Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: YRDJIzFeMk/scvu30UAviWF8+GoRP/h8SwRiPpxcg9Y=
Subject key identifier: FD:F8:8F:6A:A9:3E:FE:25:CA:01:1D:05:BA:D8:57:14:E0:FD:13:3F
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019CAFB63E872B3215541C1D2E564E165969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1621
Signing time: Mon 02 Mar 2026 18:01:22 +0000
Manifest this update: Mon 02 Mar 2026 18:01:22 +0000
Manifest next update: Tue 03 Mar 2026 18:01:22 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: sDEcvPGeSxHWsE+ONMz1lSAMQx3z6ZBicHwhIGuYF10=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:3e:87:2b:32:15:54:1c:1d:2e:56:4e:16:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Mar 2 18:01:22 2026 GMT
Not After : Mar 3 18:01:22 2026 GMT
Subject: CN=fdf88f6aa93efe25ca011d05bad85714e0fd133f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:3f:68:01:49:65:04:61:d0:c9:d4:3a:eb:
eb:f7:9c:7a:f1:43:e0:9d:9f:70:16:b3:82:21:f2:
8e:4f:b6:36:50:27:5b:af:9c:bf:2a:73:27:d0:d8:
36:00:25:47:13:cb:4d:98:3c:4a:8a:85:70:17:db:
6e:d3:bc:47:f8:35:f2:00:d6:d9:39:f5:78:9b:db:
e6:52:5b:2d:64:30:6b:4f:7a:f4:38:de:01:50:13:
3b:e9:3f:2e:e3:6d:20:1d:8d:f9:bf:a3:b7:9a:95:
d6:76:d6:52:72:81:36:79:da:37:b9:c4:64:79:5d:
8d:bc:10:ba:1e:5b:8e:07:35:c4:01:08:eb:81:3b:
6d:9f:34:e0:b4:51:c7:07:12:8a:29:02:24:fd:64:
de:7b:7d:73:a7:e5:96:63:4a:77:44:9b:dd:95:a0:
12:64:da:7c:63:53:d1:a6:83:4d:1e:a6:f7:47:b5:
da:1e:3f:3d:a3:38:1b:33:64:42:4d:4c:2d:56:2a:
d3:1b:27:16:e1:bc:c1:25:5a:96:39:b1:ec:91:f2:
b4:cc:4a:d8:1b:93:64:e5:07:90:12:da:23:5c:60:
09:e5:81:1b:16:f3:39:bf:2e:01:4a:d3:ca:20:72:
d5:1c:09:7b:2b:d9:2e:4f:06:08:39:5b:82:48:b4:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:8F:6A:A9:3E:FE:25:CA:01:1D:05:BA:D8:57:14:E0:FD:13:3F
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:4b:b1:ed:76:46:72:90:0f:a0:96:f3:0e:3c:00:52:9d:
9f:51:c0:3c:e3:b5:4b:88:ff:13:7b:b0:99:ba:fd:23:c9:78:
61:50:13:7a:5d:f2:1a:9c:9f:8d:04:f6:73:ac:f1:f1:0e:24:
c8:63:f3:69:c1:a5:ff:ec:a3:1b:5e:95:80:d1:3f:73:db:41:
e0:be:01:9f:9c:72:48:eb:d4:b2:d6:e6:dd:19:71:97:53:04:
16:fa:9a:6e:97:a8:0b:b2:ef:5a:f9:c2:c4:8b:3d:c0:d9:3c:
cf:66:ea:3b:9a:30:18:ec:b9:cd:6a:e2:0b:e8:ba:8e:3a:e8:
e1:1b:e4:2b:8f:10:55:a1:60:d9:bf:a0:24:71:77:cf:12:99:
b0:ea:1f:61:34:95:49:b0:31:00:33:a9:a8:a6:d6:95:57:09:
28:6b:ec:24:ea:9f:b0:62:c1:e8:82:ba:16:b0:f8:b0:85:e2:
58:ae:ba:d0:3c:91:39:cc:8f:ba:e8:4c:5d:32:a8:d2:39:1e:
c8:75:b1:36:62:9e:5d:88:b5:d2:e1:78:0f:d1:cb:66:91:35:
16:f9:79:96:1d:6e:9c:4c:27:d9:d1:5e:22:5e:a1:8e:80:06:
74:34:a1:4f:20:bc:9a:58:be:6f:a3:bb:8c:a0:c7:db:fd:32:
55:51:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:49:07 2026 by rpki-client