
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: NYgm0stkJmMZNcvL1r2Wv5Gowaf0qBXpVCmJ1tRE94g=
Subject key identifier: 56:51:4F:91:F2:B6:88:CE:17:18:F7:00:C3:54:A4:F1:50:7C:23:9B
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 01A08C7BBC730DC021772E119C5E44FC1BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1821
Signing time: Thu 10 Sep 2026 18:01:54 +0000
Manifest this update: Thu 10 Sep 2026 18:01:54 +0000
Manifest next update: Fri 11 Sep 2026 18:01:54 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: 1VGio/XsIcnJAkJ7lm2eIvH/wZxunEzmQlYbZ6j8d6g=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:bc:73:0d:c0:21:77:2e:11:9c:5e:44:fc:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Sep 10 18:01:54 2026 GMT
Not After : Sep 11 18:01:54 2026 GMT
Subject: CN=56514f91f2b688ce1718f700c354a4f1507c239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:27:0d:9b:0b:52:5a:db:4c:86:7c:2c:cc:
83:8a:b5:14:05:2e:70:d0:9d:91:c3:27:b8:ca:09:
2e:0d:cb:eb:0e:47:65:de:f6:de:28:38:34:0d:de:
43:c7:72:d4:21:4c:a1:94:d3:03:29:82:cd:a6:db:
a9:12:70:fb:e3:71:5e:3c:3d:d6:68:3e:27:d1:fc:
87:98:b9:71:70:79:45:a5:61:37:b0:64:51:10:89:
6b:64:02:c5:7f:de:0f:ce:63:69:60:80:0f:a6:8e:
da:27:83:3c:b3:70:6f:ec:31:20:76:a8:85:6a:b8:
f2:81:06:c4:9a:bd:97:43:33:c2:ce:aa:62:47:5c:
8a:4e:84:c1:da:d5:d7:f2:22:e6:eb:56:25:d0:4a:
2f:1e:40:33:a9:15:57:8d:5b:27:be:2c:b1:4a:19:
0a:d8:a0:34:46:b3:8b:36:21:b7:d5:7e:a9:cf:b1:
6e:5c:6a:2c:cb:93:65:d3:62:d1:da:37:ec:13:e6:
13:dc:be:5c:56:ce:f0:2c:78:a6:e5:4e:53:48:00:
a5:96:01:ae:8a:b9:00:45:c2:e3:f1:ef:26:3d:e1:
38:d6:1c:de:2a:ac:99:30:b1:8c:21:01:df:10:05:
11:38:6b:30:86:a0:5c:a3:95:a4:b6:92:8e:8f:0f:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:51:4F:91:F2:B6:88:CE:17:18:F7:00:C3:54:A4:F1:50:7C:23:9B
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:03:f9:5f:6c:86:19:f6:4c:21:92:94:e3:04:96:10:3d:77:
6b:60:f5:75:6b:ce:55:4d:3d:47:a4:c6:a9:2b:c3:74:e6:fa:
2a:a4:98:1a:7c:b7:3a:43:8d:9e:bb:44:bf:1f:f9:10:5c:50:
aa:73:a4:2d:2a:ad:18:db:2e:23:3f:5c:7d:79:53:aa:1d:56:
f3:5d:34:24:83:07:bf:72:18:51:fb:ef:1d:3d:cd:5c:eb:b0:
2c:b5:41:54:45:2c:1f:d2:78:2f:1e:d1:21:a9:f5:f2:34:cd:
49:01:b1:b4:10:5c:c0:f1:39:aa:d4:e1:2b:d3:ef:6c:c6:b9:
1a:70:8d:19:26:2b:12:35:63:b7:af:58:64:f4:ee:83:67:75:
64:9a:c6:28:3e:cf:81:32:c8:4e:e1:af:26:9c:87:96:66:6e:
77:c2:00:bf:39:cf:63:02:5a:b2:30:fd:e1:05:13:56:05:aa:
85:f2:fb:95:39:bc:c8:87:fd:30:0f:9b:5e:fe:c2:81:d2:1a:
c7:d9:ee:4d:e5:9d:4a:94:4a:81:27:f8:c5:ad:b2:73:7e:1d:
47:41:f5:05:e4:4b:a1:43:8b:6b:73:85:32:47:a5:f2:a3:c0:
a1:ca:96:7c:10:ae:26:97:56:27:bd:6d:36:65:84:61:fb:bf:
fc:74:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:51 2026 by rpki-client