Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: fw63xvicRqNAo2D2DPa+jhqBJHdVUMd6+RHbMtWt+7w=
Subject key identifier: CE:58:7F:28:B0:7B:A5:DB:19:FF:8B:7B:E5:94:D5:C0:EE:67:D4:BA
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019F95EE1D2A3B8CC0C5768E4D1A15B4FBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 21:00:37 +0000
Manifest this update: Fri 24 Jul 2026 21:00:37 +0000
Manifest next update: Sat 25 Jul 2026 21:00:37 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: jzK9KvUsnR1lgXI+2FTN6SyDUOOqsq51QMAjGjDOVwA=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:1d:2a:3b:8c:c0:c5:76:8e:4d:1a:15:b4:fb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jul 24 21:00:37 2026 GMT
Not After : Jul 25 21:00:37 2026 GMT
Subject: CN=ce587f28b07ba5db19ff8b7be594d5c0ee67d4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:50:5a:e0:9e:aa:aa:03:3d:7d:fc:68:71:
14:d7:38:bd:fb:bf:ef:de:d4:53:07:ee:04:b9:c4:
e7:22:21:c8:78:67:1c:6b:1c:86:11:b0:e7:64:d4:
43:9e:f2:81:6e:a7:8e:48:d2:81:94:01:f5:8f:24:
e2:b3:4a:30:b2:25:0c:da:94:91:56:14:6c:e4:85:
85:6f:cd:02:06:cc:26:50:cb:2e:57:49:a1:16:64:
13:c0:0e:5d:28:93:5d:9f:9f:16:f9:f4:62:4f:59:
48:a8:a3:f8:6a:12:32:e4:c0:7f:70:45:c9:1b:30:
7c:73:c8:ff:56:c8:cb:79:7d:00:7c:72:1f:3e:fd:
91:39:de:e8:26:2f:3d:ff:60:ae:2d:55:8f:11:bc:
af:25:38:11:d1:2e:c7:a7:5c:ef:93:d0:33:9c:e4:
40:27:9f:f6:eb:80:96:06:c4:fe:4b:40:8d:95:62:
c6:d2:f6:39:7d:cb:f7:37:91:2d:16:13:56:89:6c:
04:26:58:f9:f9:04:43:97:1c:e8:89:3d:b7:7e:d7:
99:a5:6f:5b:fd:fc:2c:b1:a5:46:e9:85:9e:e6:87:
ea:d1:2e:3e:9c:49:13:e1:d7:5f:86:2e:c6:4f:a9:
8d:79:ae:df:ed:bb:d2:2b:a0:a0:b7:89:da:c5:cb:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:7F:28:B0:7B:A5:DB:19:FF:8B:7B:E5:94:D5:C0:EE:67:D4:BA
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:9c:3a:f8:90:9f:b6:76:c6:9d:a0:60:fb:8e:c6:7b:77:
88:a6:64:8d:50:70:fc:0a:91:f6:97:c5:28:03:45:e0:d5:e3:
4c:86:fe:94:32:b4:10:ea:35:ac:a1:08:82:79:41:70:85:c4:
08:85:eb:4c:9e:49:fc:48:a0:c0:14:e5:0a:28:1d:4a:d0:b9:
b7:e9:a3:36:d3:6e:53:f7:60:c9:74:0f:41:0f:25:29:38:66:
d1:6f:e6:6d:a0:13:c3:b2:06:84:ee:d3:45:18:cf:bd:a0:82:
b7:fd:47:9d:03:c2:4e:f1:1d:81:47:9b:d8:16:ac:f6:6f:fb:
7f:03:4b:56:5b:7f:ee:98:c1:60:df:c0:52:a8:59:0c:4d:44:
ef:0e:f8:99:fd:3f:d9:98:93:37:80:0b:fb:2a:a3:b2:66:cd:
dc:64:fa:5c:8f:3d:92:fa:a9:c9:5f:9f:87:d6:f8:de:84:6b:
e8:e7:ca:c5:25:a9:4a:16:10:0a:a2:8a:e3:ac:1c:b3:ce:a8:
bb:ec:0a:ac:d2:57:86:8b:69:f1:63:f0:10:a3:23:90:c0:7a:
ca:c5:3e:1b:db:f8:40:fc:23:e1:3e:65:11:2e:f7:27:6f:cb:
b7:a5:41:1b:57:17:60:f4:a3:78:04:d5:b4:11:0e:a5:1a:b4:
69:3c:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:47 2026 by rpki-client