Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: rHKCgzr5GEx4On1XR3ZSeWjTPJ7Bw58UTJBtaocA9jU=
Subject key identifier: FB:B7:19:70:37:A6:3B:65:46:A9:6A:AD:BD:9E:7B:9C:25:27:41:45
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01A0EBF8D3C69B531F1EAA9A1A3605DB46DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 07:02:27 +0000
Manifest this update: Tue 29 Sep 2026 07:02:27 +0000
Manifest next update: Wed 30 Sep 2026 07:02:27 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: 4Y3sOQ9Yj24zrFZ/NU13mEUdJ+DHiKsp2e2hPSZohCg=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:d3:c6:9b:53:1f:1e:aa:9a:1a:36:05:db:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Sep 29 07:02:27 2026 GMT
Not After : Sep 30 07:02:27 2026 GMT
Subject: CN=fbb7197037a63b6546a96aadbd9e7b9c25274145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:74:8f:e8:3e:04:60:34:32:53:02:9f:46:
56:d3:a2:46:41:4c:92:25:3f:69:03:8a:68:5d:76:
43:a6:99:3c:c9:26:1c:c1:7f:9f:47:a6:48:df:3b:
ca:31:43:05:fd:ef:ca:90:67:e6:7b:e1:83:32:7d:
d5:74:c7:da:62:d3:07:c1:fb:7d:07:b6:5b:2f:7b:
3e:20:cd:f2:ed:d1:82:3d:a5:d0:8f:7c:6e:8f:49:
80:48:27:83:ab:9b:cc:06:12:89:d7:34:a8:da:dc:
9e:69:d3:51:a8:09:32:76:ed:c4:bc:43:d8:75:55:
d7:b3:2c:13:8d:cb:cb:9d:ab:71:45:1c:ee:fb:6c:
ad:f9:15:a7:a0:28:a7:60:0c:2a:bb:fa:e1:01:e3:
63:81:5a:3c:dd:c2:63:6f:38:82:da:52:c8:6b:3b:
63:ab:07:ca:79:e9:bc:f5:47:a9:06:d8:60:14:8e:
a3:7b:f5:6d:83:f9:d1:00:75:09:ee:43:8a:d2:94:
82:4b:24:41:4d:3f:7e:17:a8:b4:6a:20:10:45:22:
f7:2f:9e:11:64:1b:ec:8a:59:cd:f7:18:80:c6:b0:
3f:68:09:9f:e7:ac:20:71:72:c4:01:19:0c:a7:f0:
bf:86:7f:5e:8d:b7:b2:50:2d:49:18:2e:c8:17:06:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B7:19:70:37:A6:3B:65:46:A9:6A:AD:BD:9E:7B:9C:25:27:41:45
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2b:26:eb:72:68:69:df:3b:4b:45:4e:53:fd:2c:dc:4b:fb:
5b:30:b4:99:90:80:9b:02:43:4c:3c:d1:ab:3f:0c:97:8c:fa:
e4:c7:b2:c1:1e:2f:3f:36:6a:43:89:ee:2f:aa:ad:b6:3d:28:
b6:16:b9:da:bf:6e:78:db:f8:24:5c:92:00:6b:61:54:9f:0f:
75:8e:0a:40:8d:a3:48:64:01:ed:b6:14:7c:21:8d:5a:12:ed:
14:b4:50:4c:68:aa:f5:ca:ac:c7:94:6a:74:c6:44:b7:50:f4:
6b:1f:86:3e:c9:cc:1f:e1:ee:3e:c4:d4:03:a9:65:83:52:52:
8f:af:ee:fc:7d:5d:f4:9c:e8:8b:f6:03:7c:7b:f1:63:6d:f3:
d8:c1:50:eb:b8:f3:39:35:93:6f:0b:69:ff:f5:5f:4e:a6:0b:
36:85:f9:f2:23:86:49:38:cf:12:28:fb:50:02:59:cb:f0:13:
20:fe:4c:2f:ed:e8:87:2b:39:54:66:dd:46:8f:e5:db:d9:40:
1d:61:6d:4e:3d:1d:f4:05:4c:f2:98:28:a2:78:05:bb:9a:45:
06:36:cf:65:b3:a2:18:89:ac:4e:03:38:e5:99:04:0a:9d:ba:
f6:73:a2:e1:05:f3:d3:6f:91:39:54:28:68:56:ef:96:a3:b4:
5d:8f:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:27:36 2026 by rpki-client