Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: GlUXZoXD0g6rOgGlKuaBn1hjLP9QnqzwYYTGjgxoY/k=
Subject key identifier: A8:CF:05:7E:8E:E8:81:E6:5A:D3:5F:CA:59:26:4C:9D:E1:54:B2:D9
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019D299746F27941DCB5C6B6B69391DC8663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1387
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: BmV8sP/jExQScFuO5fFsk21i/pdGkSi9ZW6DH5Dpwbk=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:46:f2:79:41:dc:b5:c6:b6:b6:93:91:dc:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=a8cf057e8ee881e65ad35fca59264c9de154b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:ee:ce:68:95:da:02:c1:f1:22:38:4f:86:
a2:23:10:b0:e4:c9:74:6e:e4:19:ea:63:eb:dc:fd:
ae:0f:a1:30:5a:26:11:d8:a2:7e:6c:ce:d1:1c:3a:
c8:d8:71:5b:dc:79:36:94:7c:7d:2a:1a:d8:3e:0a:
74:e4:2f:c2:dd:6e:68:82:b5:fd:17:d0:f5:96:a0:
f4:fa:11:39:40:45:41:cb:02:89:46:c0:d8:5f:62:
41:ae:64:7c:c9:b1:d0:8b:a7:40:9d:1a:46:73:a2:
e8:50:42:cb:b7:07:26:53:62:85:f6:15:ab:3b:f0:
95:34:be:0c:87:0a:bb:77:e8:b3:b3:f0:d0:0a:26:
f7:c5:af:dc:9a:d8:4d:1c:38:16:e0:25:c9:fd:af:
ae:7b:34:1c:d1:63:94:19:38:24:ff:e1:f1:61:39:
8c:6e:2d:f0:74:ec:85:2c:ce:8a:5b:36:cb:29:bf:
c1:54:60:3b:55:b6:ae:33:c5:89:2e:0a:0e:6a:af:
69:4e:41:b2:05:10:b1:ce:8b:2b:9e:0c:93:36:23:
6a:ff:e3:c3:60:17:78:21:26:31:5e:a4:0f:0d:48:
56:f8:63:fa:40:e5:49:c2:85:a6:89:83:04:75:03:
48:0b:c1:1a:eb:05:26:8c:c7:eb:06:35:bc:9c:31:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:05:7E:8E:E8:81:E6:5A:D3:5F:CA:59:26:4C:9D:E1:54:B2:D9
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:eb:89:4e:7e:72:17:fd:f3:8f:f8:c5:82:86:aa:a8:2b:94:
94:65:55:23:a4:2a:0e:f1:40:6f:96:2b:51:14:7d:e0:1c:42:
e9:6e:82:4b:92:ec:6a:d1:f4:ea:8f:29:0a:dd:8c:11:af:23:
76:8e:23:ed:16:0b:c7:a2:a3:01:65:be:9a:02:38:d1:9f:d4:
68:8e:c2:a3:e3:2c:a6:a5:f6:ef:98:df:15:01:93:39:03:e9:
44:67:b2:28:d8:c1:f2:8f:71:09:38:60:b2:9d:a1:b5:cf:aa:
df:7c:da:2c:d2:87:4d:98:00:97:2f:ce:9b:b7:eb:74:f8:ea:
84:9f:af:21:23:02:96:ba:6d:13:5f:70:43:f7:22:87:e0:76:
87:97:9d:0b:af:6b:52:a3:43:79:88:33:fb:0f:19:f9:f6:b0:
03:3d:2e:d3:6a:bc:5a:1e:fd:24:d3:58:11:91:04:ff:a3:98:
a4:d3:59:5f:be:9b:b9:8c:b4:ad:46:51:c6:d2:0c:34:51:29:
96:7f:cc:26:1f:97:95:aa:4a:9a:df:48:65:8d:d6:8c:9c:b3:
dc:d1:02:dc:39:0b:aa:9c:88:03:4c:88:82:d9:70:9a:31:cd:
86:74:eb:cd:4a:a4:f3:4e:4a:47:2a:61:72:05:ed:e9:9e:46:
cd:7a:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:39 2026 by rpki-client