Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: 0KrvF62bcZ/XFa8iLQcx/NGniqu7W46j5rKHpKJ59xM=
Subject key identifier: DE:D2:DF:74:C4:2C:A1:FB:32:1B:58:57:ED:ED:8E:E6:4B:7F:AC:B1
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 019D9B508F43C81A9F7C4F137DA1460EB530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 0674
Signing time: Fri 17 Apr 2026 12:00:41 +0000
Manifest this update: Fri 17 Apr 2026 12:00:41 +0000
Manifest next update: Sat 18 Apr 2026 12:00:41 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: 1thcWM2AeNUfSSxVH9A05Ek3waKbiUVCcI+GO3U7t2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:8f:43:c8:1a:9f:7c:4f:13:7d:a1:46:0e:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Apr 17 12:00:41 2026 GMT
Not After : Apr 18 12:00:41 2026 GMT
Subject: CN=ded2df74c42ca1fb321b5857eded8ee64b7facb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:1b:28:b7:d7:04:71:77:f6:35:5e:b2:db:
65:11:56:a7:6d:d6:cb:5b:d1:55:79:d8:10:1d:9e:
b4:44:9f:4e:fc:6e:d6:f5:03:11:26:cf:31:9e:e7:
c3:25:88:a0:77:d5:18:c6:8b:f1:2b:67:a1:9a:b3:
8e:ad:31:6a:52:52:08:e7:54:91:5e:e6:ee:8f:1f:
57:c5:fd:f9:ea:74:be:75:76:bc:61:f7:44:e0:9a:
76:6f:3b:4c:f1:8f:c5:a8:05:7a:82:05:05:78:1e:
48:80:50:77:19:f7:53:60:01:14:42:ce:c0:72:ee:
b3:cf:22:10:43:9d:1f:5b:61:46:ff:7e:1a:0b:ed:
7e:a3:74:be:09:74:3e:fa:15:7e:b0:11:b7:de:e1:
45:06:32:8d:d5:e0:12:56:f0:91:d9:e6:6d:32:a9:
69:af:f8:25:ea:7f:06:b1:d6:c0:dc:de:9f:42:87:
09:38:e9:5f:64:61:99:4f:19:b7:d3:cb:80:28:ce:
56:44:c4:a8:dc:1f:91:79:10:e6:62:f4:ac:70:61:
34:87:29:5c:dd:73:ca:ab:ed:54:c6:f2:82:52:b8:
fb:81:05:a5:f2:d2:10:9d:59:35:d1:58:51:87:73:
b8:68:7a:a0:17:e2:c1:9b:cd:77:b7:cf:7e:9d:74:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:DF:74:C4:2C:A1:FB:32:1B:58:57:ED:ED:8E:E6:4B:7F:AC:B1
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:e6:8c:c7:67:36:45:c3:0c:69:de:aa:41:4a:3e:86:07:
c2:c4:ee:ca:36:2d:e9:98:19:3b:94:bf:dd:ac:c3:ab:5f:04:
dc:2f:08:dd:cb:ff:c4:28:9f:90:18:d2:f0:47:f3:d9:a1:ee:
0f:32:93:0d:19:11:5a:7a:a0:11:b6:6e:a6:e2:20:a2:d7:42:
8a:f9:3e:da:72:07:2a:d1:86:f2:00:b6:cf:4a:16:43:b4:2f:
77:0d:b3:a4:6c:4f:e0:ef:e3:1f:8d:58:72:4b:77:db:7a:4a:
c5:79:b9:f2:32:d3:12:8a:d7:2c:83:2d:af:cf:51:73:1c:47:
3a:b5:51:7b:ee:95:77:d9:20:96:ed:f6:79:ba:67:4f:91:79:
bb:9e:8d:86:71:22:06:8b:ea:c1:62:ba:fc:18:c3:a3:b2:81:
f8:07:49:f3:e3:25:09:01:e2:82:e1:ba:84:aa:2e:5b:15:89:
c5:32:da:9b:f4:e7:e7:ee:8d:99:e0:61:55:30:0e:c8:fa:1b:
0a:2b:0c:84:46:99:8a:98:b8:36:33:93:a6:b2:8a:b3:ed:55:
10:33:c5:f1:08:91:a4:01:f0:89:61:a3:38:7e:cc:52:8d:62:
88:2a:55:c2:75:29:dd:7f:60:5c:8b:08:7a:db:40:6b:05:10:
2b:84:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:18 2026 by rpki-client