Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: s+oMmSBVgP3SBxPSouYecdYaVOfzGogvlE6ucORhYDk=
Subject key identifier: 99:96:03:44:FF:94:AE:E5:FE:0A:07:91:C9:64:56:47:91:C5:EA:31
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 019D2960D8992098822CD20236D0322C65EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 0639
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: YR1faV2UgWNF8aI30IWBh6kTjj1w7t+7XdleGaCbOTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d8:99:20:98:82:2c:d2:02:36:d0:32:2c:65:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=99960344ff94aee5fe0a0791c964564791c5ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:39:e9:65:27:d7:4f:09:95:a5:b5:55:42:
01:4a:ce:c9:1a:e6:da:5c:a7:ce:4a:d9:d0:1c:1b:
77:3a:bb:21:97:5c:de:31:76:cf:ac:97:1f:6e:82:
5a:88:20:3e:41:45:d7:de:91:4b:06:b4:68:83:7f:
c2:a5:4a:26:47:06:69:51:83:61:71:2c:f7:89:cc:
93:8d:93:9a:69:38:4d:e5:ae:d8:38:76:00:a1:1b:
31:f7:f2:5f:8c:8d:55:27:9f:78:22:62:db:6e:87:
c6:78:42:10:51:da:c6:5a:63:51:43:00:7a:b4:57:
9f:b5:f2:71:c0:4c:4c:f5:66:70:eb:8d:74:24:58:
5d:2a:d9:e1:d7:7d:e1:a3:53:3b:1d:05:4f:81:6b:
97:67:9b:b5:43:a3:17:22:54:51:70:76:df:d0:38:
ee:f0:f9:c9:00:78:af:57:6e:2b:30:cf:c2:74:53:
8b:44:01:b8:b1:84:25:c8:ae:b9:24:64:e4:df:e1:
26:23:45:f6:1b:59:cc:76:48:6f:d0:76:3d:15:5b:
ed:9a:89:6c:e7:71:57:09:56:f8:5c:77:8f:41:81:
3e:11:97:a5:33:68:59:38:6d:41:80:eb:e0:79:b9:
82:02:8f:21:17:68:03:79:41:5b:1d:d2:15:55:43:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:03:44:FF:94:AE:E5:FE:0A:07:91:C9:64:56:47:91:C5:EA:31
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:51:db:67:cd:d1:41:84:96:00:60:9f:e8:04:12:8e:d9:8a:
c4:4a:14:ac:50:a5:ca:06:93:aa:fc:de:1f:b5:31:a1:e3:92:
e6:93:28:c4:39:e0:a8:89:b6:45:e0:27:fb:97:27:f7:a0:46:
55:1b:6d:71:a9:59:98:4b:4d:da:3f:a1:d4:4a:38:cb:4c:cc:
92:d2:df:c8:5f:76:00:9c:0f:38:37:ac:f2:83:09:52:d9:3e:
4c:2e:b5:64:84:59:c9:20:0b:0b:04:73:ea:e3:2f:c3:7c:14:
f9:cd:da:ac:91:db:21:d2:f2:bc:4b:1f:ef:59:e0:e1:8b:dd:
53:c7:c4:2d:ad:6a:ac:41:9f:04:f1:a2:fc:bc:43:b7:2d:83:
3e:ff:ed:85:57:0e:e2:7f:c0:90:bb:59:b8:c4:d4:56:81:9d:
bc:af:2a:ac:dd:0d:43:a6:74:15:13:5c:51:ad:dd:15:0c:31:
90:bc:0b:26:47:97:e8:b2:5f:e2:bf:ad:e5:49:46:44:4d:ac:
d2:0d:cf:a6:01:3d:54:76:be:44:44:ec:ed:c6:9d:25:98:a8:
57:45:31:d4:28:a5:72:7e:d4:68:ec:17:16:57:10:b4:55:6d:
54:33:a3:b9:2b:d3:cc:d0:45:02:b0:56:d6:03:ae:9d:eb:55:
97:eb:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:15 2026 by rpki-client