Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: GidYLrbaFQpX2dK7hb70kXWeTTesqExcJWQ4VwNvRuY=
Subject key identifier: 37:B9:8B:B3:29:28:45:D8:92:43:73:A4:13:FA:A3:27:53:B1:F4:FC
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019CAED9BB1C69113ACDD778B2252655B37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:00:30 +0000
Manifest this update: Mon 02 Mar 2026 14:00:30 +0000
Manifest next update: Tue 03 Mar 2026 14:00:30 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: XN7DcjYLMdzVmusAUzXMYCxtk8co7/2WvEctK2qIFss=)
2: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:bb:1c:69:11:3a:cd:d7:78:b2:25:26:55:b3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Mar 2 14:00:30 2026 GMT
Not After : Mar 3 14:00:30 2026 GMT
Subject: CN=37b98bb3292845d8924373a413faa32753b1f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:4b:9d:f5:c9:84:4d:72:71:0b:32:07:d5:
70:da:bc:c7:41:2e:e1:0c:ab:8a:23:88:68:f4:b2:
8d:a5:de:b5:12:95:c9:be:94:cd:3a:c9:a0:41:ae:
71:7d:6e:01:da:b8:42:fb:af:44:06:12:ba:5d:7d:
16:60:65:ec:0d:83:b7:d2:31:cf:f1:9f:4c:7d:10:
55:bf:9e:50:c2:f7:4e:0b:9e:65:22:c4:b3:74:61:
6f:28:8b:89:88:4b:f6:c7:f8:37:d0:0c:4a:13:16:
ca:52:68:8d:70:7d:48:db:7f:25:2f:1a:df:9c:c4:
c9:c9:79:2d:3b:89:32:6c:8b:a5:b8:0f:8f:f2:ad:
02:d4:33:59:53:41:0b:6d:61:64:8b:81:c7:e3:dd:
a4:e4:f2:b8:83:c0:3d:68:54:ed:b9:92:fa:13:76:
e2:02:a2:c4:d3:77:82:48:43:1a:82:d8:d4:03:72:
29:27:ea:64:31:b1:83:d7:8a:d9:5f:c5:2c:bb:9a:
8b:e2:2d:02:1d:2f:20:1c:0b:ed:d4:2b:cb:35:7b:
cc:33:1e:b6:6f:96:9a:01:f1:cd:29:8d:e1:d4:96:
d5:dc:c7:bc:aa:b9:f1:ca:8a:0d:c5:f5:54:84:c7:
83:60:b9:b9:e2:02:09:23:0f:b9:d2:5b:14:73:83:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:8B:B3:29:28:45:D8:92:43:73:A4:13:FA:A3:27:53:B1:F4:FC
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5c:1e:f3:31:59:5e:50:15:bb:7b:66:99:60:57:c2:46:b5:
26:08:fe:da:84:23:e3:3a:b3:1a:60:13:40:2a:26:27:6b:e6:
b0:fa:72:b3:96:b8:4b:2b:9d:5e:06:bf:34:69:b5:85:3e:dd:
39:7f:cb:27:81:70:c0:46:ef:b4:a2:b4:4f:dc:d7:d3:68:21:
dd:cc:7f:07:6d:f2:06:2c:46:be:f5:53:d8:cb:cf:19:85:00:
99:70:bb:a6:e3:0f:d6:cb:b2:30:f5:c5:33:39:86:1f:4f:99:
88:b2:08:fc:71:a8:ce:c6:88:f3:58:62:20:c5:2d:94:c5:f0:
e9:fd:5b:81:9b:62:7e:2c:4d:b8:27:00:d0:4d:5d:6d:9e:99:
4b:f3:c5:9a:ca:ba:06:ae:00:95:e8:41:65:d5:16:1a:cf:68:
50:1a:20:05:af:f0:eb:ba:88:e1:73:19:17:94:14:f6:41:1f:
16:b3:00:80:a8:4f:30:fc:60:80:77:4f:fb:58:24:7a:0b:30:
7c:c4:54:01:97:7e:eb:50:d8:c5:4b:ab:d9:cd:3f:40:c1:15:
8a:4a:b8:85:52:5b:0c:28:af:fd:28:29:85:23:5c:4c:d4:fb:
03:a0:ed:f9:a1:91:75:fa:5e:b3:c6:9f:e9:a1:8b:7d:6f:37:
fd:f0:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:24 2026 by rpki-client