Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: TNsy+D3BqVyJ1TAsWBuvCl8KNabUY99HqWxmvn4XugI=
Subject key identifier: 4E:E3:0A:DF:F4:A6:95:AD:18:46:BE:73:E9:5E:CA:F4:0F:85:AD:00
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019E1F7EC83EE44212FA0B547FBE243DCFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 04:01:02 +0000
Manifest this update: Wed 13 May 2026 04:01:02 +0000
Manifest next update: Thu 14 May 2026 04:01:02 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: GZEcatW08b/ASlzukoBxdtGEJlxOfQ2XS3Jg65Up7C0=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:c8:3e:e4:42:12:fa:0b:54:7f:be:24:3d:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: May 13 04:01:02 2026 GMT
Not After : May 14 04:01:02 2026 GMT
Subject: CN=4ee30adff4a695ad1846be73e95ecaf40f85ad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:95:ba:8b:c1:ee:17:1a:4e:97:ef:fc:40:
16:86:c2:92:45:44:6f:fd:be:c6:31:aa:33:f8:1a:
ef:ae:f9:0f:5b:b2:44:41:b2:10:97:e0:6f:71:9a:
3f:7f:be:09:07:d6:78:16:fa:cb:a7:57:c5:64:0c:
b0:6f:ef:9e:1a:72:86:60:e2:7e:7d:c5:67:2d:22:
e5:53:55:8d:f9:c3:05:a6:19:d7:17:fc:9d:bf:0e:
b8:a4:07:32:87:c4:ba:85:2d:f1:73:b3:67:11:1b:
fd:4b:f5:75:f6:30:5d:c3:7b:09:f0:a1:58:80:2a:
d8:87:af:77:60:e6:08:e5:6f:8c:b9:76:ed:75:2e:
5f:56:fc:7a:57:41:f9:8d:c0:e6:41:76:d0:23:00:
8e:4c:82:c0:b5:63:3d:c9:37:70:92:6e:ea:01:a0:
1b:a3:e9:63:fc:b5:c2:22:f5:03:9d:60:ee:e1:b5:
ab:07:98:2b:03:aa:3e:88:b9:c2:6c:34:80:3d:0b:
de:f3:8f:41:1b:c2:1d:52:b0:35:1b:65:28:d8:30:
e2:a1:89:6f:a6:65:22:f8:6e:c7:ff:ff:cd:ef:e1:
7a:df:53:c3:e2:cb:4a:30:1e:a5:bf:93:86:ae:f3:
65:aa:c2:bc:12:86:b9:7f:e2:f5:0a:15:0d:78:61:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:0A:DF:F4:A6:95:AD:18:46:BE:73:E9:5E:CA:F4:0F:85:AD:00
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:61:a0:95:a3:4a:cd:a9:34:9f:28:32:41:6c:06:96:1c:67:
a8:66:19:04:4b:11:98:e5:1c:6d:3e:0d:e6:d8:08:21:fd:e0:
b7:b7:e6:a4:b6:8f:df:f0:60:15:5a:b7:07:62:ed:27:25:4f:
12:e7:64:ec:81:61:3b:03:2d:3d:91:df:41:2a:01:16:e1:4c:
96:56:b6:19:fc:a5:43:02:33:cd:24:f2:3a:a9:11:0a:73:66:
7c:f0:96:60:f7:e1:d3:bc:a2:06:f6:24:05:a8:9f:95:63:e7:
36:c8:7f:48:43:30:3d:3a:7a:f9:1e:cb:d4:59:cd:ec:9e:6c:
c8:8a:31:08:f0:78:94:e8:50:88:e5:e6:bc:e0:b7:49:71:dd:
c1:39:7c:e0:a7:6c:31:66:51:0d:fd:78:0c:25:75:b2:0c:45:
c5:58:98:cc:25:6f:75:dd:2a:b9:de:37:3d:6b:85:5a:42:c4:
8f:0b:5d:2a:02:76:96:45:bd:34:02:7b:e2:9c:3c:11:9e:b7:
f3:f9:d5:91:2a:ff:2b:61:23:c8:b9:11:fe:1a:89:f2:7f:33:
ff:f7:10:a8:be:ae:98:74:fb:2a:a7:7b:7c:a5:90:e8:14:68:
57:2e:c7:f7:d8:9a:78:5a:1c:40:57:b0:d5:a9:3b:94:43:ea:
3c:31:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:07 2026 by rpki-client