Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: QOoOx4WCs0XBIswAYbWw47Y5uHH0Sash8353nuJTJkA=
Subject key identifier: E2:5D:3A:D5:B8:14:B1:0A:7F:A8:B7:6F:4C:B1:20:95:EE:37:A5:51
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019DCF75515720F61932C696505BBAEE6A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 16B6
Signing time: Mon 27 Apr 2026 15:01:05 +0000
Manifest this update: Mon 27 Apr 2026 15:01:05 +0000
Manifest next update: Tue 28 Apr 2026 15:01:05 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: n8QIt5g3X04YWvmscAYnjoPzvWbPBP8Gvouu2SmS6m4=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:51:57:20:f6:19:32:c6:96:50:5b:ba:ee:6a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Apr 27 15:01:05 2026 GMT
Not After : Apr 28 15:01:05 2026 GMT
Subject: CN=e25d3ad5b814b10a7fa8b76f4cb12095ee37a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:1b:80:98:74:97:f2:da:93:b1:b4:98:60:
4c:00:c2:8c:e3:80:4a:c9:ad:2b:3a:3e:d9:97:23:
61:99:24:5f:73:9e:f6:9f:fb:b1:73:3c:38:b1:5d:
7f:f4:e6:09:67:87:40:df:2a:c4:cf:9a:48:a1:21:
23:47:3a:cb:52:91:97:2f:97:58:f3:59:bc:45:c9:
d1:a3:64:10:3d:f2:70:29:48:09:ed:59:2d:01:68:
f0:e1:3a:cb:5c:c7:86:b7:3c:43:22:6b:b1:68:ff:
89:77:3f:3a:78:ef:15:79:02:6e:e4:f5:8a:21:9a:
2a:22:4a:75:95:32:4a:d6:fd:c7:d5:63:f0:4e:dd:
0d:97:c3:d0:8e:72:24:27:77:b0:d8:38:2c:0f:59:
3b:f5:5a:3e:ac:44:18:f5:01:bf:2e:45:79:39:10:
4c:ff:4f:7e:73:45:fb:b2:7d:92:c4:47:1a:25:8b:
05:d5:9a:31:76:9a:7b:c4:e8:ff:2d:58:7e:6d:ba:
b0:b5:87:ad:00:95:1e:2d:f8:ba:7e:f4:1e:6c:2e:
28:91:a5:1f:e7:18:25:a0:95:b3:49:2f:74:70:bd:
c8:da:e1:31:97:2a:97:a7:88:cc:fc:12:4c:fa:0f:
6c:02:99:a5:a0:60:5e:94:99:07:82:0c:a3:94:d2:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:3A:D5:B8:14:B1:0A:7F:A8:B7:6F:4C:B1:20:95:EE:37:A5:51
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9c:50:f8:ae:9f:b1:f3:4a:51:a1:f9:90:b6:f2:7b:52:bf:
0f:4f:a9:4f:59:0f:0e:2b:1a:70:c5:4d:6c:66:b2:45:f9:14:
54:6e:69:26:a2:e8:32:9f:19:1c:69:f5:ac:83:93:5a:37:e6:
2c:6a:c1:3c:2e:01:fc:a9:e4:4c:41:17:10:1f:61:ee:8b:ad:
fc:44:02:92:64:79:6a:ca:24:2e:7f:f4:68:a4:f1:81:c0:d4:
50:43:4b:7e:3e:66:d6:b7:2f:7b:cd:e2:d5:74:db:fe:e7:a9:
a7:ad:e9:72:a0:1e:72:d3:53:3e:58:e8:1b:8e:c9:d9:cb:35:
1f:4a:2e:c8:42:9f:7c:e6:39:f2:e8:87:c7:b1:c6:86:d8:a0:
9b:39:c2:4e:03:69:40:03:3a:d3:b3:bb:fd:e5:16:ab:ee:29:
ab:0b:ac:ef:9e:4e:60:1c:5c:6b:de:ec:3d:d7:10:b5:ff:7a:
a9:2e:d8:81:a7:f2:6a:eb:88:b4:0e:79:51:44:16:e3:c7:30:
b1:25:5f:2c:8a:32:85:03:a7:e5:db:da:23:a2:22:cb:08:5f:
af:c0:73:79:73:04:8a:4d:db:6c:79:6d:3c:30:43:6e:ed:50:
33:61:d7:8f:24:f4:c4:94:3b:f0:77:96:c3:6b:48:ac:65:12:
b6:f3:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:54:23 2026 by rpki-client