Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: ufS6Y6wyERhfeGI+GblB6dG271B+g3QkIgpa9xTjtZ4=
Subject key identifier: CD:C2:F5:F8:08:13:BD:C6:7C:CF:64:27:B3:5C:43:D3:FC:7D:6B:5D
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019D37F781866EB66A4ED56BB5812F5A5C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: MYc9stJeoQtWtdJqBo1LBQ5CjjCWPGdXI2mnJ4CTZGQ=)
2: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:81:86:6e:b6:6a:4e:d5:6b:b5:81:2f:5a:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=cdc2f5f80813bdc67ccf6427b35c43d3fc7d6b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:b8:ff:1d:27:2a:25:ec:ad:28:05:69:27:
53:d4:90:c0:7c:a8:4a:47:b0:81:a2:03:82:35:ae:
2c:8e:73:28:c5:74:b5:0d:55:d8:00:0f:55:15:09:
02:ff:21:2a:db:5b:d3:f4:41:f9:77:9a:e8:b8:7c:
ad:85:29:f0:08:9a:ab:4f:7a:de:0d:13:32:81:e6:
77:08:8f:d5:9a:31:08:ef:71:bb:77:30:32:ed:39:
73:ee:4c:9c:45:f5:d2:96:c8:a4:74:3f:55:d5:59:
ca:ed:da:89:e5:66:a5:49:2d:2f:a6:18:e2:b2:cc:
63:04:27:8e:ab:eb:07:a6:14:be:1e:4c:5c:e6:44:
31:62:14:34:18:b1:d6:18:5e:45:a9:c3:b4:fd:5c:
dc:94:4b:b6:c6:3a:74:93:d1:57:93:ad:b6:d2:b4:
74:99:6d:a4:ae:61:5f:48:fe:9f:e2:2f:5c:7d:b7:
33:6f:93:94:2a:43:9f:b1:29:aa:88:2d:fb:79:fb:
65:e0:01:a7:d6:8d:86:82:df:7b:f4:4e:1a:ed:05:
fc:cb:e1:82:c8:b5:f6:0a:ec:35:78:3d:28:28:0c:
d8:83:7b:23:9a:cb:c4:21:d8:06:73:69:08:47:3e:
4b:a8:e4:cc:e2:d6:14:b1:f2:33:54:72:7d:43:5b:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:F5:F8:08:13:BD:C6:7C:CF:64:27:B3:5C:43:D3:FC:7D:6B:5D
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:60:e0:8c:62:6b:95:45:f3:23:b0:34:5f:af:b8:22:28:
00:a1:a7:32:60:22:e1:9f:e7:2b:af:25:92:ae:79:dd:4c:e8:
33:3b:47:7d:db:f0:12:06:91:d9:e1:a4:a5:df:7c:39:2d:f8:
a2:a2:7f:1b:37:8d:ac:3f:ef:47:9e:4a:6f:0b:b4:a7:6d:a5:
3c:70:21:8d:d5:2e:6e:fe:f2:bc:42:f4:89:55:9e:e9:1c:80:
4f:c6:9a:14:aa:4c:bb:8d:10:19:15:3c:76:d7:b4:43:01:9e:
7c:b0:64:fd:ed:72:f7:a4:e5:43:9c:56:66:62:e4:ae:57:ad:
6b:35:05:ea:5a:85:1b:e9:4d:db:a4:bf:6c:e8:20:85:30:dd:
56:05:55:d7:8d:c9:ca:41:2a:5a:cb:44:13:66:c7:5e:1c:8c:
2a:eb:b1:2c:b6:a0:d8:c9:12:6f:4b:19:9f:31:af:b0:9f:a0:
89:23:f6:9f:1c:32:59:6d:ed:65:ca:10:05:21:87:7a:c9:4c:
4a:61:90:d6:15:12:4c:fa:40:97:51:f2:75:39:b6:c3:ab:6f:
2d:28:2f:96:d2:b9:96:51:52:dc:4e:43:5c:4b:17:de:70:bc:
ac:38:99:c9:ea:dd:0b:c1:11:a8:b0:da:e7:87:be:20:2f:1c:
50:df:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:07 2026 by rpki-client