Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: Yh2uzK95H9guvqbqH5sklTCffGYIaENiMdVPTpAJSNo=
Subject key identifier: 65:9C:3A:45:6E:FA:E4:8C:AC:0B:1A:5D:70:1D:DB:CD:1F:2B:6A:6E
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01A18488140CD4119C04CC2DD2F59FBED5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 22:01:12 +0000
Manifest this update: Wed 28 Oct 2026 22:01:12 +0000
Manifest next update: Thu 29 Oct 2026 22:01:12 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: wnT6g7nHaYHzuFiDVt+PckIYtHxU4R3n/p9fwqNfvcY=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:14:0c:d4:11:9c:04:cc:2d:d2:f5:9f:be:d5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Oct 28 22:01:12 2026 GMT
Not After : Oct 29 22:01:12 2026 GMT
Subject: CN=659c3a456efae48cac0b1a5d701ddbcd1f2b6a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:f2:d0:e5:51:65:82:11:19:42:89:69:2e:
cd:b1:0d:4a:14:a9:88:66:3d:b0:aa:30:78:63:97:
5a:13:ac:c5:0f:77:ad:cd:ad:1e:e3:f7:fa:7f:49:
54:99:fe:26:ac:48:b9:67:16:28:51:14:13:85:84:
f3:8d:83:2c:64:d2:c8:4a:9b:2e:ab:4f:8c:69:14:
c2:bd:e5:dd:56:61:08:cd:58:72:f5:95:f6:fb:56:
f0:c6:b3:55:43:18:1b:10:b5:8c:51:5c:80:dd:00:
07:32:5a:66:ee:7c:2c:b0:44:db:cb:4d:c5:1f:a8:
db:9d:c0:18:23:35:5a:91:02:2a:3f:3f:44:31:d3:
bc:43:8d:fd:85:98:4a:28:69:7f:30:be:9f:14:3f:
82:6c:33:49:7b:da:2a:1c:5b:3e:c7:61:84:e3:af:
19:60:01:75:36:8b:d7:02:e0:db:5f:b7:bc:e5:28:
72:3f:f7:e6:1d:da:0c:00:b5:58:8b:91:1a:0c:ae:
1c:d1:17:35:37:76:13:04:19:9d:6c:7c:a0:98:b0:
f4:e2:ce:fc:ca:6e:51:dd:61:76:19:c3:be:11:98:
80:fa:ed:06:1f:cd:49:9b:46:f4:46:6c:71:6f:4e:
36:d4:9e:bb:2d:e3:c1:bf:22:5a:cc:3f:c7:d2:e4:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:3A:45:6E:FA:E4:8C:AC:0B:1A:5D:70:1D:DB:CD:1F:2B:6A:6E
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:4d:d8:c6:19:9b:57:b3:6f:42:45:b3:52:fb:e5:4f:e1:
d1:8a:3d:af:1b:47:eb:fe:4d:f7:3f:f2:a5:68:23:c7:33:0e:
d9:69:0b:1a:09:78:e3:3d:45:78:cd:2b:df:0a:c6:5b:04:bc:
73:b7:7f:46:65:38:3b:d0:c9:e5:d5:eb:2a:74:01:ef:d5:8b:
43:59:c1:69:32:fb:52:9a:e5:9b:d5:57:62:49:0d:39:eb:34:
77:76:60:69:58:70:b3:1a:fd:1f:bd:5c:40:59:60:82:29:4d:
bb:dc:d9:81:b7:ee:79:e4:1c:39:50:e9:a6:d4:71:bf:c6:99:
4f:77:40:8f:13:8b:69:6b:92:82:fa:6d:d5:b1:1c:82:f3:fc:
58:67:0f:09:3e:f9:ed:49:f0:b4:40:77:f7:57:a5:d1:44:32:
f5:86:7c:8e:20:8f:2f:4f:d9:32:07:44:ee:e7:b5:1b:16:6a:
30:35:ab:40:4b:46:8c:ce:a5:79:08:1b:a0:c9:ec:62:51:df:
ea:10:3e:7f:55:d6:60:7e:41:aa:39:a2:b9:ff:7c:47:53:de:
20:d6:2a:17:57:b4:26:bf:61:b8:a3:96:f9:91:85:58:4f:4c:
f1:f3:f2:77:09:c7:d0:ab:9c:5d:14:0d:a9:e4:9a:d3:02:16:
97:01:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:58 2026 by rpki-client