Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: EINNA8n6lFv+9RYMGQiDtT9NEHYifSo0tBknhfNb47w=
Subject key identifier: 4A:A3:07:A3:1C:C6:96:87:A7:BD:48:3C:DB:62:B3:B9:AE:AD:14:A7
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019D2816EC82F0FC983E66729B3AC5C34590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: PUcFc62SryLIWybWPfK9The1UxzGZY17J2RmiW0bMmk=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ec:82:f0:fc:98:3e:66:72:9b:3a:c5:c3:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=4aa307a31cc69687a7bd483cdb62b3b9aead14a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:72:6c:c7:88:5f:1d:97:e0:8f:57:fd:78:
7b:83:52:e2:d4:cf:6d:f5:44:aa:9f:70:1e:06:26:
2d:2e:bb:ab:e6:68:9b:54:6d:ca:c5:8f:09:67:eb:
ca:1b:1d:e2:20:43:bf:90:91:e0:f6:9e:42:35:2d:
f8:23:61:52:ae:20:fd:04:11:ab:ed:62:9f:e1:a7:
57:c3:a9:02:d1:b9:aa:9d:66:04:5c:28:c8:32:07:
4b:dd:dc:28:2c:87:40:a9:6b:1c:f4:2a:f2:b7:d5:
6b:fe:0f:56:3c:0e:76:cf:7c:65:bc:eb:33:b5:43:
7c:d5:df:eb:d6:51:a2:90:8c:31:4e:69:78:54:7d:
5a:da:b1:50:90:82:97:e3:f9:43:46:ca:a6:98:90:
0b:1e:a2:79:a2:dd:c5:84:09:35:86:94:56:4a:86:
02:c0:24:ab:1c:a9:6b:24:c3:be:2e:d8:75:7f:6a:
33:b3:27:15:06:e5:15:b8:45:9d:cf:82:9f:5b:53:
14:f7:8a:a6:a1:d7:b2:8f:82:54:1c:ec:b9:3a:59:
c7:63:d6:20:68:ad:5f:36:a8:92:cc:04:22:a5:cc:
44:aa:bf:0b:40:28:a7:81:d8:07:7d:00:11:cc:74:
6c:c4:a2:8a:e6:bc:a9:2b:f1:3f:61:a6:c8:cc:d0:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:07:A3:1C:C6:96:87:A7:BD:48:3C:DB:62:B3:B9:AE:AD:14:A7
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:9e:b3:13:03:b8:ef:2c:23:f3:dc:a0:af:73:c9:05:4e:
2d:58:f3:59:33:1b:e3:4a:f1:74:6e:90:d8:dd:fd:63:4b:65:
a7:e5:24:02:a2:b8:9d:a5:49:1b:54:85:62:42:83:ad:7d:72:
39:9a:9f:bd:41:0c:86:c5:e1:19:42:60:27:6e:a5:ec:7b:3a:
b3:f4:cd:58:8f:ae:2b:5d:09:af:7a:f2:2f:1e:7b:fe:72:c8:
fd:48:91:6c:8d:de:b2:98:83:77:04:68:e8:a9:4d:78:e5:69:
5d:1a:2b:f0:5d:cc:54:73:34:b5:fd:2a:6f:bf:d5:ac:23:81:
9d:ff:43:2a:37:3c:27:88:da:52:52:a0:2e:0a:53:3e:4b:72:
79:e2:91:db:8b:56:fa:21:b6:78:80:63:08:49:0a:f9:5b:c9:
0d:83:e1:18:48:8c:85:23:4b:4d:6f:00:82:34:a5:9e:a5:65:
bb:bf:89:ca:12:07:69:32:ad:85:2a:44:ad:d6:d1:3e:be:f8:
e7:86:ac:65:0d:a0:39:d2:e6:b6:04:03:83:9c:c6:7f:19:cc:
14:09:73:d2:1a:69:69:35:2d:c5:58:77:98:0b:7d:24:11:62:
4c:63:87:93:e1:8c:ba:62:0a:43:9e:68:3b:6e:5c:37:3d:e1:
72:bd:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:57 2026 by rpki-client