Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: LuquW78mDvfDqmaPnz6nSqbne6lzGHI93v44Gt6nlfo=
Subject key identifier: D2:12:80:DA:B9:F3:FF:C2:D0:5E:8B:0D:8A:F4:05:AA:AF:1F:AC:3A
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019CAAC64AA09CE591A09BF1B29F7E7760A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: Zk4Blc8Z0pmawc4jm6Aj9q+1EVkyvU98ISzw1hBsPU8=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4a:a0:9c:e5:91:a0:9b:f1:b2:9f:7e:77:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=d21280dab9f3ffc2d05e8b0d8af405aaaf1fac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:2e:e4:90:6d:fd:c3:2e:f9:b8:ec:24:ee:
58:fd:0a:70:fc:67:5e:47:e2:9e:03:f3:6a:6b:54:
a7:29:39:bd:3d:c6:5f:08:26:ce:c5:6b:09:7e:e6:
01:c2:8b:b3:e2:28:2a:f0:37:c2:8f:fd:59:09:6b:
1a:e9:8b:fd:64:65:2d:e3:96:0c:08:5b:7f:b7:9f:
09:c8:b5:12:fc:28:a8:2f:2b:97:a1:75:52:a9:a8:
6f:52:22:88:6d:4e:d6:25:a0:7c:36:f7:14:ac:59:
61:cc:cc:fe:42:8a:94:e2:59:fb:a1:11:02:90:a5:
a4:06:d8:9b:b1:b8:6a:70:38:15:a3:74:73:1e:61:
8c:c8:24:68:33:52:ff:56:5f:3d:13:e8:b1:f3:f0:
f1:0f:28:f6:cf:c1:53:b5:6e:24:0a:a0:b0:43:12:
86:ba:fb:c6:65:86:91:71:27:bc:e1:e1:00:7d:05:
41:03:58:f3:9e:95:f2:10:30:05:07:86:30:42:d1:
f3:de:8d:5d:de:50:46:92:34:a7:07:63:88:0a:39:
b5:85:91:da:f6:14:b0:9d:50:4e:b8:bd:a9:4d:db:
b8:dc:65:b5:82:de:c2:94:95:50:c2:91:ce:a1:ed:
98:7b:91:82:d5:f9:24:92:c5:69:dd:49:74:46:34:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:80:DA:B9:F3:FF:C2:D0:5E:8B:0D:8A:F4:05:AA:AF:1F:AC:3A
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:12:5f:e0:ce:c7:e1:67:a1:5e:f4:13:cc:90:63:76:42:d1:
97:fd:1a:c8:c5:73:2e:a5:eb:bb:b3:31:fd:ea:5c:29:6d:9b:
5d:17:48:48:37:4f:86:1e:a3:79:c7:b8:a6:ad:6d:78:0a:e3:
31:7c:3c:22:d0:c5:d5:46:44:58:d5:e6:0e:bc:11:74:c5:4f:
71:22:f6:1e:02:e6:15:36:98:38:00:51:01:d4:19:e8:04:90:
52:30:58:eb:fb:be:b2:6b:84:39:da:5a:88:db:ab:b7:bc:6f:
9e:45:ab:df:4f:a7:88:de:78:86:7d:4f:7d:40:79:6d:df:be:
33:d2:ca:74:d7:6f:0f:0d:c3:6b:74:a9:08:1c:9c:86:fe:41:
6f:3a:60:e7:46:03:1a:5f:a2:ec:fe:36:96:8e:a3:7d:54:4f:
be:c6:90:64:40:36:af:fe:2c:cb:1d:e7:34:77:64:f6:59:ff:
36:46:31:19:11:15:da:92:ef:68:eb:b2:1f:d5:09:03:8d:a0:
2a:8f:cf:aa:6a:4b:71:ae:02:a0:08:1c:92:bc:ea:cb:21:d9:
9f:61:d2:71:50:c8:b6:50:05:b7:7c:8b:2f:6e:26:6e:57:c5:
ae:c6:8c:0d:ab:7f:fc:bb:c6:b7:54:33:a2:9b:0a:69:7b:96:
db:28:14:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxkqgnOWRoJvxsp9+d2CgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy
NjIyZjgwHhcNMjYwMzAxMTkwMDQ3WhcNMjYwMzAyMTkwMDQ3WjAzMTEwLwYDVQQD
EyhkMjEyODBkYWI5ZjNmZmMyZDA1ZThiMGQ4YWY0MDVhYWFmMWZhYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEou5JBt/cMu+bjsJO5Y/Qpw/Gde
R+KeA/Nqa1SnKTm9PcZfCCbOxWsJfuYBwouz4igq8DfCj/1ZCWsa6Yv9ZGUt45YM
CFt/t58JyLUS/CioLyuXoXVSqahvUiKIbU7WJaB8NvcUrFlhzMz+QoqU4ln7oREC
kKWkBtibsbhqcDgVo3RzHmGMyCRoM1L/Vl89E+ix8/DxDyj2z8FTtW4kCqCwQxKG
uvvGZYaRcSe84eEAfQVBA1jznpXyEDAFB4YwQtHz3o1d3lBGkjSnB2OICjm1hZHa
9hSwnVBOuL2pTdu43GW1gt7ClJVQwpHOoe2Ye5GC1fkkksVp3Ul0RjRtDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNISgNq58//C0F6LDYr0BaqvH6w6MB8GA1UdIwQY
MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et
NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2
LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhJf4M7H
4WehXvQTzJBjdkLRl/0ayMVzLqXru7Mx/epcKW2bXRdISDdPhh6jece4pq1teArj
MXw8ItDF1UZEWNXmDrwRdMVPcSL2HgLmFTaYOABRAdQZ6ASQUjBY6/u+smuEOdpa
iNurt7xvnkWr30+niN54hn1PfUB5bd++M9LKdNdvDw3Da3SpCBychv5Bbzpg50YD
Gl+i7P42lo6jfVRPvsaQZEA2r/4syx3nNHdk9ln/NkYxGREV2pLvaOuyH9UJA42g
Ko/PqmpLca4CoAgckrzqyyHZn2HScVDItlAFt3yLL24mblfFrsaMDat//LvGt1Qz
opsKaXuW2ygUpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:39:53 2026 by rpki-client