Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: McLXt8dkP2IWLCkQpr45Fy7vfVB3anQY4KREor+4zMU=
Subject key identifier: BF:4B:74:6F:D5:88:ED:F1:1A:77:EE:38:53:84:77:2A:BE:EB:D1:99
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019E9D057C4BD5AB4E516CF559E4E300E857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1948
Signing time: Sat 06 Jun 2026 13:00:42 +0000
Manifest this update: Sat 06 Jun 2026 13:00:42 +0000
Manifest next update: Sun 07 Jun 2026 13:00:42 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: j7r/u3BTsmGR4lRZsbt8wdLDrBBhi+RX7T7sAosDc7E=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:05:7c:4b:d5:ab:4e:51:6c:f5:59:e4:e3:00:e8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jun 6 13:00:42 2026 GMT
Not After : Jun 7 13:00:42 2026 GMT
Subject: CN=bf4b746fd588edf11a77ee385384772abeebd199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:d0:80:d8:2a:9e:dc:2c:68:84:9d:3d:ed:
49:58:c6:93:b1:ad:99:a9:24:9d:30:d8:79:8a:8e:
94:27:51:b5:8b:9a:3c:b6:17:23:e1:c9:48:0b:49:
15:5b:ac:cb:5d:b7:bf:70:59:b4:61:d1:10:5a:02:
90:1c:05:b4:ab:c5:13:9f:ea:3b:5c:66:2b:47:ae:
bf:dd:90:00:cd:e1:2e:3f:19:e8:ab:88:5b:10:18:
bb:8b:59:28:84:c3:f4:23:ab:7b:09:97:f6:a7:83:
36:5d:51:67:26:dd:2a:73:ad:e6:24:c6:da:43:a6:
aa:8f:58:cb:4e:f8:35:e4:e3:4b:e3:db:85:ef:2b:
8b:7c:cb:2d:46:9a:08:40:34:d8:cc:e1:5b:32:b1:
53:d5:c7:74:b2:8a:95:0f:0f:c8:ca:af:66:26:48:
d6:cd:13:e9:69:4e:85:12:dd:34:0d:8b:7a:7c:ad:
08:8b:78:fc:30:dd:45:6f:f9:35:86:fb:cb:ea:cf:
37:fe:d9:17:ce:bb:61:83:ab:d8:72:02:12:27:8e:
46:fb:f7:2c:ea:d7:68:05:ed:4b:9d:d5:e9:13:3a:
aa:aa:20:3c:af:ce:61:81:27:44:dd:a5:a7:f4:29:
16:5a:28:d6:05:95:f1:7c:e4:2a:5b:00:dd:6e:a6:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:74:6F:D5:88:ED:F1:1A:77:EE:38:53:84:77:2A:BE:EB:D1:99
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7f:55:83:63:ae:5a:6d:9b:2c:d2:b1:75:cb:85:20:0f:26:
4e:70:00:2c:50:6a:86:16:17:61:d5:5c:6f:24:93:96:39:97:
82:50:01:e4:be:7b:e0:b6:95:a2:8c:63:63:0c:86:b5:67:2e:
28:8a:2c:a6:8e:ee:7c:13:5d:03:b2:48:d4:f8:e2:22:8a:5d:
4e:26:e3:fc:f4:67:eb:b4:1c:87:c7:a4:63:bb:24:f4:07:29:
91:30:e0:8d:85:ee:8d:32:f8:71:f3:bd:3d:dd:ab:51:b7:95:
2a:ae:75:89:b9:4d:3c:7a:31:cf:71:50:4e:30:82:22:98:dc:
3c:6e:f9:da:dc:5d:8d:14:d3:6e:31:ca:d0:c4:44:e6:60:93:
ef:82:8c:b5:e5:f2:f0:60:e3:bd:43:69:d8:87:23:ec:ad:f9:
42:97:da:e6:6c:11:08:b4:68:a6:2f:4f:46:81:87:56:63:27:
5c:b8:87:77:d7:ea:7b:52:41:96:e6:d8:90:8a:e9:e0:e9:63:
dd:5b:5b:3b:33:82:6a:8c:2e:d6:9e:ba:15:b9:05:3e:3a:41:
81:16:45:ef:5a:2f:8d:ad:f6:b2:53:0f:c5:90:0f:bc:70:9b:
84:c6:30:72:8b:1f:1d:86:2d:27:5c:90:29:58:55:fc:56:41:
4d:e7:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:45:06 2026 by rpki-client