Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: 3Ci3eU2xF16cvPI6y9VlxovbHs3uC2kg3Y5IWEhuBb0=
Subject key identifier: 6A:99:59:F6:A3:9A:19:C0:E2:C3:EA:0F:78:49:C1:89:4D:49:BF:78
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019FA22950FF460C1D449B712F1A5C3820EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 06:00:44 +0000
Manifest this update: Mon 27 Jul 2026 06:00:44 +0000
Manifest next update: Tue 28 Jul 2026 06:00:44 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: 5Xj6dNPvjMMY5iO3Uj2Pl1r1Wxv4mDYF+TAwGHKDHqI=)
2: _ofD7n-Meqqb5bqWLv3YqaM07G8.roa (hash: zCDjcJpSLZxTQHG9wh0JcogQKCsQcbkZZ0W0LNsrTrY=)
3: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:50:ff:46:0c:1d:44:9b:71:2f:1a:5c:38:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jul 27 06:00:44 2026 GMT
Not After : Jul 28 06:00:44 2026 GMT
Subject: CN=6a9959f6a39a19c0e2c3ea0f7849c1894d49bf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:13:4b:3d:bd:ac:3a:a7:90:51:0f:da:e9:
f9:0f:e5:96:d2:c8:85:ab:bc:15:c2:b2:d8:20:8d:
e1:65:07:10:6f:ff:da:f6:b2:48:1f:2a:80:10:f1:
1c:77:1b:75:56:d5:51:bf:6a:94:01:d4:82:77:74:
d8:27:65:e4:5c:ec:0e:b8:43:25:ae:12:f0:a9:7a:
65:d4:36:dc:61:59:73:e1:e6:4c:ee:6c:57:4f:c7:
d0:25:25:2a:cc:88:2a:ea:13:ba:5a:44:ee:05:a8:
4f:a1:98:64:80:20:02:81:fa:58:53:11:3c:f3:45:
cd:ff:b7:6d:85:dd:ef:f6:8e:49:b7:f6:8d:99:2a:
c2:ca:67:ba:5f:7f:3f:4c:7b:ed:bb:00:76:ac:cd:
00:b2:44:cc:08:e8:48:73:ea:62:f6:ee:73:45:2f:
a9:4e:6d:62:88:ea:1f:a6:c5:35:2b:ff:01:ed:69:
0d:ad:84:92:88:6b:36:ad:5a:cc:88:35:53:a3:3e:
fd:ae:0e:94:be:ef:46:6c:b3:c3:45:64:cb:14:75:
a6:b8:2f:e7:22:5a:f7:2c:18:d2:c3:e4:b9:27:b2:
00:4d:1d:89:2c:84:fd:81:6d:88:02:c7:cd:a9:2e:
97:27:6e:6e:5b:65:09:97:c3:cf:d8:7e:22:d3:be:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:59:F6:A3:9A:19:C0:E2:C3:EA:0F:78:49:C1:89:4D:49:BF:78
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:d5:64:2c:b6:14:b5:ee:af:54:ca:e2:ca:e7:1d:86:84:
fa:75:88:72:2b:68:ef:e1:ee:67:c1:20:e1:d7:26:9c:20:44:
03:38:d9:6c:68:07:dd:b2:e3:44:13:3c:91:54:80:74:12:f2:
8b:b3:fd:b5:30:00:28:ac:49:4a:a7:91:cd:c5:4c:06:8e:fe:
e5:de:9b:94:24:00:c3:69:70:25:50:b2:5c:87:26:fa:f1:c2:
bd:66:90:fb:34:b8:9c:a2:c2:4a:8e:05:7f:85:7c:15:55:f9:
ea:46:3a:c0:fb:7c:90:62:7e:8c:47:c0:dc:83:15:5d:3f:7e:
e1:72:35:a6:10:c1:5b:29:d8:4c:46:43:d9:e7:fd:f4:a0:e2:
a1:74:38:df:af:3b:93:dd:35:49:00:79:81:63:b3:4b:84:94:
c8:ed:8b:51:21:33:14:d3:29:d5:f1:60:19:77:96:f7:c5:67:
8a:e1:ea:0c:7d:89:a2:66:f8:4e:4d:a9:78:dd:b3:07:01:98:
ed:e3:f1:2f:95:42:7f:e1:25:63:fe:7a:d3:31:1f:ab:ed:b4:
51:f9:cc:67:ba:31:06:3e:05:5d:b6:9e:8a:ef:55:5e:0e:80:
cb:7d:58:62:62:b9:73:87:34:54:56:16:71:b0:88:53:1f:1b:
7b:0f:b9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKVD/RgwdRJtxLxpcOCDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy
NDYxNTUwHhcNMjYwNzI3MDYwMDQ0WhcNMjYwNzI4MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg2YTk5NTlmNmEzOWExOWMwZTJjM2VhMGY3ODQ5YzE4OTRkNDliZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4QTSz29rDqnkFEP2un5D+WW0siF
q7wVwrLYII3hZQcQb//a9rJIHyqAEPEcdxt1VtVRv2qUAdSCd3TYJ2XkXOwOuEMl
rhLwqXpl1DbcYVlz4eZM7mxXT8fQJSUqzIgq6hO6WkTuBahPoZhkgCACgfpYUxE8
80XN/7dthd3v9o5Jt/aNmSrCyme6X38/THvtuwB2rM0AskTMCOhIc+pi9u5zRS+p
Tm1iiOofpsU1K/8B7WkNrYSSiGs2rVrMiDVToz79rg6Uvu9GbLPDRWTLFHWmuC/n
Ilr3LBjSw+S5J7IATR2JLIT9gW2IAsfNqS6XJ25uW2UJl8PP2H4i074dLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqZWfajmhnA4sPqD3hJwYlNSb94MB8GA1UdIwQY
MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It
MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh
LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb/VZCy2
FLXur1TK4srnHYaE+nWIcito7+HuZ8Eg4dcmnCBEAzjZbGgH3bLjRBM8kVSAdBLy
i7P9tTAAKKxJSqeRzcVMBo7+5d6blCQAw2lwJVCyXIcm+vHCvWaQ+zS4nKLCSo4F
f4V8FVX56kY6wPt8kGJ+jEfA3IMVXT9+4XI1phDBWynYTEZD2ef99KDioXQ43687
k901SQB5gWOzS4SUyO2LUSEzFNMp1fFgGXeW98VniuHqDH2Jomb4Tk2peN2zBwGY
7ePxL5VCf+ElY/560zEfq+20UfnMZ7oxBj4FXbaeiu9VXg6Ay31YYmK5c4c0VFYW
cbCIUx8bew+5hQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:46:48 2026 by rpki-client