Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: FsVELv9ZY+hlghObpNpGFnfputgZ8H2g4N2v/O/H2og=
Subject key identifier: 8A:84:D5:9A:E9:A7:4F:D8:7E:71:5F:0A:33:F6:A3:08:82:25:9A:0C
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01A0913349C6A140CB41C48AD332965288A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 16:00:52 +0000
Manifest this update: Fri 11 Sep 2026 16:00:52 +0000
Manifest next update: Sat 12 Sep 2026 16:00:52 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: 6Xl6BomkBMd2pgqZ72k9uR/biL7E5nYuqut1iusF37c=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:33:49:c6:a1:40:cb:41:c4:8a:d3:32:96:52:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Sep 11 16:00:52 2026 GMT
Not After : Sep 12 16:00:52 2026 GMT
Subject: CN=8a84d59ae9a74fd87e715f0a33f6a30882259a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:5d:ca:ed:2b:cc:da:7f:45:93:a0:9d:05:
26:95:5e:64:d9:c2:c7:c9:ae:3d:68:84:99:c4:54:
ec:18:53:50:3f:9c:5b:27:31:1d:03:1f:7b:a0:a4:
f0:d6:9b:d0:5d:a9:24:7a:f4:06:8c:1f:63:62:14:
3b:d3:97:97:db:3e:a3:86:6c:fd:43:c5:9a:b4:6f:
c9:58:54:c1:a4:ea:6b:2b:9e:4a:32:27:a6:c2:8f:
0f:95:e0:b4:7b:20:9e:09:d4:0b:c6:8c:72:8c:5c:
c3:9e:79:86:d0:71:bb:e5:f0:df:f7:91:1b:1d:39:
b9:b0:0a:8a:0f:6b:81:e8:ea:93:78:25:bc:9f:c5:
35:fc:12:31:9d:6b:fc:f4:5d:92:d9:23:f9:fe:58:
50:d4:8a:24:66:90:ee:f7:5c:aa:ec:52:fa:ea:47:
4a:39:2f:26:c2:65:55:11:cf:bd:1a:b9:34:8a:bd:
fa:2c:06:da:b3:26:75:c6:0b:3b:7e:9c:89:09:85:
b2:a4:d0:46:49:48:72:17:65:83:f7:ce:24:4e:c8:
8f:84:a5:70:73:06:89:48:79:06:c0:c5:ec:a4:f8:
e8:64:d3:fc:ea:0c:28:4e:50:32:c3:a1:6b:27:49:
df:bb:76:b8:45:e1:ba:90:a3:d0:a1:1d:65:e6:e5:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:D5:9A:E9:A7:4F:D8:7E:71:5F:0A:33:F6:A3:08:82:25:9A:0C
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:85:60:8b:0b:2d:56:f7:a4:d4:13:9f:31:e1:41:2a:ca:
a4:b2:19:e4:58:53:26:8c:36:68:7a:04:0a:6e:6d:e4:07:2c:
b4:3e:9e:08:6e:2f:f4:d5:59:10:09:75:40:95:2b:7d:5d:08:
46:84:5b:fe:b1:3a:fc:56:a9:d9:9e:a6:75:72:df:bd:b7:97:
76:4d:d3:63:2d:92:ab:65:67:93:8e:e2:0c:8a:78:dd:b6:a3:
76:f7:db:c6:f6:78:9f:ac:74:cc:5f:eb:bd:dc:bd:72:d5:33:
09:29:b7:81:b5:5c:c4:10:a5:61:a8:8d:48:07:05:67:ed:04:
c2:8a:ed:d9:ef:bd:71:a2:6a:5f:63:87:80:5a:37:a8:45:26:
eb:43:bb:d4:f7:45:52:02:99:56:d0:7a:f3:b8:7a:b7:2e:3a:
4c:59:10:4a:e6:fc:38:5b:08:b8:d0:e3:87:80:87:5c:5a:61:
84:b7:c9:10:73:67:93:31:e7:de:aa:96:05:68:5b:57:c1:e0:
d6:72:37:58:79:5e:7e:08:b2:dc:d6:15:10:73:c7:e2:49:64:
6c:ea:55:0b:8e:37:b0:b0:8f:8d:34:66:07:fe:78:a2:dc:c9:
e6:d3:5d:64:a6:fe:85:61:db:ac:19:a0:b8:f0:26:ed:62:3d:
4b:a7:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:41:51 2026 by rpki-client