Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: spDjNva7j1UY/WXtSAAHhsP/smSI+OQibmFFd0GsiV4=
Subject key identifier: 19:56:9B:B2:D1:E9:71:9B:DD:4B:52:78:23:F0:F1:89:9B:D0:17:E2
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019F91A4405CEBFB80E9DF8BFE1CEA9D40A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 14C6
Signing time: Fri 24 Jul 2026 01:01:28 +0000
Manifest this update: Fri 24 Jul 2026 01:01:28 +0000
Manifest next update: Sat 25 Jul 2026 01:01:28 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: PVP188Avrm1nkB3VARAEsxpsLoiTTFgkuWVK6iKPfHA=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:40:5c:eb:fb:80:e9:df:8b:fe:1c:ea:9d:40:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Jul 24 01:01:28 2026 GMT
Not After : Jul 25 01:01:28 2026 GMT
Subject: CN=19569bb2d1e9719bdd4b527823f0f1899bd017e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:41:f2:50:9b:d0:29:ac:23:06:c1:ea:e8:
f9:6a:85:7b:a4:9c:8c:02:0d:6d:bf:7b:cf:73:4c:
85:ad:99:3e:ef:46:70:c7:c7:28:3c:68:6f:5c:9b:
88:16:8d:db:f7:ff:6c:b9:6b:8e:12:8d:92:67:4c:
a4:de:18:39:30:69:19:d1:c3:a0:d4:f9:e3:28:4a:
0c:58:a9:99:b9:53:e6:94:9f:4a:f7:04:8f:f2:d8:
83:04:a7:eb:eb:1e:ac:43:ed:86:fa:95:a7:39:67:
0c:fb:c1:39:ce:e4:95:47:8f:f0:01:f5:34:de:fc:
5e:38:60:e1:15:a9:00:17:22:0f:3b:b7:59:a0:ad:
9d:c1:13:39:12:40:9a:d1:87:84:b2:76:37:6b:4b:
85:e7:a4:f9:64:ce:2a:1d:f7:7c:51:65:08:1d:d9:
58:d9:91:b2:5e:a8:d4:8d:fd:c5:c8:41:af:9a:36:
ed:f9:f6:1f:5d:3b:93:b9:4e:1e:73:85:ab:2c:ca:
3f:a1:fd:f0:f4:c2:b0:a5:e2:2c:5f:02:54:d1:a9:
9c:e0:3d:f0:ec:8d:60:ec:43:22:6c:fa:fa:63:f9:
a1:18:04:1d:d6:e9:d2:7a:24:d7:35:ce:2f:bd:08:
d4:c1:96:4d:90:82:df:b5:73:cd:bf:d3:51:b3:2b:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:9B:B2:D1:E9:71:9B:DD:4B:52:78:23:F0:F1:89:9B:D0:17:E2
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:9c:38:43:87:61:75:67:c7:e1:ad:4e:ec:57:fa:11:40:
ba:93:a3:6d:17:cf:9b:1c:e2:e4:0a:d9:b9:a3:65:88:df:84:
d5:bc:d1:9f:a9:70:71:94:da:1e:f1:f4:fe:a2:ed:b1:6b:ff:
b6:51:1c:4f:7e:8e:fb:d3:65:29:b8:d9:d7:96:72:a6:69:0e:
6a:99:b3:17:45:09:5a:35:cb:c6:a8:39:a5:f5:93:41:c6:7a:
1d:2b:bb:11:4e:b4:23:90:bf:ae:41:cb:d8:52:1e:5b:bf:42:
74:67:84:87:99:48:8b:d6:95:ca:b9:62:95:96:e0:4a:7c:4c:
e1:54:6d:80:5f:62:8a:cb:72:da:8d:95:cc:9b:a6:b4:69:c4:
31:b9:22:37:bd:5d:16:4f:d0:70:2c:0d:a1:8d:d7:e4:b6:06:
bd:c5:e4:0a:2a:41:e4:02:56:06:63:27:c3:94:b0:29:69:4e:
90:20:f4:60:ec:9f:e5:3b:1f:95:5a:67:12:34:dd:95:df:6f:
a4:f1:6d:96:38:30:87:f6:f9:44:d1:67:22:0f:d4:a7:37:c4:
c6:b1:d7:29:1e:5c:8c:1a:20:f2:bb:95:bd:13:a2:09:f3:50:
ae:c5:0b:18:f4:ab:d6:43:08:f9:79:bc:98:91:88:0c:69:88:
93:01:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:27 2026 by rpki-client