Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: VyI1tNhGHMQNo5n79MEs/PQVud2ORSAUyfbSHAk/0HM=
Subject key identifier: BE:4D:ED:58:71:45:D1:78:38:C9:E9:3B:B0:C2:8F:13:E0:9A:11:02
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019D2960D1598D89C7BC3862537E2F9675B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1660
Signing time: Thu 26 Mar 2026 09:01:44 +0000
Manifest this update: Thu 26 Mar 2026 09:01:44 +0000
Manifest next update: Fri 27 Mar 2026 09:01:44 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: d/u5DhXv7UNOnQRcbryUucfumxe/ArJ8XDplTYzZCrQ=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d1:59:8d:89:c7:bc:38:62:53:7e:2f:96:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Mar 26 09:01:44 2026 GMT
Not After : Mar 27 09:01:44 2026 GMT
Subject: CN=be4ded587145d17838c9e93bb0c28f13e09a1102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:f2:56:dd:d7:ab:c3:a5:13:61:72:6a:c5:
b5:b4:39:c5:43:73:b3:48:7c:66:0e:48:0c:32:49:
b3:03:37:c8:31:da:19:a4:4f:14:9b:70:bb:2a:6d:
b8:dd:64:2b:bb:b6:c6:e6:1e:c3:c8:9a:bf:5b:e6:
b3:0e:8e:eb:e5:64:d8:f8:3e:4a:e1:82:02:3c:50:
cb:6f:77:86:da:e1:34:8b:86:99:02:ba:1d:2c:89:
52:8d:c9:59:83:2c:1a:76:d4:13:84:0e:f0:46:ab:
b8:d7:63:46:d5:22:9e:a6:55:68:c7:06:03:e7:68:
90:87:70:7f:06:63:0c:c8:c5:bf:4b:d1:8f:5a:b3:
90:8f:d1:14:a6:ca:8b:3a:43:7d:5e:84:cf:73:14:
2d:83:a3:69:49:9f:e5:20:17:bb:8d:df:a2:d3:28:
84:9c:31:f6:4b:65:c2:09:4c:5f:f3:e4:03:e0:93:
3a:33:12:2e:13:9c:56:75:2d:a1:a0:2d:f9:7a:95:
76:69:63:1e:e7:25:62:0d:77:1d:d6:f6:27:63:c9:
29:dd:d8:39:19:01:fb:4d:94:82:85:e0:5c:24:69:
cb:c0:e6:9f:c3:6b:9d:14:02:6e:e8:1c:a2:44:f2:
2b:90:90:43:cc:f8:c8:6d:17:e2:ae:61:75:6f:c0:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:ED:58:71:45:D1:78:38:C9:E9:3B:B0:C2:8F:13:E0:9A:11:02
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f8:99:f6:43:73:eb:0a:ad:6f:7b:97:4f:94:af:5d:e5:4b:
d2:a6:b1:62:e1:ed:9a:26:93:a6:6a:f7:46:9d:98:a4:92:84:
98:93:75:5f:cf:05:15:b0:c8:49:0c:63:77:2a:13:93:1d:ad:
2c:7b:01:09:b5:61:09:99:86:d3:f4:9c:9d:ef:43:14:36:2c:
b9:8f:e3:e6:44:be:f8:b9:ee:3a:32:76:5c:91:1e:7b:df:27:
ab:4e:df:98:94:e2:e2:f0:80:61:2c:e8:89:1d:28:49:58:a4:
b8:fb:18:75:e2:7f:dd:1c:34:9c:d0:e9:c9:17:3f:ce:81:5e:
28:41:1d:91:ae:a2:16:bd:8e:08:26:1b:31:b7:3a:ed:e9:3d:
f5:e0:b6:ee:72:b0:37:98:d1:08:24:cc:50:00:77:c6:87:bf:
eb:59:73:4f:43:b3:e9:48:61:82:6e:b0:60:83:59:61:59:93:
03:9a:bb:ef:f4:4d:30:be:07:3f:9d:7f:d0:c1:7e:01:05:f4:
52:60:ba:2e:21:02:31:2e:f9:47:c2:f5:93:d5:5f:00:8d:fa:
b0:fd:7a:45:a5:cd:44:ab:ae:4e:bd:a3:a9:07:9d:e0:84:a6:
7a:09:bc:ab:0d:a3:36:cb:83:ae:e4:e2:89:f5:fe:c2:3b:b0:
ca:e3:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:25 2026 by rpki-client