Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: P7jGqS1m6c/VA7IR4R+Y7loJ4Uh1rr0ZzRMvI6uNpMg=
Subject key identifier: A1:FF:93:9B:0C:67:CF:F4:81:BB:B3:0A:D2:04:6E:43:22:F3:89:D3
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019E28EFCFE5E108CD708D812CFD774D272B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1910
Signing time: Fri 15 May 2026 00:01:05 +0000
Manifest this update: Fri 15 May 2026 00:01:05 +0000
Manifest next update: Sat 16 May 2026 00:01:05 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: 8J8ARuHBqMPzTkgVgDH2gHerI7hZtsAIk3GZQ4Mcpeo=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:cf:e5:e1:08:cd:70:8d:81:2c:fd:77:4d:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: May 15 00:01:05 2026 GMT
Not After : May 16 00:01:05 2026 GMT
Subject: CN=a1ff939b0c67cff481bbb30ad2046e4322f389d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:94:8c:9c:3e:49:8b:ab:41:fc:59:20:00:
a9:ee:01:1a:94:8c:60:52:02:ae:22:4d:8a:fd:9e:
f2:12:30:e2:d9:6c:48:bf:c4:fe:96:3e:d2:3a:89:
a7:32:a7:32:46:21:b0:b8:cc:53:70:39:f2:23:07:
af:01:ba:a6:b9:d8:ec:7f:b8:7c:3c:cf:3c:7a:25:
f9:9a:2a:9f:46:6f:e6:9a:fb:1b:fe:09:4e:b7:a5:
22:d6:25:49:51:bb:87:5b:db:5b:00:e0:1b:cd:05:
45:b8:0b:a8:a9:17:65:ab:de:4f:f8:3f:6d:88:28:
09:1b:a1:b2:4a:3f:a1:43:c5:e3:1b:18:3e:b8:ad:
bb:0b:18:70:44:54:d3:b6:30:91:f4:db:82:ff:73:
61:43:8d:bc:59:b6:0d:53:b4:39:05:f5:46:7c:24:
2e:f3:53:98:a8:80:e9:d4:bb:9a:b0:28:0f:67:6a:
f0:a7:51:a5:f3:db:1a:4f:dd:42:1f:0f:79:aa:dc:
7e:de:dc:09:9c:e0:e7:a1:a3:54:56:25:cc:3c:52:
4c:4c:ea:3d:9f:71:8d:d6:e8:8f:a6:f9:9c:2f:63:
23:5d:12:96:c6:ea:14:7b:c7:c2:ef:8b:55:8e:b6:
78:69:72:ef:8b:31:32:21:d4:f6:0b:99:28:e0:e2:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FF:93:9B:0C:67:CF:F4:81:BB:B3:0A:D2:04:6E:43:22:F3:89:D3
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:98:0c:71:40:2d:2a:5d:cb:61:26:02:67:a0:c0:bc:ea:
d4:b3:62:24:c4:3a:10:cb:cd:96:de:8f:ae:01:64:3d:1e:15:
62:2a:bb:b3:ad:f6:5a:f1:b3:0c:c0:9e:a1:1b:5c:c6:1c:8d:
be:7a:ed:1a:55:4b:a1:37:e6:af:8d:f9:99:b9:8d:90:7a:ab:
f1:66:e0:95:05:e9:cd:a0:88:ec:70:dc:31:82:6d:b4:92:22:
36:32:75:9a:35:68:8d:ef:8b:c4:cd:85:06:02:c8:b7:38:8e:
32:e9:11:d6:2c:fe:e3:11:bc:7a:4d:70:89:d2:a7:ef:b7:29:
2e:cf:cd:38:15:40:57:a8:63:6e:62:a8:5b:90:08:c8:92:f2:
56:64:63:a1:57:97:8e:91:03:78:49:a2:11:4a:ea:75:18:77:
90:21:b1:f3:d6:cf:05:39:af:a3:de:ef:91:ea:86:19:2d:55:
4c:5d:48:48:05:62:38:dd:4b:1b:5d:fe:e9:7c:f3:79:bd:ed:
36:c5:83:70:8b:e3:80:71:c0:69:53:7b:65:ba:fd:2b:42:15:
6f:75:ad:f1:27:e1:5e:b3:ef:95:49:63:60:dc:98:b4:79:2b:
c8:3c:bb:0c:ef:6a:82:b9:0e:33:6e:12:e6:46:2f:4b:91:de:
9f:d6:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:11 2026 by rpki-client