Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: +yN9WsgNGw+tG7uUBWp+Wm6o1iFGRLpBRptJUOoFs9c=
Subject key identifier: 70:0D:E8:7A:0E:C4:09:59:8D:86:02:2A:84:75:DF:75:F4:2E:BB:25
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019D2695E6C254717DB256645ED0D2FC5339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:51 +0000
Manifest this update: Wed 25 Mar 2026 20:00:51 +0000
Manifest next update: Thu 26 Mar 2026 20:00:51 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: BXsUyn5f/V0ymqQVW4xn0oyCGn10ZqHpp8Xi2PxB9PU=)
2: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e6:c2:54:71:7d:b2:56:64:5e:d0:d2:fc:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Mar 25 20:00:51 2026 GMT
Not After : Mar 26 20:00:51 2026 GMT
Subject: CN=700de87a0ec409598d86022a8475df75f42ebb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:9a:db:38:a9:6f:4a:87:0f:0c:6a:a9:fc:
3d:00:94:22:46:35:ad:2b:87:23:95:d0:28:e0:b1:
e7:f5:bb:94:79:c3:71:02:6e:c5:c9:12:34:e4:57:
e7:90:d9:60:ec:02:5a:e9:20:d1:ba:9c:2e:7b:0a:
d7:21:4d:c1:34:32:40:51:27:15:1e:32:f7:e2:52:
4b:2c:4d:5c:4d:da:80:80:bb:e0:ba:c5:e4:b9:41:
9b:8d:bf:1c:49:66:93:7f:5e:20:ec:a2:e9:fb:43:
eb:2d:99:b6:c1:ed:4e:54:e0:f9:49:a4:77:7e:51:
10:aa:d3:03:d6:03:e0:06:d0:3e:59:43:60:e6:bf:
a2:ad:65:3f:e7:56:80:13:2f:ac:c7:cc:46:be:60:
89:2f:49:48:96:26:8e:cd:82:cb:c4:50:29:6b:33:
2e:df:84:e0:f9:7a:15:3e:43:c2:4b:0a:99:42:ec:
52:ff:2e:8f:02:e9:67:2f:da:a3:57:11:ca:7f:97:
77:ae:8e:0c:2a:86:5b:70:08:c4:e5:09:b6:89:cf:
67:ca:8c:9b:f0:f9:f0:1c:1a:c4:87:65:c8:b5:34:
04:46:a7:e6:67:1c:a1:8a:3f:b4:66:40:64:95:83:
2a:fa:6d:fc:e7:70:83:85:85:a5:12:d3:ae:a9:61:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:E8:7A:0E:C4:09:59:8D:86:02:2A:84:75:DF:75:F4:2E:BB:25
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:33:fa:de:f2:29:2e:2d:93:56:77:37:10:d7:24:b1:ac:
76:7b:b5:49:d6:5a:f9:f5:85:4c:5c:39:5a:b2:0c:0e:9d:ea:
37:bd:56:24:db:ed:d7:ba:39:cc:4d:6a:7c:f8:2c:b3:7c:42:
60:62:28:41:d0:05:cf:ac:10:53:f3:bc:56:71:d9:d4:8e:55:
c6:34:05:eb:7f:28:c1:09:64:92:6d:92:a6:67:41:00:1d:71:
ad:ff:e4:53:39:a5:e1:1c:e9:2c:db:e3:d4:f1:47:12:d1:27:
2d:40:b8:5a:2e:16:48:b7:7b:2f:6f:9c:25:0d:87:f9:1f:2e:
9d:90:23:23:c0:dc:b6:48:b9:24:59:6c:15:92:6c:67:1c:78:
f4:54:fb:18:2e:0b:c1:61:f8:6e:6d:cd:a4:68:3d:e4:63:55:
3f:53:81:8a:95:cc:62:08:65:8b:32:18:6c:63:68:52:c4:77:
12:48:27:b0:bb:71:e1:d2:c1:99:5d:96:34:88:c2:fe:1a:c0:
d0:31:7b:da:a6:6a:6e:ca:b5:1a:ce:62:d7:45:6a:ee:ac:ae:
33:1b:c1:39:9b:78:76:93:20:00:c5:c6:d9:de:32:a4:95:76:
41:8e:20:98:17:60:9b:e8:3b:92:02:97:ea:8a:cf:3e:73:4d:
39:39:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:36 2026 by rpki-client