Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: EmPqAa1xjoPtdWJvefK4mdkGFxMKL5LnqbPqRjyUGCY=
Subject key identifier: 76:13:48:6E:71:EA:50:81:58:16:E3:4A:37:2E:31:24:DF:C0:7B:23
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019A1B3E3CFC91B885BB74E7F841B2DEA457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 12:00:54 +0000
Manifest this update: Sat 25 Oct 2025 12:00:54 +0000
Manifest next update: Sun 26 Oct 2025 12:00:54 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: XgjiuCCUlGC82gUpJRZpFT5JGT8kXkaarreKCYEPiuE=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:3c:fc:91:b8:85:bb:74:e7:f8:41:b2:de:a4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Oct 25 12:00:54 2025 GMT
Not After : Oct 26 12:00:54 2025 GMT
Subject: CN=7613486e71ea50815816e34a372e3124dfc07b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a1:e8:d1:2f:1a:65:fa:60:72:61:cc:59:12:
1a:2a:31:cb:19:b5:9f:8e:2b:29:d8:f6:99:19:53:
74:0e:1b:10:c9:8f:b4:f5:69:ef:8c:b8:52:e9:97:
71:0b:03:2f:64:c2:72:8a:b7:79:d5:cc:4f:d7:63:
92:93:e0:89:1b:8c:33:eb:f4:2e:e6:b1:2e:76:d6:
08:a9:86:f9:32:e9:63:2c:66:11:3c:f9:91:6c:a6:
bf:77:90:19:59:98:16:ff:fb:b6:fb:9f:29:2d:a6:
49:af:3e:e2:d9:8f:88:0b:45:9e:ea:75:5c:1b:d6:
6b:ed:05:94:ad:81:fe:35:2f:3e:27:2b:64:b1:39:
86:8d:7f:8e:67:47:ee:7d:57:3c:04:e8:e6:8b:df:
35:6a:51:5a:2f:53:55:e3:c1:8e:4b:3e:0c:9a:18:
8e:75:27:6a:03:54:19:16:05:05:5b:1a:ea:68:30:
3f:9e:81:00:02:1e:f7:52:40:91:6e:77:e2:15:23:
56:fd:13:3c:e9:19:43:3b:ec:b9:d8:2b:03:1f:b3:
18:c4:68:93:fa:07:cf:0f:a0:55:cb:79:7c:e1:ff:
82:97:8e:10:1e:99:84:ac:b5:c0:cc:66:16:79:f4:
fa:3a:56:83:76:1c:78:19:84:c7:fb:23:87:83:d0:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:48:6E:71:EA:50:81:58:16:E3:4A:37:2E:31:24:DF:C0:7B:23
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ff:a8:c1:5a:53:3c:66:81:34:6d:24:58:37:15:08:da:87:
5a:11:ee:6c:57:ed:cd:4d:aa:36:e2:05:23:b1:35:f7:71:de:
00:60:a9:56:20:22:63:f0:bf:7e:09:d3:49:e2:86:7d:d5:a2:
33:54:1b:0c:08:05:81:f9:7a:af:af:9f:88:16:56:2b:33:ed:
66:03:00:76:32:6b:38:69:f2:a5:69:5f:17:e7:a8:51:91:e3:
8b:47:94:c5:88:1a:51:aa:0d:0b:9e:3f:fd:fa:9b:06:c4:b0:
7e:4b:10:9e:bd:f8:f7:58:24:e4:07:01:80:5b:b6:e7:0c:2f:
42:e2:dd:10:58:1e:58:57:a7:98:e7:ac:a5:58:88:23:cb:8f:
3e:a1:c2:61:b3:fc:e9:89:e2:75:28:0b:22:65:7b:62:67:17:
90:c2:ce:a5:a3:42:b8:7c:9c:dd:8c:de:d3:36:d7:a3:8e:01:
a9:23:5b:a4:94:88:6f:7c:77:ea:ce:e6:c1:6a:29:7f:76:c9:
01:28:25:bd:a8:03:1a:d0:b7:e2:81:77:c2:5f:22:45:64:3c:
87:84:46:5f:5f:70:0a:a0:db:6c:65:6e:70:b4:13:bd:c3:83:
54:47:cb:1a:fe:c1:a5:0e:00:b5:c7:31:4b:75:92:44:a8:68:
3e:87:ce:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobPjz8kbiFu3Tn+EGy3qRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy
NjIyZjgwHhcNMjUxMDI1MTIwMDU0WhcNMjUxMDI2MTIwMDU0WjAzMTEwLwYDVQQD
Eyg3NjEzNDg2ZTcxZWE1MDgxNTgxNmUzNGEzNzJlMzEyNGRmYzA3YjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KHo0S8aZfpgcmHMWRIaKjHLGbWf
jisp2PaZGVN0DhsQyY+09WnvjLhS6ZdxCwMvZMJyird51cxP12OSk+CJG4wz6/Qu
5rEudtYIqYb5MuljLGYRPPmRbKa/d5AZWZgW//u2+58pLaZJrz7i2Y+IC0We6nVc
G9Zr7QWUrYH+NS8+JytksTmGjX+OZ0fufVc8BOjmi981alFaL1NV48GOSz4MmhiO
dSdqA1QZFgUFWxrqaDA/noEAAh73UkCRbnfiFSNW/RM86RlDO+y52CsDH7MYxGiT
+gfPD6BVy3l84f+Cl44QHpmErLXAzGYWefT6OlaDdhx4GYTH+yOHg9BlCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYTSG5x6lCBWBbjSjcuMSTfwHsjMB8GA1UdIwQY
MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et
NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2
LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/+owVpT
PGaBNG0kWDcVCNqHWhHubFftzU2qNuIFI7E193HeAGCpViAiY/C/fgnTSeKGfdWi
M1QbDAgFgfl6r6+fiBZWKzPtZgMAdjJrOGnypWlfF+eoUZHji0eUxYgaUaoNC54/
/fqbBsSwfksQnr3491gk5AcBgFu25wwvQuLdEFgeWFenmOespViII8uPPqHCYbP8
6YnidSgLImV7YmcXkMLOpaNCuHyc3Yze0zbXo44BqSNbpJSIb3x36s7mwWopf3bJ
ASglvagDGtC34oF3wl8iRWQ8h4RGX19wCqDbbGVucLQTvcODVEfLGv7BpQ4Atccx
S3WSRKhoPofOWQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:25 2025 by rpki-client