Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: FcZz3jeCc6EMAOFIzfEhUOFh9pU0SdP/nky7RktU6RQ=
Subject key identifier: BF:7E:51:AC:43:9C:3F:20:9B:BC:0A:6D:2B:8C:87:D8:F3:30:B5:7C
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019E1FEC7250DCAB756FD93651CE4D1D9DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 17BD
Signing time: Wed 13 May 2026 06:00:49 +0000
Manifest this update: Wed 13 May 2026 06:00:49 +0000
Manifest next update: Thu 14 May 2026 06:00:49 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: vB+OzkmdnpShM1NUc4vT45FCBSjM19ZVnguPCXYLqco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:72:50:dc:ab:75:6f:d9:36:51:ce:4d:1d:9d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: May 13 06:00:49 2026 GMT
Not After : May 14 06:00:49 2026 GMT
Subject: CN=bf7e51ac439c3f209bbc0a6d2b8c87d8f330b57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:72:9a:0d:32:c0:4a:8d:4f:92:72:69:4f:
f3:fd:e3:2e:f8:a3:6f:ac:eb:bc:14:f5:e6:55:75:
b4:78:ad:8a:24:7f:bf:c4:92:e0:39:2f:68:7e:17:
32:be:fa:da:2c:3e:6c:fb:2e:d2:6f:45:f7:e7:fe:
77:a6:b5:5f:9e:93:be:dc:97:ec:e2:9e:96:60:f5:
fd:81:77:72:09:43:3b:6e:99:31:00:c5:20:8e:34:
a0:08:c1:ce:a3:f1:60:e9:95:b7:a6:eb:69:86:0e:
1b:5e:da:ae:af:7f:bd:09:f7:44:a4:db:6e:7e:0a:
c0:7c:ee:01:9d:7e:04:69:d9:59:f3:15:78:65:0b:
b3:26:d0:46:96:94:06:a9:7b:cf:66:7e:9b:ce:d8:
63:32:f8:e8:01:66:8f:85:27:8d:16:da:de:13:65:
9b:7c:a7:23:45:ee:8b:77:68:fe:5e:fb:b5:11:29:
28:1b:0c:9c:00:a0:60:c5:4d:15:2b:58:ce:4a:03:
46:32:d3:3c:fd:6d:d4:d0:e1:d1:70:c2:90:6b:8d:
ff:81:a2:3e:ae:86:6e:46:43:15:11:bc:66:a7:96:
3e:67:f7:ef:75:f7:55:88:8c:e9:9e:8f:2f:f0:94:
93:0f:58:fc:ec:d2:9d:86:eb:ee:95:96:ff:de:fc:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:51:AC:43:9C:3F:20:9B:BC:0A:6D:2B:8C:87:D8:F3:30:B5:7C
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:a0:61:a8:ac:e6:e5:4d:1f:b3:ca:71:52:ba:ca:2c:8e:
c8:6e:05:2c:1e:cf:55:0f:7d:54:2e:58:79:89:d5:37:96:e7:
ba:bc:ba:31:b1:cf:9a:b5:80:b1:3b:09:2f:21:ce:b1:e5:cd:
1c:4c:f7:96:c5:99:80:bd:a7:7e:31:43:fa:77:70:bd:13:e6:
f2:8d:15:13:35:7c:ac:05:33:b5:4a:2e:6e:41:47:c1:59:0a:
4c:f9:e3:ed:5f:f0:e8:76:e0:0f:90:aa:bf:ef:b8:53:d5:84:
84:da:dc:f0:b9:cc:ae:e5:a8:e5:f9:5a:d9:4d:68:c0:56:f3:
47:52:19:b8:f4:f0:72:22:2d:aa:bf:c3:e8:a2:41:ad:37:7f:
be:f2:6c:bf:09:c5:cf:49:5b:24:a4:0b:5b:28:fe:0c:67:23:
c4:3b:1a:44:2f:9e:1b:34:8f:14:37:c4:fc:f4:ba:4f:6e:c3:
53:74:8b:65:c5:ca:26:7f:ab:14:d7:b6:ef:27:54:23:8e:f2:
e6:32:41:66:de:f8:4b:16:ef:47:54:2a:d5:3f:e4:bb:c5:50:
ee:8a:5d:f2:46:d0:8c:f1:13:f7:fb:e7:3a:a5:a2:44:20:01:
31:48:5a:20:95:b6:49:28:d4:84:37:1f:e5:b9:36:b4:65:7c:
4c:d1:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:37 2026 by rpki-client