Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: Yhfv3k1IxH6c+lDIygWEmxAu8Zpj8o3DLrCxR5kjKX8=
Subject key identifier: D6:05:75:4A:8A:68:3D:F8:06:0F:16:EA:D0:F9:2C:14:17:A2:E7:AD
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01A0D49465C8C561ADD30046A9A3ACC3C839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 18:01:30 +0000
Manifest this update: Thu 24 Sep 2026 18:01:30 +0000
Manifest next update: Fri 25 Sep 2026 18:01:30 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: DEIwlqpemL8hxB7oPA4sO6igg5YkQ+wUJfqR9QSl3DQ=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:65:c8:c5:61:ad:d3:00:46:a9:a3:ac:c3:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Sep 24 18:01:30 2026 GMT
Not After : Sep 25 18:01:30 2026 GMT
Subject: CN=d605754a8a683df8060f16ead0f92c1417a2e7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:13:8a:83:30:e4:63:78:41:b2:2a:92:8c:
3b:4e:f5:b5:7b:b7:04:ca:20:3b:c4:16:e6:6f:2f:
93:a4:6c:9c:25:7a:3d:a7:6a:af:46:6d:60:a0:8f:
28:50:cd:e7:28:87:34:2c:77:0e:f4:84:90:45:93:
4a:31:ba:66:f1:a6:1f:a1:61:93:fc:f9:70:2e:0b:
80:84:c8:04:59:79:a6:82:57:b1:77:0a:48:6e:2e:
f6:fa:20:3c:e4:96:67:7b:88:c9:12:b2:20:40:ee:
4d:ff:4b:cb:25:c6:b0:f9:ea:cb:29:17:c0:36:df:
2b:85:13:3a:e5:38:f6:85:fa:92:36:dd:ed:32:0a:
ed:92:79:8e:ce:aa:87:7e:78:80:21:81:61:c2:a8:
85:d3:d7:37:59:57:af:33:12:c5:a4:63:92:ea:37:
db:34:4a:c5:a3:dc:44:f8:50:7a:0e:72:a2:c6:0c:
c9:6c:4c:10:61:3c:b5:90:ec:ae:8b:c5:a9:ff:f8:
a0:47:3f:60:ab:39:c8:3c:71:0b:50:90:e8:49:d0:
20:0b:95:0d:6e:37:c2:d6:82:bf:35:54:d9:ae:a1:
aa:1d:36:f3:bf:d2:07:82:c2:a4:44:5e:9a:82:e8:
e7:b0:3c:b7:41:93:31:d7:30:b5:f9:2a:44:73:8a:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:75:4A:8A:68:3D:F8:06:0F:16:EA:D0:F9:2C:14:17:A2:E7:AD
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:90:a9:f9:0e:64:c6:89:e8:17:b6:3a:b3:2e:35:30:16:
6a:01:89:eb:3e:82:7e:b5:45:d8:d9:46:4d:e6:38:71:ef:9c:
87:4b:5b:af:c8:a7:0e:0b:f9:b8:09:76:4f:70:ad:7e:3c:58:
91:87:4b:9a:1a:c9:a7:ec:00:b1:bf:f4:45:6b:55:4c:b4:54:
ec:c9:02:f2:ff:a1:1f:ea:3a:01:2b:a1:8d:85:70:9a:76:2b:
b7:89:8c:a3:5d:16:a8:c2:e2:c7:e3:b6:77:44:8a:a9:fa:17:
fc:a0:18:aa:ba:58:0f:4c:ed:d1:75:5a:e5:34:32:0d:db:3f:
07:9c:c5:8c:b5:41:96:3b:a5:96:68:d3:d2:f5:1f:96:24:f1:
4d:c5:a1:01:98:6d:10:38:a1:5b:82:f2:bc:1b:c6:af:c6:70:
ba:a9:0b:75:be:f2:11:57:92:bf:80:c4:02:54:20:8a:25:14:
3b:03:32:e2:ee:7a:4b:25:8b:e9:26:68:fd:74:b4:15:3d:7b:
f1:9d:5d:70:0d:80:60:c4:91:e9:bb:df:6d:d1:8e:0c:74:ab:
15:5d:3d:3f:f0:8b:cf:20:48:db:89:c5:91:6a:ca:06:7a:00:
4c:30:37:c9:ac:09:8e:6e:ef:15:44:3f:e2:c9:9e:54:a9:a7:
db:7d:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:11 2026 by rpki-client