Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: vwEoRKJ+AuBG8D/PlGjhkK51cd9kJblPMcN6Dz4fYzs=
Subject key identifier: 06:79:D2:83:A1:6E:4E:97:C4:DF:DC:AD:BB:C3:BB:D1:47:81:CB:14
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019D37C055CAEFC97A0217C244A220A1728F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: 1Do/EIm9dLADqVdQ5kT/prMnlYn0iU2LMjXKcAG7Bzw=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:55:ca:ef:c9:7a:02:17:c2:44:a2:20:a1:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=0679d283a16e4e97c4dfdcadbbc3bbd14781cb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:e1:8a:37:3d:b9:c4:b2:71:66:4f:4b:44:
06:25:af:e7:70:4f:2e:3f:15:5b:fb:19:0f:6c:d7:
54:53:38:8a:34:a1:cb:7a:eb:7b:77:76:a6:85:7c:
8d:03:5a:ff:85:99:2d:22:c4:d3:ca:60:0e:13:dd:
64:a1:51:70:e6:4a:39:c2:4f:7f:0d:27:8a:5b:2f:
fe:52:d5:96:65:03:fc:ef:4f:49:94:5b:0c:49:d7:
a9:b1:e4:04:67:de:78:8c:d5:01:58:ca:5d:93:11:
eb:f2:18:cb:ae:bb:5f:cf:4a:2a:0e:cd:cd:d5:d0:
d8:86:84:06:2b:75:31:93:ec:5d:2f:ef:99:2a:5c:
df:de:f9:88:61:10:43:37:cd:b6:a0:dd:23:19:75:
1b:d7:2d:dc:eb:9e:d8:50:5f:7a:ed:6f:66:b8:a0:
18:31:fe:ef:46:5e:d2:21:24:87:36:a7:4e:62:7b:
ba:6c:30:73:3d:4c:f5:19:75:8e:bd:5c:f9:72:d0:
17:4a:e7:be:09:b1:88:ed:aa:00:d9:61:e1:84:a3:
b2:15:9c:53:d2:a6:60:c1:87:79:af:8f:b6:c4:70:
94:5a:b2:45:f3:c0:47:5a:a0:1e:fc:28:c0:7e:a4:
14:30:20:85:ab:ab:49:18:a5:45:c7:29:4d:8d:44:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:D2:83:A1:6E:4E:97:C4:DF:DC:AD:BB:C3:BB:D1:47:81:CB:14
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3e:26:b3:52:cf:2f:bb:9f:20:65:52:7a:ba:80:4a:5d:23:
7c:d7:52:51:31:94:35:70:d6:9f:5f:b4:f7:9b:89:ae:b3:4c:
4e:c1:58:11:c6:b9:a7:b1:a2:4d:60:bc:75:01:65:b9:ac:6b:
81:09:1c:92:1d:1a:0e:d2:05:af:94:c1:81:4a:31:97:1d:6b:
4a:70:58:f4:59:0c:15:6e:d3:51:af:ed:9f:55:0c:47:b6:d1:
fc:b0:0a:9f:be:57:24:12:dd:2a:60:dc:f6:cc:c0:5c:14:cd:
15:70:5d:51:d0:1b:fd:40:e7:dc:8c:6e:9c:a1:55:60:cf:d8:
bb:66:a6:a1:be:28:8d:39:14:f4:27:e6:24:e5:49:49:4a:51:
88:e4:25:20:df:c1:9a:bb:13:89:66:cd:ca:59:72:15:dd:a1:
33:5e:77:99:4b:c6:51:8b:ec:22:8e:48:26:68:ec:b7:f4:6d:
a6:c0:1f:f7:c1:83:ec:ac:02:95:1f:2a:55:e6:09:55:61:a1:
ea:cb:ee:5b:73:93:c7:e7:17:a3:45:19:4e:4f:fd:59:27:c1:
cd:9d:31:9b:8b:2f:41:95:9c:f7:3c:1f:45:ac:34:be:04:af:
f0:7e:c7:66:f5:e0:d8:fb:63:8d:21:dd:c2:e3:33:7c:e3:6b:
bd:9f:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:39 2026 by rpki-client