Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: SNx6hztpUBd1XY2T6NGdJ7B1+rXPUFpJyR4aqlpWG0c=
Subject key identifier: 03:04:EF:76:F0:57:CC:6A:2B:C8:3F:E8:39:62:0A:14:86:D0:B6:87
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019F94376B8C441AF5588AEF5B557A4DE2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:01:27 +0000
Manifest this update: Fri 24 Jul 2026 13:01:27 +0000
Manifest next update: Sat 25 Jul 2026 13:01:27 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: fglC1sOAsgWRvq4a6LHsZhIGpy2XjJm/tOAqkLrbhrw=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:6b:8c:44:1a:f5:58:8a:ef:5b:55:7a:4d:e2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jul 24 13:01:27 2026 GMT
Not After : Jul 25 13:01:27 2026 GMT
Subject: CN=0304ef76f057cc6a2bc83fe839620a1486d0b687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:0e:45:d2:53:2c:90:53:17:17:dc:19:fc:
73:b8:df:e8:2c:06:b0:36:f3:51:f4:cc:42:15:9c:
d9:c4:1e:49:0a:a7:a5:6a:b8:9c:8e:40:b2:1e:44:
19:b7:27:eb:a9:e8:59:42:64:a4:d4:82:4f:53:d4:
55:e0:fe:01:ac:34:5e:3a:8f:e2:f0:cf:de:ca:d4:
2d:9b:1b:6e:1f:86:a0:98:44:a8:58:0c:a8:0d:5a:
31:97:fb:de:f0:82:db:5d:94:39:d2:97:ef:bd:3f:
9b:12:99:d9:bf:7d:c8:63:62:56:15:0a:a9:ef:f0:
4c:d0:63:d2:6a:44:28:b3:5c:91:23:30:09:2d:09:
e5:b8:5a:d2:a8:38:be:35:29:19:12:32:c7:51:ed:
dd:bd:68:db:b3:0b:1a:c1:8c:ee:76:53:71:c3:67:
d5:0e:6e:d6:84:e9:ca:7e:e0:2c:51:b0:90:c1:1d:
21:10:31:72:00:07:1d:e1:87:6b:e5:52:dc:c2:da:
64:a4:cb:be:96:5a:98:6e:08:76:db:8a:9b:2c:8d:
f6:93:db:d9:1c:57:3e:61:b9:ca:6e:80:7b:62:bb:
06:f6:9f:f6:c5:99:e2:b2:4a:fe:0b:5b:5d:d2:58:
8b:cb:1f:1a:8d:9b:c2:34:d1:33:ac:9d:f6:eb:b9:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:EF:76:F0:57:CC:6A:2B:C8:3F:E8:39:62:0A:14:86:D0:B6:87
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c1:95:06:9c:1f:c9:07:98:97:00:85:36:cc:cb:1f:43:58:
73:eb:22:b0:1d:0d:59:cb:1e:b7:5c:d7:49:9f:94:14:02:02:
38:29:40:b4:bb:a1:dd:91:d9:46:19:ab:9a:70:ee:b7:aa:62:
ef:9d:ad:78:26:57:14:9b:86:73:a7:11:44:0c:c0:7e:e9:11:
d0:2d:92:77:60:8f:b9:98:53:e9:01:33:8b:a6:ce:c4:cc:f4:
84:0b:00:d7:e1:8c:6b:80:26:22:58:02:e0:67:e3:9c:c5:d4:
37:5e:b7:fb:a2:c5:db:98:c0:06:e1:e1:4b:2a:37:12:6b:d8:
74:49:02:f5:15:a0:1e:e8:23:f6:70:50:7c:6e:a8:cb:67:5b:
8e:17:e7:4f:c8:74:30:5b:95:04:d7:2d:e0:51:95:d0:57:b1:
80:0d:c5:ec:3d:e0:36:7c:a8:85:06:54:b6:30:5e:64:36:f4:
c4:a9:d3:54:32:4c:7f:a8:e3:b8:fc:ed:39:a4:14:7a:ce:c7:
dc:77:8c:68:ab:a3:9f:07:cc:d9:50:c3:14:dc:e2:39:c0:45:
0b:22:61:63:c1:f9:5d:11:9d:f4:b4:46:dc:0f:dd:8a:d3:53:
8e:13:75:8a:d1:c9:b3:ae:db:10:8e:9a:1a:1a:31:66:19:73:
7b:b9:c0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN2uMRBr1WIrvW1V6TeL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy
NjIyZjgwHhcNMjYwNzI0MTMwMTI3WhcNMjYwNzI1MTMwMTI3WjAzMTEwLwYDVQQD
EygwMzA0ZWY3NmYwNTdjYzZhMmJjODNmZTgzOTYyMGExNDg2ZDBiNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH0ORdJTLJBTFxfcGfxzuN/oLAaw
NvNR9MxCFZzZxB5JCqelaricjkCyHkQZtyfrqehZQmSk1IJPU9RV4P4BrDReOo/i
8M/eytQtmxtuH4agmESoWAyoDVoxl/ve8ILbXZQ50pfvvT+bEpnZv33IY2JWFQqp
7/BM0GPSakQos1yRIzAJLQnluFrSqDi+NSkZEjLHUe3dvWjbswsawYzudlNxw2fV
Dm7WhOnKfuAsUbCQwR0hEDFyAAcd4Ydr5VLcwtpkpMu+llqYbgh224qbLI32k9vZ
HFc+YbnKboB7YrsG9p/2xZniskr+C1td0liLyx8ajZvCNNEzrJ3267nYEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAME73bwV8xqK8g/6DliChSG0LaHMB8GA1UdIwQY
MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et
NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2
LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasGVBpwf
yQeYlwCFNszLH0NYc+sisB0NWcset1zXSZ+UFAICOClAtLuh3ZHZRhmrmnDut6pi
752teCZXFJuGc6cRRAzAfukR0C2Sd2CPuZhT6QEzi6bOxMz0hAsA1+GMa4AmIlgC
4GfjnMXUN163+6LF25jABuHhSyo3EmvYdEkC9RWgHugj9nBQfG6oy2dbjhfnT8h0
MFuVBNct4FGV0FexgA3F7D3gNnyohQZUtjBeZDb0xKnTVDJMf6jjuPztOaQUes7H
3HeMaKujnwfM2VDDFNziOcBFCyJhY8H5XRGd9LRG3A/ditNTjhN1itHJs67bEI6a
GhoxZhlze7nA3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:54 2026 by rpki-client