
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: ZFFmEqd7/J75JpyfeB1VDIDcXbiTJmVWDPiOWKn4ABQ=
Subject key identifier: 07:83:E5:16:84:9E:44:22:25:AD:8E:86:94:20:55:E1:59:5D:37:A5
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01A004025A44E998A2816096CC39A274C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1A06
Signing time: Sat 15 Aug 2026 06:00:58 +0000
Manifest this update: Sat 15 Aug 2026 06:00:58 +0000
Manifest next update: Sun 16 Aug 2026 06:00:58 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: Yct9fRmrDoqfgoCNqjKg+jV+Bve/BSMCDfHUGt63DAo=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:5a:44:e9:98:a2:81:60:96:cc:39:a2:74:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Aug 15 06:00:58 2026 GMT
Not After : Aug 16 06:00:58 2026 GMT
Subject: CN=0783e516849e442225ad8e86942055e1595d37a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:8f:68:fa:59:a1:29:25:a7:ff:d0:5e:d2:
d4:a4:0e:f9:c7:3d:94:78:6b:b2:34:9c:51:b8:b0:
a9:91:9a:18:aa:7f:8a:f5:d2:94:c8:f7:dc:c4:0d:
df:31:a6:6e:8a:eb:ae:04:72:67:9c:c8:ef:62:ca:
06:9e:99:59:6e:18:9f:a9:12:ca:bb:9e:ac:9c:42:
b4:ef:62:0d:cb:47:8f:60:47:7a:48:d7:64:6d:0f:
f4:aa:c5:fe:18:c8:bc:f7:3d:ef:4b:28:a2:de:f9:
7c:e1:ed:41:5f:a1:2a:b3:e0:50:81:89:06:9e:3f:
9c:f1:97:a7:f9:70:30:4a:8c:3b:5f:68:ea:53:bd:
42:84:15:06:78:07:57:f7:59:17:37:28:1d:00:d3:
e1:47:6d:3c:14:b2:c6:1e:78:44:79:bf:e1:9b:91:
c2:15:9f:90:8d:ac:26:3b:d9:81:16:a6:b7:37:f6:
c8:d1:c0:07:48:bb:66:1a:dc:8c:c8:3a:d0:d2:40:
f2:5f:97:ed:95:ed:b1:18:7f:6a:c5:6f:3e:27:70:
eb:3b:d5:1b:61:66:f6:49:b3:9d:9b:89:87:d6:64:
f4:ae:70:01:d2:01:24:75:46:44:f5:e9:03:27:b6:
8c:9f:23:27:c2:03:98:9a:3e:77:32:f0:f6:c6:8a:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:E5:16:84:9E:44:22:25:AD:8E:86:94:20:55:E1:59:5D:37:A5
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f5:e1:63:d4:a5:c9:1f:33:f1:69:fe:9e:fc:fd:44:19:0c:
ec:b5:50:b9:61:5f:ec:ac:bf:12:0c:91:b9:78:12:53:95:57:
d5:ef:7f:45:e9:eb:ac:5a:83:a0:b1:8b:b6:7b:69:7f:9b:7b:
b5:05:4e:2b:64:df:fc:a5:22:44:14:c6:62:ae:6c:e8:e2:f5:
68:11:00:58:41:4e:05:12:13:23:69:a3:13:d4:d9:e0:05:57:
3b:04:3d:1d:37:15:23:3f:72:56:0a:57:5c:91:dd:ef:fa:4d:
24:ef:51:5a:53:41:ac:d0:ed:f8:66:a5:f7:84:ba:66:3a:51:
f8:47:48:a4:e9:51:d6:3d:a6:42:27:58:3e:41:05:7b:91:8e:
25:0f:bd:5e:38:21:06:ff:ad:30:a4:4b:a1:d3:03:c9:1c:78:
e0:13:e4:31:cf:53:14:b8:5a:30:fc:ad:6d:4e:57:5a:35:2f:
84:5c:f9:6c:fd:74:c0:8d:0c:38:9d:bc:88:d0:41:24:ec:67:
a1:6c:0b:f5:fb:94:5e:fe:83:b0:67:36:d5:82:81:dd:44:31:
c1:5c:bb:db:75:31:c9:d9:20:0e:6b:28:b0:bc:d0:29:06:32:
b6:c9:bc:06:98:0c:c3:e4:76:95:48:c3:4f:58:70:9e:d1:8b:
73:08:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:41 2026 by rpki-client