43:2a:11:0d:35:c9:
f9:94:c6:50:81:c5:a9:02:01:17:1e:42:b5:ec:fc:1b:ee:cd:
c7:1b:16:fe:19:9a:30:1c:cd:de:0f:bd:2c:f4:6f:3f:20:49:
f6:e1:26:a5:88:1e:ac:fb:84:69:eb:1b:e7:2a:57:34:c8:60:
41:89:55:b1:89:19:91:b7:ea:d0:24:63:f0:c8:4c:f8:c3:d9:
86:2f:c0:18:27:73:a5:fc:b5:cc:9b:aa:a9:6f:02:2e:40:53:
69:ca:2f:dc:5b:04:ae:8d:10:02:82:38:40:37:1b:c1:fb:57:
85:5f:22:ec:df:ef:43:bf:cc:7b:e9:c9:0e:65:06:a4:56:5f:
a4:83:ec:3c:3d:b2:ee:c9:5e:90:f0:ec:ae:09:d4:a1:35:18:
75:35:e0:1f:75:f2:1e:75:51:9b:96:29:f1:99:45:e2:53:c6:
d9:0e:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:24 2026 by rpki-client