Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: V5evfYqOyd0Qek9XtvAjs/SSuSBqb6QKMGXRV8PjIyI=
Subject key identifier: D1:F9:C6:AB:94:FA:86:10:DC:42:21:24:E5:EF:2F:95:9A:24:0C:3F
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 019CAAC7145C0E529F8B5E186835CCBFD5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 0BF2
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: pjBazTV1MJcDu1lD39b8szYtBQ/moItABQQKyinI8ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:14:5c:0e:52:9f:8b:5e:18:68:35:cc:bf:d5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=d1f9c6ab94fa8610dc422124e5ef2f959a240c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:5f:b6:e5:da:82:00:6b:ad:12:f0:c6:bf:
59:f3:7b:53:6e:15:73:df:e9:4b:9b:1c:55:9c:f0:
76:6f:9b:61:8d:3f:bf:e1:44:3c:d8:09:a2:cf:a7:
83:7b:76:0e:16:78:fe:28:ec:f7:7e:be:74:54:53:
fd:c0:45:56:1d:7f:70:44:d7:98:a6:75:87:ac:f0:
2c:7e:16:24:42:7f:81:26:4e:7d:a9:36:d5:eb:f7:
fe:9b:1e:d9:88:7e:11:ca:2c:ab:a8:33:40:b2:13:
d9:10:10:fb:2f:8f:36:c3:f4:f5:51:93:a0:7c:d3:
fd:cf:ac:5f:2d:5f:11:9f:8f:2f:11:91:f0:ae:91:
c1:30:0c:87:36:5e:52:21:d2:51:4e:02:b8:8e:d5:
1d:94:4e:dd:98:86:94:3e:2a:20:e8:98:4d:0e:5b:
dd:c8:bb:16:2c:5f:85:be:54:20:23:d2:94:d5:d2:
85:85:a7:9b:06:c7:d6:40:c3:d3:87:ca:1a:d6:bc:
92:a4:15:fb:4d:5a:5c:22:4d:92:ac:7f:c4:07:37:
f2:78:d5:65:df:8a:25:80:65:bb:8d:8f:04:bd:d8:
0f:f9:b0:58:a2:81:f5:7c:79:37:91:5a:a2:05:e7:
28:ba:37:ef:8d:c5:12:76:46:92:88:1f:c6:00:70:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:C6:AB:94:FA:86:10:DC:42:21:24:E5:EF:2F:95:9A:24:0C:3F
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:eb:c5:4d:21:9a:6d:8d:d0:86:f9:e8:1c:85:43:6c:89:c5:
44:4f:41:4c:f5:dc:b3:d6:85:df:40:98:66:65:1e:b9:2b:2a:
c7:5d:bf:cf:a7:2b:2c:70:a3:22:3d:5f:08:86:55:94:b1:7d:
c1:44:3e:ca:d4:94:7d:6d:a5:f1:36:2a:e7:b1:62:21:32:3a:
79:71:4c:03:2c:74:d4:f2:e2:2d:b1:db:ef:e9:39:92:ad:2d:
8c:49:81:a4:13:f4:f5:80:e6:57:91:a8:12:22:cd:15:1f:ea:
e5:b3:49:f8:0f:27:03:29:b6:c1:58:b7:09:c4:4e:f4:44:58:
09:3b:1f:f6:51:b4:b9:37:12:d1:cf:74:94:29:7c:ed:c8:2b:
35:ac:44:fd:b4:cb:9f:e9:da:4a:bb:fe:74:4c:dc:58:81:4d:
5a:7e:8e:d0:76:6a:e3:ff:19:7c:a2:47:58:6b:75:2c:dc:d0:
bf:eb:05:1b:3a:d7:71:54:79:06:32:29:44:4f:59:c1:7e:a9:
6c:bb:74:42:2b:64:24:49:77:28:06:aa:a1:5b:3e:63:3c:6e:
42:8e:7e:53:fa:8d:50:9f:06:5c:9f:37:13:e0:48:94:47:13:
b2:8f:37:a8:4d:70:0c:9a:dc:c7:cf:d3:8d:34:b2:f2:75:44:
50:46:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:59 2026 by rpki-client