Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: DblBDz+WbGn6ZeOhAlzw3HPpa0xHbGjvShJhk2S1hBs=
Subject key identifier: 28:D0:7C:55:6A:7A:C4:95:DD:5F:CD:18:FD:09:EE:1C:25:60:43:3F
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019F129C981B1481D2313FF73AE9805C73A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 09:01:20 +0000
Manifest this update: Mon 29 Jun 2026 09:01:20 +0000
Manifest next update: Tue 30 Jun 2026 09:01:20 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: uSCK/XGcu5mk6Q/XE8vqZsT4k6+SN75ylI57ibHcdAk=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:98:1b:14:81:d2:31:3f:f7:3a:e9:80:5c:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jun 29 09:01:20 2026 GMT
Not After : Jun 30 09:01:20 2026 GMT
Subject: CN=28d07c556a7ac495dd5fcd18fd09ee1c2560433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:ad:97:1e:2d:02:fa:2c:d1:21:3b:fe:1c:
e1:08:e4:ee:f4:b9:fc:67:b0:12:fc:27:50:2e:a6:
38:7d:14:2e:c5:37:96:c6:fc:65:5e:a4:49:93:87:
74:61:bb:59:6e:20:48:8b:f4:79:7a:a0:e3:00:e4:
29:ab:52:78:29:ed:83:66:cb:97:a8:fc:39:a5:86:
4a:8c:21:6f:ac:da:2c:62:07:70:92:ac:f5:d9:36:
0f:32:da:46:e4:cd:8a:11:12:8c:6d:4d:f6:d2:16:
53:29:70:ae:c6:0e:65:8e:e6:be:b8:77:c8:d4:af:
fe:67:07:25:eb:b7:72:ef:f2:28:6c:58:c4:69:78:
0c:b2:84:f4:7d:c9:6a:a0:2c:47:f7:90:d1:ac:c7:
e9:35:a0:bb:14:34:04:2f:d1:c3:0e:73:ce:82:96:
ef:03:a2:d5:5b:c1:8b:b9:a3:96:dc:e7:6b:0e:7a:
a7:34:24:1a:6e:cd:bd:29:2b:67:93:e5:74:3e:76:
72:84:e0:69:26:8d:0c:0f:d1:bd:0c:56:0e:ec:bb:
1a:55:d6:8e:45:86:85:8d:6c:d9:36:65:40:cf:bc:
57:91:fe:91:ae:44:ee:f9:32:6d:42:05:b7:fc:fd:
e3:fd:95:3f:ee:72:8d:a8:15:c6:6f:d0:a1:d7:17:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:7C:55:6A:7A:C4:95:DD:5F:CD:18:FD:09:EE:1C:25:60:43:3F
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:b3:48:ee:11:83:1a:58:63:6a:68:fc:33:d7:72:35:40:
4c:1e:26:b5:68:61:0a:f3:4e:11:9d:41:e3:79:7c:47:92:d1:
95:51:d7:0d:2c:91:2b:d2:c3:5d:7f:21:6b:e6:c5:1f:6b:6d:
d2:db:da:a9:b3:f3:d3:3d:60:9b:46:48:3a:0d:bc:f6:89:81:
a2:41:64:e2:70:83:08:9e:6d:b2:13:c4:f9:e3:98:68:99:df:
81:a1:40:ce:eb:e4:3b:4e:50:6c:00:4d:1a:2a:fb:f6:6b:4a:
ae:7b:59:7c:72:7e:f2:da:82:48:2d:57:9f:c5:62:cb:d7:33:
0a:a1:06:cd:d0:42:82:3d:40:93:33:cb:ea:3d:33:a3:c6:6c:
84:c5:4b:70:75:ea:24:66:62:aa:94:c6:d6:50:b2:28:f4:8e:
2a:ac:14:e5:91:8c:cc:31:5d:85:b7:91:06:3b:e8:c1:6a:40:
40:0e:93:5d:92:ec:68:70:fe:91:0a:dd:f4:85:f9:61:48:2d:
09:18:82:67:f5:8c:6e:f3:bd:39:db:25:ac:2a:01:b4:1d:87:
93:e8:c1:a3:26:be:ed:51:ac:f0:33:56:a3:03:f6:dc:c3:29:
b9:a0:db:c4:9d:49:b4:b0:13:84:21:e6:dc:3b:cd:6d:80:a5:
13:7c:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:33 2026 by rpki-client