Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: 6zJKimA7W81W5Pi65fg+dC22m6Q7cVzeTpMPWDt0Ip0=
Subject key identifier: 21:64:4A:64:4D:09:E4:2B:49:27:AC:87:FE:69:78:EB:BC:04:90:A6
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 019D2704192D45EFBB1C070D229B6894FDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 0949
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: fW5fO5nhjflWk7peTuUQ4VJYkQPnQ9v972z0sqajEAw=)
2: e_OqWACnyi2Gw8DMbR4NWVTK1DE.roa (hash: Ya8bGHns04cHwjGPb8IJhQNI3VXum/7q6BwWLFTuZIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:19:2d:45:ef:bb:1c:07:0d:22:9b:68:94:fd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=21644a644d09e42b4927ac87fe6978ebbc0490a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:5d:24:65:36:26:3b:9c:aa:09:fb:91:d9:
50:3e:46:fe:3a:13:a7:73:21:45:fe:af:c6:2e:84:
a1:b1:c4:f5:72:03:74:03:2a:96:d1:a5:27:09:d7:
bb:9f:08:c3:f5:f6:a9:e7:b6:ec:fe:47:0c:cf:e6:
6f:06:70:b7:a9:bc:a7:65:77:fc:aa:ff:cf:77:49:
3d:54:60:be:e1:57:94:bf:38:45:36:27:e9:bb:76:
6f:dc:98:20:6c:e3:aa:a9:ea:15:69:d6:8c:e5:49:
21:16:31:18:a7:1d:5f:b4:ec:1e:8b:2d:08:d9:20:
e4:da:0f:87:48:d1:86:c9:ea:68:94:6c:75:66:8b:
d2:22:ca:dd:4a:cb:6c:d1:a7:56:b8:65:4d:d3:08:
65:59:da:15:bc:bb:18:87:fd:4c:34:84:08:2f:9d:
60:45:47:35:51:91:39:24:f8:a0:6c:e7:05:29:9b:
ee:be:0b:bf:a7:e3:2c:83:46:4f:09:f8:b7:ef:3a:
3b:40:f9:4d:82:a1:07:15:a4:2d:9b:e4:f1:ee:c3:
01:7d:6f:14:64:77:30:fc:5d:e5:61:c5:5c:29:a3:
aa:14:5d:ab:d2:cd:b5:e4:81:b0:e7:57:83:6c:fa:
8a:ac:5c:86:04:f7:b9:a3:f9:41:1a:fb:f2:2d:c1:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:4A:64:4D:09:E4:2B:49:27:AC:87:FE:69:78:EB:BC:04:90:A6
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:a1:af:80:47:ca:88:63:08:25:95:9d:57:c1:c3:f5:3a:
fa:a7:cb:a0:33:2e:ff:4a:9a:56:4f:29:16:3d:62:a3:09:14:
8c:a0:bc:d8:89:b5:fc:4c:7a:30:23:63:b1:a9:8f:6a:a4:58:
67:df:c3:f4:37:14:74:64:9f:1a:19:f4:1b:5b:d9:ed:49:30:
6a:c3:33:58:bd:ce:ee:29:22:2e:c6:a0:d9:f9:7a:5c:25:7e:
7c:4f:ae:ca:34:59:e9:0b:5f:e1:67:3f:53:72:31:27:9f:55:
08:56:9a:ed:72:65:f1:46:a7:36:c8:88:2d:98:b7:96:63:a8:
b7:f2:3b:85:a9:f5:33:cd:6d:6a:41:01:57:fc:b2:55:a0:f0:
f0:1f:c6:97:26:4d:e2:0f:67:80:2b:37:60:5d:44:a6:f1:e9:
c7:b7:f8:12:23:e1:53:d9:b5:c0:7a:4b:7d:a5:38:f5:dd:9a:
6a:d6:6f:9a:71:bc:00:b4:aa:a4:72:95:f6:92:ac:d7:f8:98:
50:be:99:8f:66:22:34:7d:f6:ff:95:f7:0a:67:da:f3:b3:75:
f6:ad:15:3a:24:84:87:3e:78:3f:70:ec:44:dd:9b:00:35:ee:
41:53:ee:fe:63:97:7d:d9:29:66:01:90:6b:c7:fb:95:d7:6b:
0f:c6:c5:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBktRe+7HAcNIptolP25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjBjNWE0MDNlMmRhZDNjNDdiNzkxZmRhMjA0MmNmNzE1
MDA5Y2YwHhcNMjYwMzI1MjIwMTEzWhcNMjYwMzI2MjIwMTEzWjAzMTEwLwYDVQQD
EygyMTY0NGE2NDRkMDllNDJiNDkyN2FjODdmZTY5NzhlYmJjMDQ5MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQVdJGU2Jjucqgn7kdlQPkb+OhOn
cyFF/q/GLoShscT1cgN0AyqW0aUnCde7nwjD9fap57bs/kcMz+ZvBnC3qbynZXf8
qv/Pd0k9VGC+4VeUvzhFNifpu3Zv3JggbOOqqeoVadaM5UkhFjEYpx1ftOweiy0I
2SDk2g+HSNGGyepolGx1ZovSIsrdSsts0adWuGVN0whlWdoVvLsYh/1MNIQIL51g
RUc1UZE5JPigbOcFKZvuvgu/p+Msg0ZPCfi37zo7QPlNgqEHFaQtm+Tx7sMBfW8U
ZHcw/F3lYcVcKaOqFF2r0s215IGw51eDbPqKrFyGBPe5o/lBGvvyLcHPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFkSmRNCeQrSSesh/5peOu8BJCmMB8GA1UdIwQY
MBaAFDSwxaQD4trTxHt5H9ogQs9xUAnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUt
YWFhYjI1ODk0ZDVlLzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUtYWFhYjI1ODk0ZDVl
LzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZKhr4BH
yohjCCWVnVfBw/U6+qfLoDMu/0qaVk8pFj1iowkUjKC82Im1/Ex6MCNjsamPaqRY
Z9/D9DcUdGSfGhn0G1vZ7UkwasMzWL3O7ikiLsag2fl6XCV+fE+uyjRZ6Qtf4Wc/
U3IxJ59VCFaa7XJl8UanNsiILZi3lmOot/I7han1M81takEBV/yyVaDw8B/GlyZN
4g9ngCs3YF1EpvHpx7f4EiPhU9m1wHpLfaU49d2aatZvmnG8ALSqpHKV9pKs1/iY
UL6Zj2YiNH32/5X3Cmfa87N19q0VOiSEhz54P3DsRN2bADXuQVPu/mOXfdkpZgGQ
a8f7lddrD8bFCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:04 2026 by rpki-client