Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: ruRjixu7ITc9ZYsOUk9PXK4xP91cEclKAuMGlqPfGKk=
Subject key identifier: 2F:8F:CF:57:37:25:0F:61:A6:20:BC:BE:42:C1:D6:2B:9B:D2:25:CF
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01A0DE733CC1A96DBA33BEE04268C034731F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 16:01:29 +0000
Manifest this update: Sat 26 Sep 2026 16:01:29 +0000
Manifest next update: Sun 27 Sep 2026 16:01:29 +0000
Files and hashes: 1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: UPMTyl0v4idWNcYQxvYaU4+h8aQ4vzEqwyLmTEAnWRQ=)
2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:3c:c1:a9:6d:ba:33:be:e0:42:68:c0:34:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Sep 26 16:01:29 2026 GMT
Not After : Sep 27 16:01:29 2026 GMT
Subject: CN=2f8fcf5737250f61a620bcbe42c1d62b9bd225cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:1b:f0:45:01:af:49:78:ec:3a:69:eb:20:
de:5b:77:d8:b4:2b:5a:9d:fa:bd:2a:d4:fc:23:3c:
2e:8d:b7:47:a5:59:bd:ed:23:ab:a4:c8:20:1f:b3:
1d:45:55:09:ff:a1:75:56:d2:b8:b3:fa:74:55:25:
f9:21:56:fa:9e:72:e0:80:f2:43:4d:e4:38:2b:d7:
b3:25:c1:b3:be:54:b0:2a:d7:15:07:ac:39:84:7b:
00:22:08:f9:5d:dc:e4:e0:96:ed:9c:b1:1d:0a:ad:
66:b1:a7:e4:72:67:48:13:96:58:77:32:99:2b:86:
2c:d7:e9:af:fc:f3:f0:62:42:a2:65:a4:b7:a4:4d:
6c:6b:f8:99:09:77:dc:59:17:44:65:12:cd:63:ad:
49:d1:c3:7c:ef:4e:f9:7b:68:0b:d9:51:c6:81:d7:
b8:74:be:cb:ab:69:30:52:5c:41:93:8b:42:3c:df:
f9:04:1b:43:07:22:b3:ab:b1:24:d0:ca:96:47:44:
6c:ad:88:08:0d:97:e5:3f:ef:81:ea:67:8e:8b:e7:
82:3c:dd:ab:19:3a:42:12:df:d4:98:2b:d9:6a:15:
e2:2e:8d:58:dc:0a:80:a8:10:98:58:47:83:1f:59:
dd:ba:62:c5:89:45:dd:88:7e:dd:5a:11:fb:13:da:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:CF:57:37:25:0F:61:A6:20:BC:BE:42:C1:D6:2B:9B:D2:25:CF
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0d:b9:e2:88:5f:4e:0f:96:ab:a2:b8:9e:49:52:34:11:a1:
7c:dd:cd:f0:d4:9c:1b:ad:d9:04:59:63:a4:6e:34:2c:51:cd:
1e:43:48:a4:ec:2b:2f:fe:50:4e:65:27:f7:5b:00:07:1c:e9:
85:1b:a7:f5:f2:cf:ac:48:c3:e9:2b:fd:f7:b9:96:db:a0:ff:
84:65:7c:ac:7e:06:fb:30:f3:2d:49:47:06:57:c9:d7:a2:bb:
dc:8f:4c:48:5c:6e:5c:4b:78:8d:59:8e:a9:7f:c1:45:3a:95:
07:a1:d7:da:c4:f4:e3:75:24:86:fe:4e:50:12:8d:3e:bc:dd:
f4:35:ef:ea:11:d2:da:8e:71:82:c4:9f:ef:aa:5b:80:78:f8:
14:f8:73:20:d9:cc:5e:fe:a4:c4:54:df:25:21:a3:6e:c7:7f:
8a:07:07:fb:d8:b0:87:b9:10:bd:ec:46:21:3d:2b:64:3e:20:
c9:f0:a8:89:1a:2f:b9:c6:e9:ee:28:3b:4e:d6:f3:7b:ee:95:
da:23:e3:fd:4e:1e:8c:eb:b8:15:18:4c:5b:ff:eb:79:5a:67:
48:d7:08:4e:d3:6c:4c:32:84:60:e2:72:16:78:75:f1:53:ae:
f4:51:b5:77:97:5e:b9:2a:be:ea:f2:7e:fc:30:01:62:24:ac:
c8:20:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:17:20 2026 by rpki-client