Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: PYvYh+swWryK5yZxe+AinAgNqDckYlFWe/3weu2NfXY=
Subject key identifier: ED:89:0E:8F:00:C9:EE:53:EC:EF:B2:B8:BA:C7:70:DD:3C:9A:95:12
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019CE5C93C81DE39E981320CFC190B48260D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 163D
Signing time: Fri 13 Mar 2026 06:01:36 +0000
Manifest this update: Fri 13 Mar 2026 06:01:36 +0000
Manifest next update: Sat 14 Mar 2026 06:01:36 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: DG5QWO6obHx7lMKCKB5pkJvkTMaGP87altXscJM3r08=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:3c:81:de:39:e9:81:32:0c:fc:19:0b:48:26:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Mar 13 06:01:36 2026 GMT
Not After : Mar 14 06:01:36 2026 GMT
Subject: CN=ed890e8f00c9ee53ecefb2b8bac770dd3c9a9512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:4c:af:80:6a:10:db:16:7e:1c:a4:93:e2:
ca:7b:51:41:59:86:09:85:fb:4c:fe:61:c2:ff:20:
b9:1f:58:6a:27:45:65:13:7e:cb:ee:4d:30:5b:29:
5f:53:ff:1b:5d:1f:84:88:2c:af:fc:33:66:b3:cb:
70:93:f1:ca:b5:9c:63:6b:97:ef:da:db:1e:72:5e:
71:bc:96:53:b1:61:a0:8d:e7:fa:7d:61:9c:4f:9f:
47:bd:3f:25:7b:2f:3a:d0:41:06:fd:dc:b8:9f:28:
74:82:5f:d1:94:8c:46:b2:7d:32:8a:b5:c0:08:64:
dd:79:5b:a1:01:89:ec:4c:0b:3b:a1:76:e8:2c:aa:
83:24:09:37:d4:f9:87:03:81:0c:7c:71:25:ea:4b:
5c:3f:91:7b:ac:44:46:35:80:4e:6f:ca:92:93:dc:
11:04:46:bc:fc:59:a0:8e:c6:49:85:56:22:a8:fa:
64:2c:b2:10:f8:82:15:c0:38:08:d8:f3:d8:fc:a2:
98:c5:85:c0:28:69:66:90:95:55:ca:d8:a8:c4:a3:
3a:7f:2e:c9:8b:3c:16:d4:e5:e1:7d:df:b9:d6:c8:
4d:42:ee:bc:b4:97:ef:52:02:55:5b:41:22:3e:fa:
74:1a:db:07:1c:d1:e6:a0:d1:70:67:7b:cd:9a:88:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:0E:8F:00:C9:EE:53:EC:EF:B2:B8:BA:C7:70:DD:3C:9A:95:12
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c3:3f:13:3a:ab:2e:51:08:58:70:24:53:75:e1:da:fe:32:
ac:9f:5e:3e:99:e4:9d:2f:7d:6c:2b:50:44:4a:4d:fa:bd:ea:
6f:5a:52:77:f8:50:24:2b:58:18:d1:76:bf:54:14:4a:2d:ca:
e4:e3:95:12:09:08:e0:92:13:e1:20:84:b2:27:25:bc:29:b4:
f5:10:2e:34:39:e6:8e:24:9d:e8:d2:8f:ea:91:e4:a6:bb:1a:
7c:ac:17:cd:c2:22:dc:23:d9:df:7a:2b:43:53:30:d8:96:5e:
3c:05:0a:0b:b1:d8:05:ec:0c:14:71:e3:c1:29:28:46:15:f0:
40:c3:b4:a7:e6:f6:1a:34:f4:e2:43:a8:fa:65:df:4e:50:ae:
e5:5a:ba:31:ca:3f:25:4d:7b:b3:a5:55:f1:e8:73:f6:95:04:
a0:3c:06:09:61:7f:bd:c4:01:6e:56:b2:85:93:8c:bc:11:ce:
1f:7f:0d:a2:f7:5c:17:7a:d7:1f:5f:2f:67:12:e4:b2:fd:0d:
86:55:f4:d3:c6:a5:d8:d6:c8:3e:d9:1e:97:d1:a5:3c:d6:18:
3f:78:98:7b:d7:b6:39:1c:9b:03:44:28:9d:69:01:96:6d:cc:
b7:4d:7e:5d:d6:68:ad:8c:50:a3:47:5a:90:d4:6b:00:33:0b:
e5:4d:39:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyTyB3jnpgTIM/BkLSCYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4
MzYxZGUwHhcNMjYwMzEzMDYwMTM2WhcNMjYwMzE0MDYwMTM2WjAzMTEwLwYDVQQD
EyhlZDg5MGU4ZjAwYzllZTUzZWNlZmIyYjhiYWM3NzBkZDNjOWE5NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokdMr4BqENsWfhykk+LKe1FBWYYJ
hftM/mHC/yC5H1hqJ0VlE37L7k0wWylfU/8bXR+EiCyv/DNms8twk/HKtZxja5fv
2tsecl5xvJZTsWGgjef6fWGcT59HvT8ley860EEG/dy4nyh0gl/RlIxGsn0yirXA
CGTdeVuhAYnsTAs7oXboLKqDJAk31PmHA4EMfHEl6ktcP5F7rERGNYBOb8qSk9wR
BEa8/FmgjsZJhVYiqPpkLLIQ+IIVwDgI2PPY/KKYxYXAKGlmkJVVytioxKM6fy7J
izwW1OXhfd+51shNQu68tJfvUgJVW0EiPvp0GtsHHNHmoNFwZ3vNmohXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2JDo8Aye5T7O+yuLrHcN08mpUSMB8GA1UdIwQY
MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt
MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl
LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8M/Ezqr
LlEIWHAkU3Xh2v4yrJ9ePpnknS99bCtQREpN+r3qb1pSd/hQJCtYGNF2v1QUSi3K
5OOVEgkI4JIT4SCEsiclvCm09RAuNDnmjiSd6NKP6pHkprsafKwXzcIi3CPZ33or
Q1Mw2JZePAUKC7HYBewMFHHjwSkoRhXwQMO0p+b2GjT04kOo+mXfTlCu5Vq6Mco/
JU17s6VV8ehz9pUEoDwGCWF/vcQBblayhZOMvBHOH38NovdcF3rXH18vZxLksv0N
hlX008al2NbIPtkel9GlPNYYP3iYe9e2ORybA0QonWkBlm3Mt01+XdZorYxQo0da
kNRrADML5U05RA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:38 2026 by rpki-client