Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: rFa/PCRjWEkV3VT9dxkXhYZGVj09dJjkvScBhM5CMIM=
Subject key identifier: 39:BA:6C:EC:40:04:6A:BD:E8:9C:FA:E1:93:69:73:CD:FC:63:38:76
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019D9A3EDFA6DC03E39F438CF3454EBB772C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: KyNg8aLV6b3bp1Ofs3SCyRD6MomJAWO9mM9vBEwfdFg=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:df:a6:dc:03:e3:9f:43:8c:f3:45:4e:bb:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=39ba6cec40046abde89cfae1936973cdfc633876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:c6:8c:e9:aa:90:e7:f3:7a:67:60:9e:02:
50:49:dd:d8:ba:49:9f:e0:0b:44:c2:25:f7:2b:c1:
bd:aa:cd:6a:f0:94:39:d6:fa:12:a7:17:92:c2:e5:
5a:e7:4e:49:2a:5d:f3:6e:bd:4a:80:73:28:e8:7e:
3e:bb:46:14:a6:bd:1e:2f:fc:19:fd:42:ad:6b:ed:
5a:e0:a7:5a:8a:9f:51:25:62:70:53:dc:20:1f:8f:
8b:70:0a:cb:56:f6:87:6e:8c:0b:a6:5d:cd:74:a6:
c8:db:d5:87:fe:96:af:a6:89:ff:b6:24:7d:be:37:
79:6f:5a:f5:27:76:dc:2a:ea:5c:a1:56:62:9a:38:
a5:0d:aa:f2:5b:cf:ac:11:2f:39:f0:5f:4f:53:04:
37:e7:57:94:b1:cf:7b:16:97:90:b5:86:7f:ba:58:
8a:91:c0:77:95:1e:ac:32:d8:7a:0d:df:e9:1a:f6:
2c:08:e7:92:42:22:25:95:b2:f2:34:46:e9:25:d4:
c3:4e:b2:e0:88:63:e3:ac:ea:ee:5d:61:f2:fe:10:
d4:ee:e6:e1:02:43:a5:4b:7e:95:7a:4a:ea:68:3c:
96:4b:0d:02:0b:20:81:5a:72:eb:54:4c:7c:91:17:
7e:48:8a:73:b5:25:93:ed:1b:71:12:11:d9:cb:79:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:6C:EC:40:04:6A:BD:E8:9C:FA:E1:93:69:73:CD:FC:63:38:76
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9a:05:36:fc:48:7c:e8:9f:cb:4b:1c:1f:75:bb:d7:d5:ba:
ec:eb:04:ee:88:ea:50:f4:44:ff:bb:de:99:22:24:e0:14:f6:
4d:12:ec:4e:b5:72:9b:a2:5b:b4:3f:c5:6f:e2:85:58:14:6b:
0f:ae:3a:45:b9:14:2f:35:9d:b4:97:84:31:d5:2e:7e:3f:cf:
e6:c5:e0:4f:8f:78:5b:ff:a7:d3:2b:78:70:66:0f:cd:f4:5a:
61:82:6d:8f:f0:30:af:9c:c9:56:5d:73:3a:57:03:ae:4c:6d:
aa:1c:cf:e4:9d:7f:79:62:9b:c6:07:31:11:91:2e:73:73:54:
5b:cd:71:66:ab:e6:c8:f0:39:d6:87:ad:1a:05:8f:b0:87:f7:
69:ce:5b:55:44:f5:7c:37:b1:0a:f3:99:f7:dc:2b:84:b4:20:
4c:17:76:fd:8f:97:ce:01:ca:35:a3:14:f6:fa:cb:26:20:83:
c5:b2:ce:7d:9b:74:17:a8:92:24:7d:a6:c2:7f:35:c4:63:d4:
ed:cb:a9:fb:95:2a:af:d0:6b:fa:40:2d:ae:8a:4f:23:70:24:
1b:31:8d:39:82:31:b7:cb:97:1b:41:96:cd:7e:68:df:84:fb:
4d:33:67:46:4c:a3:c9:39:4b:82:73:a7:95:cf:81:3d:d8:e3:
54:89:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:13 2026 by rpki-client