Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: NOkFHL9YXR4y8acOgl5HAK9MrU5rA5eVDKxzhk3Ud24=
Subject key identifier: 4F:67:AB:83:A9:68:49:36:4D:4F:8A:2B:3B:C8:2F:6D:E7:57:87:57
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019FA7866BCA3F9E550FF35A975DA4DF3BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 07:00:32 +0000
Manifest this update: Tue 28 Jul 2026 07:00:32 +0000
Manifest next update: Wed 29 Jul 2026 07:00:32 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: DYPWUXPBeg1wuovs5iuI1KtKQy/Yo9af/Aj2sEw1lSw=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:6b:ca:3f:9e:55:0f:f3:5a:97:5d:a4:df:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jul 28 07:00:32 2026 GMT
Not After : Jul 29 07:00:32 2026 GMT
Subject: CN=4f67ab83a96849364d4f8a2b3bc82f6de7578757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:6e:4c:74:f7:f8:81:d1:36:ef:b6:13:70:
dd:48:bc:05:aa:9f:5f:76:9c:26:d4:1c:d4:55:fe:
89:7b:4b:b3:ee:61:e8:cf:9c:fe:35:d7:fd:95:2d:
80:2d:5b:4a:49:19:a4:08:1a:45:33:c0:9a:86:a3:
b5:e0:d3:c3:a6:e9:ff:de:37:72:99:3a:a9:e7:38:
3e:85:f0:08:f8:a4:af:09:ae:16:3c:d3:6a:cd:b0:
bf:5e:49:17:f7:b4:5b:29:5c:7b:6f:13:c4:00:84:
61:4b:a5:db:14:85:b0:2d:47:e6:a0:3c:1b:33:96:
fd:b9:9a:9f:c7:c4:bc:4e:b8:48:b1:1d:e1:f1:17:
59:cc:d7:3a:cc:ba:27:26:42:92:9d:20:ce:90:dc:
ed:18:1f:93:00:ee:87:3c:2b:42:51:3d:6c:43:13:
24:d2:7e:e6:18:18:5d:2c:c1:61:59:9c:b3:43:c3:
ef:0d:29:18:90:30:b8:c0:3a:aa:62:d2:29:d8:2a:
74:a6:16:1d:ef:3c:11:5f:c8:04:4d:0a:66:6b:16:
48:36:52:14:67:0d:db:3a:a4:8e:e7:b8:b3:ef:37:
54:56:4b:e4:8f:f7:3e:02:a3:e9:ef:4b:90:57:ff:
00:ac:7f:ea:9c:b9:a0:05:e7:7f:08:1d:b5:9a:db:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:67:AB:83:A9:68:49:36:4D:4F:8A:2B:3B:C8:2F:6D:E7:57:87:57
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:1e:ae:57:cc:58:f3:92:d0:20:16:a9:ae:2a:9e:ed:02:
45:47:a4:12:3b:2f:26:c4:29:83:86:86:d0:8d:0b:d7:c9:95:
96:dc:10:9f:86:a2:15:a0:dd:8b:ab:ed:87:b2:98:ec:5a:e3:
7c:83:06:6e:ed:a2:e2:d3:8f:97:92:8b:69:cf:6e:2a:a0:1a:
4e:33:b9:9b:96:64:c9:31:79:a6:a6:15:2d:29:2f:6c:48:0b:
70:1c:8c:bc:2b:6e:cc:70:27:4e:0b:2e:17:1e:d3:37:a3:74:
cd:27:73:a5:9d:56:09:80:e6:b3:72:67:64:f0:9e:a8:75:8c:
c5:9f:1a:50:07:c6:0f:f7:94:82:2c:6d:8f:6c:29:0c:51:5a:
0a:93:b4:94:12:95:24:59:3a:1c:f0:cb:58:8f:52:54:6f:c2:
e0:be:8d:63:3c:29:2a:54:39:f8:58:f5:1d:9e:7f:13:d9:bd:
22:4c:91:5b:83:91:b4:d9:3c:80:af:f3:7f:26:18:97:c9:b8:
ea:8e:79:34:b7:ad:71:67:b9:67:66:36:4a:30:03:58:d8:c0:
1e:5e:78:d9:78:f5:9f:44:01:7d:e3:e1:17:a0:4c:2b:57:37:
65:b0:73:c4:7a:58:6f:7e:ed:46:69:9e:e7:e5:7a:29:d3:f2:
5f:a7:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:14:02 2026 by rpki-client