Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: YRu9nwoUyfhzl4tIiKa6qdZQYoT9/Sv5wQFaF8qq75E=
Subject key identifier: 62:31:8A:7F:28:FA:CC:69:AE:47:D4:2B:05:24:63:29:3E:F3:74:87
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 019D265F62D95E10A27DEE821B6173A820D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 0C32
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: TPURnSlmjEcQdfzVCP/Ji3ghFNY2R48d6ys+mxd/XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:62:d9:5e:10:a2:7d:ee:82:1b:61:73:a8:20:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=62318a7f28facc69ae47d42b052463293ef37487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:02:5b:e8:fb:12:fd:d7:c7:5d:a9:dd:a0:
0b:c5:ef:96:ad:2c:e7:78:cb:8c:06:d3:b3:98:26:
d0:51:d2:2b:3c:f3:a0:39:68:cc:d1:d0:2a:df:e5:
0b:cf:24:04:5f:30:4f:be:11:8f:99:b2:9a:28:b0:
f8:2b:e8:45:b0:d4:01:3d:11:5f:93:5c:b4:89:b3:
84:02:64:96:43:30:dc:35:eb:04:21:f4:b9:f8:ad:
9c:29:0b:46:ff:e2:20:d2:60:c1:b4:a4:ea:ab:50:
7c:9b:96:15:e7:4b:4d:53:e5:82:7e:77:1b:f7:ef:
20:56:23:e8:9b:4d:11:d9:e0:fa:1d:99:ca:13:31:
50:c8:7b:37:44:b2:53:57:9a:65:92:c9:2a:98:bc:
3e:29:fb:c3:88:f6:0b:32:d6:51:4b:0e:86:15:0d:
85:c3:1d:41:93:ec:f2:c8:38:bd:d9:17:02:60:91:
33:92:6a:05:0b:02:67:3c:ce:65:0b:1c:63:ee:4c:
06:07:2c:81:ed:34:0c:9d:84:40:10:6f:75:63:93:
3a:aa:1b:e9:46:7f:af:1f:b3:38:57:07:57:d5:5b:
88:95:77:8d:fb:46:42:31:ed:30:7d:b1:5c:d1:5f:
24:76:b5:bd:6b:21:dc:b6:83:87:4d:10:6c:49:e8:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:8A:7F:28:FA:CC:69:AE:47:D4:2B:05:24:63:29:3E:F3:74:87
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:1b:a4:e6:d0:dc:b3:2c:be:34:fe:87:9c:a1:8c:31:ec:
01:f4:49:0d:30:26:0b:7b:64:28:3e:38:b7:a0:c0:bb:45:a7:
28:92:ed:7c:09:89:ae:59:3f:42:34:93:fb:13:fb:89:aa:02:
06:21:ec:39:3f:9c:1d:12:f2:36:1f:df:80:06:1f:a0:8a:27:
c7:96:d4:b1:af:15:10:f8:49:b8:0c:fd:16:f5:01:4c:cd:25:
c5:02:56:4e:37:f1:da:b7:c4:f5:6d:77:60:ac:35:3a:0d:c8:
3f:20:9f:68:03:14:c9:43:a8:26:e1:2d:fa:76:e3:d8:8c:5e:
96:ee:80:23:65:50:6a:9b:25:e8:01:64:1e:f6:8a:39:26:c9:
5c:53:57:75:bd:3f:45:5e:27:1b:d6:80:b6:44:26:24:80:99:
42:ad:df:95:f0:11:8d:8d:ed:db:ee:0e:68:97:ac:0a:73:6e:
31:85:e6:55:3c:33:c7:74:3e:a0:05:46:bf:47:6f:ae:14:4f:
6d:f0:75:24:6f:87:3a:c9:65:e2:c4:d1:24:db:e7:72:50:b6:
7a:d4:51:82:94:14:a8:bf:38:95:7e:3f:20:42:7d:e0:e1:d6:
a4:4e:76:7f:13:13:a5:09:79:f6:4e:bb:0a:b8:b0:43:00:7b:
f3:68:9e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2LZXhCife6CG2FzqCDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTU1NWUxNDZiZTRhZTVmN2NjZmU1YTNjMTJkM2YyYTI1
NDNiMDUwHhcNMjYwMzI1MTkwMTE4WhcNMjYwMzI2MTkwMTE4WjAzMTEwLwYDVQQD
Eyg2MjMxOGE3ZjI4ZmFjYzY5YWU0N2Q0MmIwNTI0NjMyOTNlZjM3NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jgCW+j7Ev3Xx12p3aALxe+WrSzn
eMuMBtOzmCbQUdIrPPOgOWjM0dAq3+ULzyQEXzBPvhGPmbKaKLD4K+hFsNQBPRFf
k1y0ibOEAmSWQzDcNesEIfS5+K2cKQtG/+Ig0mDBtKTqq1B8m5YV50tNU+WCfncb
9+8gViPom00R2eD6HZnKEzFQyHs3RLJTV5plkskqmLw+KfvDiPYLMtZRSw6GFQ2F
wx1Bk+zyyDi92RcCYJEzkmoFCwJnPM5lCxxj7kwGByyB7TQMnYRAEG91Y5M6qhvp
Rn+vH7M4VwdX1VuIlXeN+0ZCMe0wfbFc0V8kdrW9ayHctoOHTRBsSehZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIxin8o+sxprkfUKwUkYyk+83SHMB8GA1UdIwQY
MBaAFDWlVeFGvkrl98z+WjwS0/KiVDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgt
MDUxY2QzMGNiY2YxLzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgtMDUxY2QzMGNiY2Yx
LzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+EbpObQ
3LMsvjT+h5yhjDHsAfRJDTAmC3tkKD44t6DAu0WnKJLtfAmJrlk/QjST+xP7iaoC
BiHsOT+cHRLyNh/fgAYfoIonx5bUsa8VEPhJuAz9FvUBTM0lxQJWTjfx2rfE9W13
YKw1Og3IPyCfaAMUyUOoJuEt+nbj2Ixelu6AI2VQapsl6AFkHvaKOSbJXFNXdb0/
RV4nG9aAtkQmJICZQq3flfARjY3t2+4OaJesCnNuMYXmVTwzx3Q+oAVGv0dvrhRP
bfB1JG+HOsll4sTRJNvnclC2etRRgpQUqL84lX4/IEJ94OHWpE52fxMTpQl59k67
CriwQwB782ieVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:21 2026 by rpki-client