Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: 1MX5W5MQUGZwKPwdBEOqdtWoRAi4VsBzmHKUUS1Pl4U=
Subject key identifier: C4:8F:37:DF:48:BB:4E:E6:54:DA:4A:8D:9E:FA:E5:EB:53:6D:42:A5
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 01A0DBE04453B458A215F93D787FCB6DD759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1571
Signing time: Sat 26 Sep 2026 04:01:42 +0000
Manifest this update: Sat 26 Sep 2026 04:01:42 +0000
Manifest next update: Sun 27 Sep 2026 04:01:42 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: W6m8qOebVwtrH0u8l/nocGpj0mn+zJe/OeiRgOKUfWo=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:44:53:b4:58:a2:15:f9:3d:78:7f:cb:6d:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Sep 26 04:01:42 2026 GMT
Not After : Sep 27 04:01:42 2026 GMT
Subject: CN=c48f37df48bb4ee654da4a8d9efae5eb536d42a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:45:cc:97:59:9d:00:a1:c1:ce:ba:fc:9d:
8d:da:81:6d:c5:b8:e5:35:74:b1:59:af:58:6b:71:
e2:d8:51:1d:dc:96:80:0e:61:c3:cd:bc:a0:e7:c6:
2e:d0:40:3a:d9:e0:03:0f:0e:ff:f6:c9:0d:69:8c:
02:e8:66:2c:7c:2a:44:fc:6b:57:15:db:b3:b4:95:
31:66:52:1f:f6:90:84:a1:d9:14:39:05:ba:7d:78:
0c:3f:4e:80:53:7e:ea:c4:bb:04:1b:76:e2:5d:17:
0a:1d:c8:ed:23:69:5d:77:2f:26:ad:88:2e:0f:a5:
2f:28:b1:55:04:2a:f9:a7:9b:21:e7:3b:43:a9:18:
5c:4e:a7:14:a6:09:46:08:1a:46:e2:ef:35:ac:9e:
22:31:ec:22:73:60:23:2c:32:bf:b5:62:e9:e7:43:
f8:2d:a9:80:39:65:d4:47:b0:0e:a3:c0:58:7c:77:
3f:51:bb:64:cc:6c:ed:97:56:06:e6:9c:36:db:78:
6a:2c:a4:a8:e9:6c:bc:7e:2c:6c:fd:e7:13:ad:3a:
e5:8c:1a:53:4c:b6:be:d7:25:d7:dd:40:ea:5b:e0:
82:5d:c0:ec:4f:82:d8:3c:b5:45:ae:ff:f1:86:07:
e0:a1:21:5a:3d:30:5f:a1:99:ac:ad:f1:d2:ef:a6:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:37:DF:48:BB:4E:E6:54:DA:4A:8D:9E:FA:E5:EB:53:6D:42:A5
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:a8:a4:d0:8b:0b:bd:9c:55:2d:bd:11:90:26:e4:12:df:
17:64:5d:b7:ab:88:03:c9:94:73:e4:ff:4c:95:3d:65:05:6d:
6b:27:7b:1f:b9:b0:2e:56:64:dc:86:f4:4e:87:b7:a1:dc:60:
69:1e:19:d2:39:fd:60:22:16:2a:9f:81:c5:b2:a1:6b:3f:4a:
e8:15:82:ff:22:f4:27:c6:56:bc:0b:21:5c:7e:bb:73:75:c8:
04:07:27:81:a4:49:30:67:ad:38:15:cf:0b:c2:6c:19:9f:de:
d1:db:0b:92:41:e8:ef:cd:6a:b2:29:30:c3:cb:27:12:60:65:
42:d1:de:fa:c7:e3:7a:57:e3:0a:e8:ac:00:20:b5:55:dd:f8:
03:d8:c7:2f:6a:e5:e8:8b:de:b3:92:51:48:29:e3:a5:e8:1a:
93:d5:6e:c6:26:0d:b8:a4:28:bd:37:21:88:79:d3:99:23:b2:
ab:0d:98:d9:f9:f6:98:b5:ee:a9:c0:d9:2a:7d:33:2a:53:66:
a2:55:72:87:1d:51:3d:d2:ec:82:c6:14:3f:12:4f:36:a8:ca:
1d:a6:8b:fa:69:ed:d9:46:f3:c8:5e:2b:05:6e:05:ba:c8:a4:
5b:71:60:38:ce:1c:ce:c9:35:9c:eb:7e:cf:a5:df:71:7c:11:
11:81:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:04 2026 by rpki-client