Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: j8Y2i5t29YLOy3qL0BPPs0XgBem/Kvs8TvIKQkeVCgc=
Subject key identifier: E6:AA:1A:3D:F7:CC:51:2E:25:26:55:03:05:B8:C1:6B:C4:BB:3E:01
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019D28BB80B0E56819CC48D685A7DF67680B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 173D
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: vucHsGQwQSpxq+kl5xku6SfJ6gMoMkFRGSNN2kfnmFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:80:b0:e5:68:19:cc:48:d6:85:a7:df:67:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=e6aa1a3df7cc512e2526550305b8c16bc4bb3e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:23:00:97:44:a9:46:8d:91:69:06:3f:09:c3:
87:6e:b5:5e:c7:e3:eb:a1:86:42:72:83:83:96:f3:
44:c0:4f:bc:fe:ee:93:9d:1d:30:68:40:51:6c:07:
04:66:59:75:20:9e:6a:ce:81:69:b0:d7:da:f1:ef:
29:0f:9e:58:50:15:a6:f4:10:72:8f:3f:5d:67:05:
18:f2:42:bc:81:75:e0:72:05:a2:7f:a3:1d:4c:61:
53:a8:18:52:fc:54:61:5b:49:47:c8:2d:95:4e:3c:
23:a4:78:b0:4d:22:5c:5d:2d:81:bb:c8:78:a2:2c:
c8:fe:16:a0:25:ab:9a:7d:f5:d1:68:bd:1f:a4:14:
e1:c0:32:6d:15:db:7e:d0:2f:94:ef:b5:26:60:86:
07:4d:88:f2:17:b2:a8:02:17:21:e3:45:40:43:c8:
a5:87:44:aa:7c:3f:7a:dc:53:97:ed:e6:d0:a1:94:
7b:ee:4f:bd:cb:fd:09:9a:56:1d:6b:19:70:34:11:
a1:76:af:e9:e2:bd:33:bd:49:10:d2:a7:d4:43:f5:
1b:8a:9d:73:a8:95:24:72:75:06:f3:31:b6:81:bf:
fc:f0:d7:96:aa:a8:8b:a5:28:d4:17:7b:b8:86:41:
3e:bf:9a:72:92:14:32:c9:8a:2b:00:4c:ff:e5:34:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:1A:3D:F7:CC:51:2E:25:26:55:03:05:B8:C1:6B:C4:BB:3E:01
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c7:8a:8c:9e:4d:f8:c4:85:27:c9:1a:ac:aa:9b:15:5d:bc:
c1:0b:e9:15:1a:61:5d:62:5c:41:d7:58:bc:ce:c4:c6:97:05:
c6:99:94:1e:09:cf:3a:13:06:65:80:a9:6f:bf:3d:5b:c1:4b:
62:ed:be:c2:c4:8a:93:70:43:4f:01:c6:ec:61:b4:8b:51:bb:
3f:25:28:13:84:5f:de:ce:86:e1:22:62:44:f0:56:18:81:df:
3a:8e:15:b6:b5:b0:bd:17:51:ba:d8:34:07:ee:07:4a:32:96:
e2:77:c6:23:e0:65:44:9b:c6:85:7a:b3:5d:53:60:67:f2:f9:
33:dd:e7:15:59:05:29:cc:3b:81:90:f9:a7:be:d4:40:7d:70:
53:09:3d:a0:f5:9a:b0:26:59:d3:aa:37:e4:ed:36:de:78:de:
37:a2:6c:02:3e:ed:91:e3:bb:15:e3:e2:6e:18:80:76:b2:aa:
b2:6c:fa:d1:1e:98:54:46:1a:51:6c:74:56:88:39:de:5a:b4:
af:54:99:e9:b9:80:17:b1:3a:d6:e0:4a:c8:9c:cc:1a:4d:7d:
59:5d:93:f5:97:06:e9:ea:00:57:fd:d9:e9:50:9d:a9:55:c7:
79:ee:50:a8:2d:0c:d4:a9:03:9c:6c:6b:df:57:67:61:7e:e2:
eb:bd:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:42 2026 by rpki-client