Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: sNDDhRC8Et3CbWuFc94nSn6O/RL+Jy2Gyoi9GOxoS3w=
Subject key identifier: B6:53:9A:47:31:1C:08:98:3C:01:BA:59:71:62:74:DC:77:6A:52:BB
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019FABD0CB4F01F8008010464D8E15C707FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:15 +0000
Manifest this update: Wed 29 Jul 2026 03:00:15 +0000
Manifest next update: Thu 30 Jul 2026 03:00:15 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: InW1wJ9K4qVUnwuuwQbbK8mtm8k3QEKFJ7sEXEhPLtw=)
2: _ofD7n-Meqqb5bqWLv3YqaM07G8.roa (hash: zCDjcJpSLZxTQHG9wh0JcogQKCsQcbkZZ0W0LNsrTrY=)
3: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:cb:4f:01:f8:00:80:10:46:4d:8e:15:c7:07:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jul 29 03:00:15 2026 GMT
Not After : Jul 30 03:00:15 2026 GMT
Subject: CN=b6539a47311c08983c01ba59716274dc776a52bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:18:7c:ac:cc:91:7e:0f:32:2c:7d:71:66:
d5:09:01:a0:af:fb:f1:27:9d:2c:66:54:9f:4e:55:
9a:20:67:c6:a0:85:a1:0b:eb:f3:00:36:55:2d:17:
83:51:98:56:fe:5f:51:b6:e5:98:33:e7:cb:fa:a9:
99:b2:c2:29:5c:9a:f7:4e:a5:b3:b0:51:f6:b9:00:
2a:0d:a0:93:3b:9b:8a:06:b6:95:ef:ad:66:5c:34:
61:c0:69:f1:37:a7:63:9f:d1:3b:b0:f4:90:ec:f5:
15:d3:97:bf:70:16:1b:0e:81:70:7c:6c:03:a4:65:
0a:c7:e6:d4:ff:e0:58:10:7c:0f:32:5b:ba:95:7c:
69:89:73:a2:24:51:7a:2a:b0:32:fd:04:d1:7a:ee:
2c:5a:4d:ab:b8:b8:b6:c7:4e:8a:00:28:53:56:ae:
66:8d:e5:e5:1e:4b:86:62:50:26:d6:14:41:55:67:
f9:c4:56:af:48:ab:cb:74:74:fe:73:25:a8:0b:b2:
a2:df:36:1f:e7:b6:15:23:53:25:6c:18:62:53:b2:
8e:fa:d0:89:02:52:c9:17:a1:91:6a:c6:82:bf:7c:
e4:b8:29:20:66:9f:f2:36:67:a2:a4:08:17:ac:9b:
0d:9f:fb:f6:68:2b:7c:49:e3:4a:1b:14:62:b6:ad:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:53:9A:47:31:1C:08:98:3C:01:BA:59:71:62:74:DC:77:6A:52:BB
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0b:ce:6a:08:3f:d2:e6:d1:71:09:8e:25:a6:56:71:2f:68:
f3:e1:97:ef:1a:1a:54:eb:bd:34:52:4f:6a:fc:c2:f3:bd:43:
53:eb:44:0c:f4:8c:74:54:ec:3b:bd:ed:8a:f8:a6:b3:a6:05:
ea:22:56:40:84:f7:1f:f8:48:89:cd:31:d9:0e:98:fc:f3:1a:
16:c3:8d:a3:e8:d1:35:f5:cc:bd:d7:d3:2c:a8:2b:95:fb:48:
e5:02:87:dc:ae:be:91:00:c9:89:51:9b:24:aa:a4:b5:91:7c:
73:a7:a0:ed:21:82:ba:5a:7d:2d:df:60:a3:9c:24:42:fd:22:
92:0b:5a:23:64:b9:cd:bf:0f:a2:2a:10:c7:a4:64:39:6a:27:
5e:8e:b5:8e:8f:71:6a:59:70:84:16:89:39:82:fa:37:03:f6:
25:73:a8:d9:c5:f7:20:ce:2c:d8:15:71:76:5a:cf:2b:ae:03:
85:cf:73:f6:78:d5:60:f4:61:63:aa:93:5f:b0:10:d8:8a:27:
da:18:bb:a5:86:59:5f:7e:5d:70:1d:d1:d1:0c:02:e5:db:cb:
52:27:1a:fa:8e:ad:6a:71:aa:31:7b:e1:bd:2d:c8:25:d3:fb:
6b:b8:f0:6a:43:a8:d6:5b:91:cd:47:7a:91:24:71:07:f7:7a:
73:15:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:47:57 2026 by rpki-client