Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: gSE4s9qG7bNRVP2nz95pb9qjB3Qr+h01PVuRDD+H5GI=
Subject key identifier: 07:87:6E:F3:56:C4:9E:96:AF:92:D0:71:AC:26:EE:30:4F:CA:21:C4
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019F92B6A56BFE75E20A5C7045A347F2652E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:01:11 +0000
Manifest this update: Fri 24 Jul 2026 06:01:11 +0000
Manifest next update: Sat 25 Jul 2026 06:01:11 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: rEeAD9YZjYvLvNl2X+t7D/QA9wBZ/b99eGfvE5H4WBI=)
2: _ofD7n-Meqqb5bqWLv3YqaM07G8.roa (hash: zCDjcJpSLZxTQHG9wh0JcogQKCsQcbkZZ0W0LNsrTrY=)
3: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a5:6b:fe:75:e2:0a:5c:70:45:a3:47:f2:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jul 24 06:01:11 2026 GMT
Not After : Jul 25 06:01:11 2026 GMT
Subject: CN=07876ef356c49e96af92d071ac26ee304fca21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:ff:59:07:26:bd:95:93:34:26:2a:a3:54:
94:08:dd:f3:12:b6:b3:b6:4e:22:38:97:bf:dd:44:
0a:cb:f3:e4:6c:ad:e5:66:59:bf:ac:7d:1e:48:a1:
1c:ee:d6:42:c0:ee:51:ef:cf:b6:dc:6c:44:9e:9f:
72:df:a2:76:4d:d8:f2:e8:7a:d6:43:7e:56:ea:d9:
62:be:b3:94:50:8c:d7:ad:5b:10:66:e3:56:eb:3c:
7d:37:b7:2c:08:fa:7d:1d:cd:33:9a:da:b9:01:a2:
2e:e4:ff:46:de:0c:04:85:a0:2e:b4:38:9e:c1:7f:
62:60:ba:e3:9d:8c:0c:fb:f8:2b:ed:52:0e:d9:1f:
b5:01:c4:fc:de:f4:09:cd:a3:4a:7e:41:48:3e:a3:
5d:bb:11:93:19:20:a9:8d:24:d7:0c:68:d2:7f:84:
d2:1e:ad:b0:0b:0c:e7:9a:d4:e7:58:73:13:4a:31:
94:47:fb:0c:0d:07:30:a7:a1:70:33:5d:d4:fe:c6:
8b:f6:a9:01:27:49:fb:5e:6b:90:af:7e:9a:d9:9e:
49:7d:33:b4:69:b2:1f:b6:da:5c:fb:8b:9f:b0:f4:
3c:cc:6b:f3:d4:fe:a5:dd:88:5a:19:e9:12:80:d5:
14:e0:60:45:77:1c:8e:5a:d2:58:2b:85:5d:b9:dc:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:6E:F3:56:C4:9E:96:AF:92:D0:71:AC:26:EE:30:4F:CA:21:C4
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:27:44:d1:4b:d5:a8:1b:a0:d0:ce:48:f9:e3:bc:2e:ca:
e0:8e:bb:e9:99:23:9f:fb:8c:08:6e:d1:bf:1c:46:5b:1e:e4:
82:00:d6:02:d8:cc:54:10:9f:84:31:0d:b2:9a:76:f3:f6:32:
63:97:50:60:b2:9d:ba:0f:f2:8e:03:09:f8:c7:2f:01:02:be:
73:28:65:7c:80:9d:77:a6:43:c9:c3:83:42:06:a2:4a:6f:02:
4b:a7:23:d1:01:33:84:80:24:22:bc:7c:59:82:2a:6b:28:1c:
f5:85:aa:75:b6:50:ac:70:a3:f0:42:63:3d:38:99:f7:38:37:
05:ce:7b:4c:fc:9b:0c:82:93:37:ad:9f:8a:68:cb:f5:97:d2:
13:ad:26:43:7c:f7:ed:f0:63:7f:6a:6f:ba:22:2b:ef:e5:ff:
58:30:b5:dc:7e:ca:76:78:f7:a0:05:e3:12:c7:d8:69:b8:80:
06:d5:3c:ca:7a:8c:ba:38:96:96:6b:2d:d7:71:14:20:9e:e8:
d3:16:72:d0:52:6a:cf:b1:fb:ac:b3:74:12:57:7d:de:7a:35:
a9:26:f5:81:d8:5a:15:88:17:af:59:5c:22:50:91:99:9e:c3:
cd:dc:d1:09:46:54:00:12:55:eb:21:c3:f3:a2:1d:ed:be:e3:
e4:a5:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:10 2026 by rpki-client