Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: gzioleVxHtYv+MoYcPNvMkEH1wYw7imjYJZrqB/DJEk=
Subject key identifier: 7F:65:85:8C:B8:7C:EC:24:AF:65:7F:9D:FF:DD:70:CC:8B:E8:2D:FF
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 019D28F31EEB46B58340E13613A64B6584C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0F4D
Signing time: Thu 26 Mar 2026 07:01:54 +0000
Manifest this update: Thu 26 Mar 2026 07:01:54 +0000
Manifest next update: Fri 27 Mar 2026 07:01:54 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: guNgOsh0pCSB7+07G713mwk7iAWMaVx14kwpAfUxmCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:1e:eb:46:b5:83:40:e1:36:13:a6:4b:65:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Mar 26 07:01:54 2026 GMT
Not After : Mar 27 07:01:54 2026 GMT
Subject: CN=7f65858cb87cec24af657f9dffdd70cc8be82dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:61:98:4a:2f:45:6d:15:a5:8e:46:07:51:
53:5d:2c:6c:ee:c4:e9:b8:05:1e:d7:c3:78:2f:d9:
57:3a:bd:2e:6f:45:70:1f:e6:89:1f:f0:7e:17:56:
dd:74:a8:83:27:19:63:ec:a7:3b:42:2b:20:6d:b3:
f9:4b:94:5c:10:8c:19:0f:ff:48:87:d9:29:f4:60:
f4:2d:29:48:28:3a:75:cc:3c:ae:7b:bf:ec:c0:91:
86:f5:36:c7:b6:73:a1:f3:0a:71:15:e8:b3:fc:cb:
0a:9f:bb:6a:a3:0a:30:26:dd:c8:2d:07:c1:59:95:
a0:09:10:de:93:a5:6a:2c:29:27:f7:28:21:4a:31:
e2:20:38:af:4c:1e:4f:8c:1f:e9:31:eb:6b:2f:bc:
f3:4e:41:2e:c8:d6:96:1a:f2:66:0b:63:b2:69:4f:
e7:3a:8c:af:1b:f7:2b:27:ff:34:5f:4f:82:d0:ff:
c1:e2:37:7b:5e:40:d1:f1:da:4a:e1:b8:89:f9:8d:
9e:68:3d:e8:e8:df:2f:aa:a3:bd:12:40:23:24:7e:
53:8b:df:ee:0e:4f:2b:d4:6f:1e:df:7f:59:24:1f:
b2:d4:5e:be:c4:fd:20:b7:88:b3:f5:6c:de:36:3b:
a3:76:07:29:06:91:b8:32:03:9b:c0:a8:48:91:a0:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:85:8C:B8:7C:EC:24:AF:65:7F:9D:FF:DD:70:CC:8B:E8:2D:FF
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:38:70:d4:86:b7:c5:96:90:d8:f5:b3:59:88:b7:52:7c:78:
11:e2:44:27:1f:3e:6d:ee:e7:51:40:fd:d5:dd:98:41:fe:45:
7b:8d:fd:d3:1d:2c:fc:03:4c:45:d9:3f:88:80:bd:e9:54:c5:
07:c0:ad:ca:97:c0:d9:c3:b7:c4:fd:46:05:3c:4a:ff:0e:65:
49:94:96:e1:d6:1b:0f:26:ed:d6:3f:b3:44:92:66:f2:f0:9d:
36:ff:9a:01:ec:df:51:1c:a9:4a:3b:76:59:c1:81:67:0a:38:
f3:de:34:d0:97:a4:92:4d:b7:50:d2:16:46:64:ef:1d:9d:c0:
fd:d7:75:58:8b:78:b0:d8:fe:c6:7e:82:1a:59:16:f9:e6:bf:
0c:bb:a6:f3:76:16:2b:51:5b:b5:1d:83:83:7a:ba:ff:fe:f8:
df:a1:6a:af:9b:cc:ec:31:ad:dc:23:1b:39:a0:7a:52:1b:9c:
23:18:a9:3f:da:ce:93:7a:18:12:28:19:b7:e4:e8:10:f0:55:
11:cc:ab:00:6f:6f:9e:ce:80:ae:79:ab:a2:de:65:84:31:cd:
08:c8:0a:04:7e:5b:02:22:96:ff:43:b3:17:ca:cb:37:28:0c:
4e:85:ea:db:3c:20:20:09:33:0b:b8:e6:8d:69:c2:ac:9a:a4:
87:0f:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:37 2026 by rpki-client