Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: 70eC5RE5yBhAjQtsZnBv9XrHuw/gVPEBoEnFV92WqNk=
Subject key identifier: 11:35:AA:58:D3:3E:A6:5C:CF:6B:27:8A:B7:8B:2D:EA:82:19:8C:F2
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 019D9A3E1E27811E00477D198CD79E5CB6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 0C6E
Signing time: Fri 17 Apr 2026 07:00:55 +0000
Manifest this update: Fri 17 Apr 2026 07:00:55 +0000
Manifest next update: Sat 18 Apr 2026 07:00:55 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: W1h5PjnGpqScCLWYyNm24qqFDXaDhpt+JrU5datk3PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1e:27:81:1e:00:47:7d:19:8c:d7:9e:5c:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Apr 17 07:00:55 2026 GMT
Not After : Apr 18 07:00:55 2026 GMT
Subject: CN=1135aa58d33ea65ccf6b278ab78b2dea82198cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:6e:48:45:d0:18:6b:b4:34:82:ff:0e:a5:
72:a2:bf:9e:57:42:54:00:09:86:2a:03:fe:00:44:
da:9d:20:78:ab:c4:e2:92:d5:8e:b8:43:20:60:9a:
e3:c1:6e:77:cf:21:ad:74:f4:41:7d:1a:6a:78:50:
6d:81:34:4c:cc:76:3c:6e:f9:76:bf:63:51:7c:69:
a0:9f:d6:32:73:89:a1:90:f0:78:d9:2d:85:c0:ff:
34:c2:15:e4:b4:af:c0:94:86:d8:55:99:cd:a8:05:
a3:47:9b:b8:0d:3c:9d:75:3b:1e:d2:fe:b5:e6:64:
20:3a:3b:bb:7e:af:9f:6c:e2:fd:d4:2f:fd:66:0e:
c9:f0:fe:f5:7c:41:86:7c:75:58:80:71:a3:71:6f:
bf:a0:3d:0c:9e:c5:e4:60:f2:3c:6c:b4:f8:18:16:
b8:c8:b8:52:98:cb:19:77:33:a9:41:2f:0a:83:ac:
ea:d6:1c:24:fb:04:ea:42:7f:3f:4f:7c:ea:65:cd:
24:f1:ca:f8:d5:9d:f9:71:47:4b:3d:0a:46:e4:40:
61:32:6c:2a:ac:43:c0:56:2f:f3:2b:71:a9:d8:a2:
d1:73:5b:87:59:79:fb:bb:87:30:41:1b:25:29:b0:
57:50:f6:05:33:40:ff:3e:12:af:f3:12:ea:a7:3d:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:AA:58:D3:3E:A6:5C:CF:6B:27:8A:B7:8B:2D:EA:82:19:8C:F2
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:39:ff:fd:04:fe:f4:7a:80:2b:77:59:10:38:dc:0b:b1:
9d:74:fe:5d:a9:76:3c:88:b5:d7:eb:b4:4a:00:89:e2:74:58:
e4:c9:16:92:35:cf:a1:c8:3e:a5:ca:ec:9d:7c:70:c7:6f:08:
ea:33:99:94:7d:80:83:d6:d0:e6:46:31:77:35:37:0a:5e:ca:
37:a8:2c:5d:8f:2a:7a:10:76:27:26:39:8a:19:55:9d:12:e5:
15:a3:fb:92:1b:f7:13:01:c2:96:bb:40:ea:3e:ab:d8:79:4c:
9d:76:62:68:35:e1:52:08:84:12:eb:81:f4:b4:47:cf:6e:ac:
a4:ed:ed:d7:ae:bc:62:a7:9c:ac:6c:b8:9e:3a:c9:b9:43:82:
13:54:ee:7e:8b:ef:33:98:df:95:93:04:a7:f6:4b:be:2f:c3:
9a:6a:ef:60:51:46:31:c7:d7:ff:2b:c7:54:ce:e2:25:fa:49:
0e:b0:e2:2a:50:0c:a1:bf:9c:f6:42:55:c3:2c:fd:cc:c2:6a:
95:e2:90:6a:a8:1b:76:2c:3b:a7:bd:00:05:3a:46:04:ed:fb:
51:d9:5d:0c:11:7d:03:c3:cf:02:df:32:5e:5a:81:45:87:b7:
a2:92:19:1c:86:b4:6d:91:b0:7b:31:74:8f:9e:0d:f1:85:ff:
36:40:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:50 2026 by rpki-client