Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: dOnp/KptfKhVk2T3Ulzck+GPC9MFj+DeywOonrQ0tsg=
Subject key identifier: 2F:DD:8A:26:B0:4C:C7:56:5F:34:F0:9B:48:A9:A9:A4:A3:F0:69:EF
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 01A181BE77813B686BFF35D1CCC5C7D688F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 18A0
Signing time: Wed 28 Oct 2026 09:01:45 +0000
Manifest this update: Wed 28 Oct 2026 09:01:45 +0000
Manifest next update: Thu 29 Oct 2026 09:01:45 +0000
Files and hashes: 1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: CdIeQi1UKvTZDc9OL+znNOELMUKM1Or16LPJoSLDavQ=)
2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:77:81:3b:68:6b:ff:35:d1:cc:c5:c7:d6:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Oct 28 09:01:45 2026 GMT
Not After : Oct 29 09:01:45 2026 GMT
Subject: CN=2fdd8a26b04cc7565f34f09b48a9a9a4a3f069ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:d0:67:3f:f8:a9:dc:ce:a9:62:cf:22:50:
34:de:e6:51:c1:dc:44:3c:93:74:94:96:47:7d:c9:
32:de:95:06:09:b3:f7:53:2e:d7:6f:23:9a:d6:e0:
4e:ec:2b:53:a2:fa:74:f8:11:0b:d7:fc:ed:7d:bb:
0e:1f:f2:5c:9e:71:f9:b8:41:95:99:84:08:e2:bb:
b0:1e:e3:4c:dc:72:21:eb:23:63:bf:b3:8a:0b:c3:
d7:c1:6f:bc:3f:e3:78:19:57:b1:3f:5c:b5:94:9a:
48:d8:0b:71:fc:54:76:d4:30:07:d9:61:33:a3:38:
5d:6e:d0:e0:34:aa:b9:7d:d0:8f:a2:28:7d:ce:63:
58:c7:e7:a9:54:d0:8d:56:92:94:d2:38:b4:bc:7e:
49:f2:c5:1c:77:a0:f2:74:50:2f:ed:27:b5:ee:4f:
7f:b1:8e:aa:2e:7e:fe:39:10:d6:f9:41:ed:c6:4e:
37:92:c0:3d:f6:46:2d:cf:20:23:7d:e2:0e:20:0d:
4c:37:a4:61:31:46:09:e7:f9:07:89:74:07:de:64:
b8:13:9d:17:c8:1c:04:f4:d9:1d:39:57:84:fc:df:
60:12:bd:c3:e6:81:c4:c4:c9:12:45:df:f4:10:9c:
6d:fa:b8:a1:97:29:01:0d:4f:94:b2:fd:c0:c4:f8:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:8A:26:B0:4C:C7:56:5F:34:F0:9B:48:A9:A9:A4:A3:F0:69:EF
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c0:40:1c:6a:cd:b7:82:3f:ce:16:3a:46:9d:87:56:de:a8:
95:b1:2a:88:c1:cb:35:22:2c:d4:b2:5b:1c:a4:8d:83:a9:b4:
ed:5a:e0:81:17:1f:98:60:f9:0b:42:a9:a9:4e:5c:0c:a8:33:
f7:39:6f:c5:13:53:7c:56:5c:30:3d:07:27:62:85:14:89:d3:
e2:8e:ea:f0:e7:00:f9:c8:6a:42:ad:68:fa:87:c2:b5:c3:03:
47:15:f2:86:9c:83:c7:12:e7:76:3f:60:d5:cc:99:15:5e:36:
a3:a4:43:a3:c9:5d:ef:b0:ab:5d:57:1f:8a:ae:68:09:21:3d:
32:34:79:5b:dd:4b:5f:9a:7b:05:b1:d8:0c:12:0c:ea:01:48:
43:2d:4b:56:9c:99:62:24:37:81:ae:80:02:be:1c:0e:2c:44:
d3:58:d9:82:10:36:3f:ad:8c:e7:3e:8e:af:13:31:5c:e2:68:
da:30:1c:43:86:fd:eb:c7:29:0c:89:8c:19:16:c6:20:94:0a:
e9:3b:04:ed:05:b7:49:f1:11:e7:7c:b5:5e:50:09:2e:ba:cc:
e2:88:5e:57:50:cf:eb:f1:9e:93:6c:b2:79:6e:ac:8e:ed:0f:
15:bf:6c:9b:ec:14:8a:93:c7:ba:ef:a4:8b:ac:41:ba:49:c8:
1a:55:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:30:06 2026 by rpki-client