Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: L40ZLwE36/pyovgFLqZMg0+zXyeejv4tcIw7jXkInfA=
Subject key identifier: 7E:B7:93:80:4D:8E:D4:B4:4D:2A:CC:F8:38:E2:0C:EF:56:E0:A0:83
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019E1D59439F065F7A49A279816F409CEE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: XuMCVJjQWkx65nHAbLFbT/P6aWbCgq+SClpYfilOGZA=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:43:9f:06:5f:7a:49:a2:79:81:6f:40:9c:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=7eb793804d8ed4b44d2accf838e20cef56e0a083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:aa:7d:67:0c:f6:76:ff:87:05:a6:91:a9:
65:db:4f:2f:f3:bc:de:7d:2e:9d:8b:56:ff:28:ab:
30:f3:ef:c4:7d:9d:f9:50:5f:57:36:58:65:8e:40:
8a:64:2a:43:57:7d:2c:fb:ac:e1:8d:26:15:cf:ef:
b2:bf:0c:87:c3:e9:92:f8:ed:ec:b0:2e:4c:10:ed:
73:4e:c6:7b:14:58:d3:65:f3:c1:f1:06:a9:37:4b:
c0:44:6b:90:b5:9c:2e:86:d3:95:13:0d:f3:6d:50:
21:09:49:90:52:50:44:07:8c:69:e3:ea:55:77:1c:
d1:56:25:e9:a2:60:01:08:44:a3:5a:2c:f8:96:eb:
c6:f0:63:67:5b:0a:cc:26:76:53:96:3a:be:02:52:
9a:d2:92:f0:75:01:07:db:f5:ec:e9:78:4e:5b:d7:
6a:25:f6:1f:83:7d:8e:49:2a:e1:f2:14:0e:d7:49:
84:4b:63:e4:4a:e2:99:d6:8c:2d:f0:01:98:46:82:
78:14:2d:cc:83:28:98:ad:50:c4:2c:ff:dc:ca:38:
12:17:5d:8f:2d:5c:ef:60:d4:96:66:e2:27:9d:5e:
47:17:26:1c:e7:66:68:ac:4a:70:9d:7b:45:4c:75:
52:ba:09:8f:e2:dc:27:43:99:0d:44:a0:af:8d:1b:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:93:80:4D:8E:D4:B4:4D:2A:CC:F8:38:E2:0C:EF:56:E0:A0:83
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:77:ba:b2:58:ab:bb:82:6d:d8:80:08:13:60:34:25:ef:
a9:dd:6a:5f:31:24:ea:bf:90:51:1b:8c:af:70:38:3d:df:ad:
5e:42:27:15:1f:2c:b1:0a:8c:2d:53:d4:b6:aa:62:ea:8c:fb:
52:fd:ac:00:df:c1:77:29:f2:43:00:31:26:93:6c:06:9d:86:
bc:8d:22:9e:d1:14:fa:cf:a0:b2:00:03:9c:e9:8c:c1:10:52:
87:74:21:2e:83:ac:2c:61:a9:3e:53:73:eb:bb:8b:1d:c0:8b:
7b:b5:40:42:01:4f:c5:40:bb:99:f1:3a:e2:1a:3d:c5:dc:f6:
d1:90:6c:41:a5:97:a3:89:8d:fe:ae:f9:fe:03:11:03:d7:dc:
42:8f:6e:2e:1a:4e:97:fd:2f:cb:6e:49:f4:5b:d5:8a:1c:73:
86:31:db:a3:0e:f5:a5:4b:64:1b:c5:55:0f:ad:02:92:3e:62:
46:dd:c7:8c:5f:f7:8f:b8:38:41:d9:c4:bc:3b:03:f7:26:6b:
a7:f8:38:e6:9a:c9:76:f2:71:c4:ab:ee:e6:fd:c5:a8:b3:e1:
07:74:61:bf:19:10:8d:34:00:75:9c:d7:48:a3:b3:99:30:e3:
b6:70:bf:60:7b:44:2e:18:77:ea:3c:70:17:16:32:67:06:2c:
5c:65:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:56 2026 by rpki-client