Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: E/KHH036tQy8pj7XMMfIKvPNh6s3NLlKPyEnX/4ufCk=
Subject key identifier: 3E:9A:0A:A4:2E:8D:53:A1:4F:DE:B5:04:47:D6:4D:72:43:11:84:7B
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 01A0D917BD6CF5D64ACFF1CCCB2786C395FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 15:03:26 +0000
Manifest this update: Fri 25 Sep 2026 15:03:26 +0000
Manifest next update: Sat 26 Sep 2026 15:03:26 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: ukI3fTEsrUoYiv7aZeUjlxThjQYQHazjpIyuPpniQIw=)
2: _ofD7n-Meqqb5bqWLv3YqaM07G8.roa (hash: zCDjcJpSLZxTQHG9wh0JcogQKCsQcbkZZ0W0LNsrTrY=)
3: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:bd:6c:f5:d6:4a:cf:f1:cc:cb:27:86:c3:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Sep 25 15:03:26 2026 GMT
Not After : Sep 26 15:03:26 2026 GMT
Subject: CN=3e9a0aa42e8d53a14fdeb50447d64d724311847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:bd:14:8a:18:bb:5c:b2:05:4e:f3:ea:30:
12:a0:d9:ea:2e:b6:00:f0:f3:6a:e1:e4:c9:41:b5:
88:71:70:bb:5c:3a:ff:8c:d0:95:87:b7:c7:48:6a:
cc:9e:e2:9f:47:58:d7:85:5e:2a:2a:f0:5f:5d:0c:
8e:d5:13:3f:e7:0d:54:c6:18:1b:82:19:31:e7:b2:
0e:cc:13:4f:db:9a:14:4a:77:62:97:44:a9:55:6d:
cb:c8:a1:2e:e3:f5:89:72:e1:d2:2a:34:ab:62:2a:
06:27:d3:39:63:43:66:25:e7:94:57:b8:05:49:a0:
03:13:85:70:7f:42:c6:bc:3e:81:a3:ec:85:c2:f6:
a7:3c:26:79:b1:3f:f7:01:4b:4d:ad:03:37:5b:69:
eb:56:7f:9e:e2:5c:14:a7:90:c6:11:d2:f5:fd:ec:
14:e6:42:1b:9c:cb:97:2e:59:f2:36:57:7c:b1:1c:
a6:e5:46:14:7a:a6:73:cf:f8:11:3c:f7:53:b0:64:
6f:cc:85:c9:6c:12:84:d1:6e:e7:a5:58:6e:3a:af:
23:47:49:d0:0c:17:53:00:f3:16:12:14:50:7b:5a:
e8:1d:23:91:e0:88:f8:6d:f0:90:59:97:38:35:9f:
07:07:fc:a0:65:95:92:e9:ac:ae:0c:06:8d:ab:e3:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9A:0A:A4:2E:8D:53:A1:4F:DE:B5:04:47:D6:4D:72:43:11:84:7B
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:e6:c8:fa:db:90:77:da:36:55:44:00:9a:13:2f:fe:8c:
0f:90:11:5c:f7:1b:46:62:26:cb:3a:d2:d2:ac:97:92:90:b3:
97:48:22:64:17:aa:36:34:f3:75:3f:0f:ae:31:83:e9:c1:d5:
6a:ac:0c:23:3e:58:2b:19:a5:ab:64:e3:3c:a7:66:53:b7:c1:
37:c0:e7:82:2a:d4:3f:1c:c4:81:bd:1d:27:66:b6:9c:fb:2a:
a3:12:ec:23:b6:93:36:97:fd:75:99:f8:e9:69:40:5e:37:90:
c0:f4:ac:56:7f:f0:25:74:9d:10:76:2c:38:2d:0d:a4:ee:1f:
f1:f4:e6:82:e0:a2:0e:62:73:83:c7:15:0d:96:32:34:07:be:
88:18:54:9f:00:df:24:ae:b2:5a:19:0f:ef:73:fa:03:c2:d4:
45:63:77:53:77:64:f1:74:a6:8c:55:4b:d0:9d:8b:0f:79:78:
95:68:8a:d2:96:18:a3:40:b7:f7:ba:b8:4e:51:f9:04:38:0c:
85:dc:a5:73:32:1c:f6:39:a0:63:f3:47:1f:03:d0:90:f6:2c:
c5:a4:c5:04:16:ad:73:d1:cb:37:8c:03:9c:c7:7a:ab:16:87:
43:27:c4:4e:1e:5c:7c:ea:5d:31:a3:56:9e:b2:eb:4f:e3:4b:
2e:57:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:08:12 2026 by rpki-client