Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: fmTvQboFlryPotFl9I30BqJEziblwcw8bfHMULuZU7g=
Subject key identifier: 92:4E:3B:99:3C:56:B3:B6:1F:37:19:D8:71:7C:1B:20:B9:73:34:01
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01A0E061B18D821E6020422B459C4A5FB308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 01:01:33 +0000
Manifest this update: Sun 27 Sep 2026 01:01:33 +0000
Manifest next update: Mon 28 Sep 2026 01:01:33 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: g/uQ5MzmRHR/2Am2VHwNrjBRCqvAm1JOVYqKvLXTdno=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:b1:8d:82:1e:60:20:42:2b:45:9c:4a:5f:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Sep 27 01:01:33 2026 GMT
Not After : Sep 28 01:01:33 2026 GMT
Subject: CN=924e3b993c56b3b61f3719d8717c1b20b9733401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:2d:9b:5e:83:af:80:23:8a:21:e1:26:6e:
be:42:0e:51:25:5a:16:91:97:f5:1d:8b:18:3a:29:
b8:21:85:1d:32:fd:27:b8:e0:11:8c:18:50:eb:1c:
fc:bf:23:55:86:9b:6e:17:d0:c0:81:7a:53:73:3a:
8d:cf:e7:09:2c:e9:96:35:74:0c:c6:be:89:48:c2:
32:f1:8a:e7:ac:b6:e2:2d:c9:60:0b:0d:a2:61:c8:
9b:a5:e0:63:43:a0:09:76:10:48:55:b5:dd:5c:ba:
5d:78:44:cb:90:ab:90:27:a5:c7:de:43:85:e7:41:
8b:40:71:e8:07:0f:0e:ce:5b:4b:22:de:24:93:b4:
b8:08:b0:e0:5f:ad:33:c5:3a:9a:05:0e:18:5c:e7:
e7:e5:dc:6c:34:a6:49:97:c5:c9:e5:36:0b:b1:0a:
b4:20:0a:77:50:d4:18:44:fe:ad:5a:93:7a:59:48:
87:ee:07:6f:1c:19:2b:4b:a1:8d:31:56:e5:41:4d:
11:cc:dc:1f:42:d3:dd:cd:af:4d:a8:c4:bc:5f:7b:
1a:10:e4:56:28:4a:d4:48:17:61:a1:06:d2:a3:e8:
7b:7f:f3:f5:e7:6b:5f:6b:ab:65:b7:97:ea:0c:c1:
b9:bf:02:a4:8e:26:ce:db:4b:ca:bf:6f:6c:bd:13:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:3B:99:3C:56:B3:B6:1F:37:19:D8:71:7C:1B:20:B9:73:34:01
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f4:4e:dd:59:a8:a1:82:be:23:53:2c:c5:94:98:27:dd:34:
c9:77:de:91:a9:9e:b9:a5:35:7a:fc:d5:57:eb:6e:7d:a2:26:
41:0b:8d:24:19:33:63:c4:32:50:39:fc:b6:7e:bf:e8:ce:08:
a2:56:28:a7:e6:50:6b:34:26:5f:88:48:23:c4:26:5c:b1:18:
8d:71:b0:cc:19:e1:91:bd:c0:f4:3d:a2:90:6a:f8:4e:64:ea:
38:de:46:3e:f6:1d:cf:90:8a:64:d0:a1:1c:4a:20:04:21:42:
a7:16:2c:ca:6c:45:de:99:41:21:91:50:b2:80:aa:4e:7b:8e:
a2:66:4f:85:e8:4d:f1:8c:75:f0:4c:0b:c4:14:6b:d6:47:3c:
4e:69:b9:40:4d:f6:2d:64:6f:5c:57:99:e2:1e:cf:54:dd:de:
cd:92:31:13:63:1d:de:df:f2:91:ce:4c:c9:69:d5:f0:e2:e7:
2b:a4:33:92:71:58:da:c2:1b:e3:eb:cf:60:bc:e9:63:c1:9c:
c4:2b:38:06:3f:d5:fa:4b:34:3d:71:dd:4e:2f:7f:22:68:35:
94:36:2b:bb:cd:47:ea:79:97:d8:b3:eb:02:3b:5a:ff:a7:13:
d0:40:2d:61:02:33:41:5d:55:dc:6b:37:33:f6:d2:2b:5e:8b:
5f:c7:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:03:00 2026 by rpki-client