Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: +h2c0B5vf1YLvkU8eKI5rRdSoKyFfrQQ1Ajw4JOHXSk=
Subject key identifier: A8:1D:27:17:11:21:75:26:70:3C:75:6D:38:74:6F:34:5A:58:F2:50
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019E9B172EB12A1E6A7DC2CB3B6924FE77A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1947
Signing time: Sat 06 Jun 2026 04:00:48 +0000
Manifest this update: Sat 06 Jun 2026 04:00:48 +0000
Manifest next update: Sun 07 Jun 2026 04:00:48 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: 7AFbcmMn1hq7heKWPfl3qFtlBKFUSatOJAMgHw7oC4k=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:2e:b1:2a:1e:6a:7d:c2:cb:3b:69:24:fe:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jun 6 04:00:48 2026 GMT
Not After : Jun 7 04:00:48 2026 GMT
Subject: CN=a81d271711217526703c756d38746f345a58f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5c:28:4c:cd:92:33:c0:88:60:88:2c:4f:44:
f0:20:ae:15:5a:fc:80:03:9a:5c:b8:61:c4:1c:b3:
32:e6:a5:a0:91:55:6a:90:93:17:b7:ca:31:df:8c:
83:36:5f:a9:da:05:53:3c:3a:d2:4f:ae:e2:f6:f6:
ea:e1:1f:b0:ca:78:02:f1:cd:a8:d8:59:a8:28:23:
b2:8d:0e:0d:18:3a:64:6d:83:3f:a3:0a:99:f3:84:
71:3f:c6:7c:18:10:4c:08:3b:d3:b4:28:7c:74:fd:
b5:5a:af:0d:c1:0c:b4:73:0f:0e:a6:8c:be:24:35:
ba:68:42:79:3d:c8:89:56:d0:23:a8:cd:65:c4:c7:
11:95:9c:ac:16:00:94:5c:7b:4b:ac:d2:92:ff:3d:
49:44:89:0d:47:e9:44:ef:16:5b:d4:86:90:a4:92:
31:0d:0c:14:63:80:c6:c0:55:a6:49:ae:5d:bc:45:
dc:e7:ef:bf:10:95:0c:d4:e3:42:87:9b:9c:fe:2e:
07:5d:63:b9:1c:35:14:02:b4:ea:7b:9c:c1:e6:85:
88:5c:a1:26:78:53:98:0c:d2:fd:48:18:0f:c1:da:
f0:27:24:66:8e:82:06:10:d3:d7:eb:d3:f4:c5:4a:
c3:36:a9:3d:16:eb:19:9f:f5:61:d1:3e:b4:bd:6f:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:27:17:11:21:75:26:70:3C:75:6D:38:74:6F:34:5A:58:F2:50
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a8:0e:e1:60:bc:ee:9c:ef:f5:0e:d8:93:f7:5c:aa:73:73:
2d:68:31:bb:c0:25:99:46:85:93:ad:6d:92:85:ea:53:ff:26:
23:ae:d4:d8:b7:0b:6f:c0:78:69:20:ed:a9:eb:75:48:a1:60:
fa:f0:c8:d3:99:f5:7a:24:20:32:64:8f:55:2b:5f:e1:c1:9b:
18:d2:e4:ea:db:09:07:80:34:ff:ac:d8:87:72:77:63:33:4f:
d5:7b:4a:a5:f9:04:99:32:9a:0d:95:dc:f1:f3:89:d0:56:f1:
8f:bf:57:6c:44:58:a6:33:b1:1f:8e:1b:9c:33:fa:8d:c0:4c:
23:27:84:16:5a:81:bd:73:80:91:99:e6:bf:04:96:a5:ec:7c:
9c:04:d9:3f:61:04:36:2d:c7:81:e8:0e:cf:fc:13:a6:f8:f2:
1f:3a:8e:9d:1f:f9:52:0a:2d:54:b3:7b:95:a5:9b:c5:e3:48:
5b:09:a2:7c:7f:b5:b4:5f:ce:73:c7:c0:ce:7a:4a:4d:56:a3:
b1:8b:d1:4a:6b:3b:cb:ed:c3:31:4e:64:94:ed:81:95:00:68:
f7:59:e8:e7:73:eb:62:1a:4e:ba:f8:88:8f:76:92:e6:2a:e6:
58:f2:34:a7:a5:2e:99:5c:a8:73:8d:9e:90:39:c5:24:6a:4d:
f8:89:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:44 2026 by rpki-client