Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: HUyBWZmpj+HSZipPy+3ntHd6yuVAA1FLnNVQlqnI6Qw=
Subject key identifier: C6:D7:69:25:8B:9D:67:F6:E6:26:B7:19:16:AA:70:00:C2:C8:5F:E5
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019D359B227F36BE8962418123332C7EDB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1892
Signing time: Sat 28 Mar 2026 18:00:52 +0000
Manifest this update: Sat 28 Mar 2026 18:00:52 +0000
Manifest next update: Sun 29 Mar 2026 18:00:52 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: Sld2iVBxLAVsmFD2LZtcpLSIB2YaxyDAT0dG+xy33mE=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9b:22:7f:36:be:89:62:41:81:23:33:2c:7e:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Mar 28 18:00:52 2026 GMT
Not After : Mar 29 18:00:52 2026 GMT
Subject: CN=c6d769258b9d67f6e626b71916aa7000c2c85fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:d0:9b:a1:bf:d8:2e:09:07:80:7e:36:d1:
12:99:60:55:bc:3d:59:d0:ef:ca:10:66:19:dd:f9:
12:e3:d6:5a:14:7e:5e:78:ef:ee:9c:a9:21:6c:b4:
62:74:93:71:33:24:5f:de:82:19:34:7c:a5:ab:c2:
40:70:ce:f6:af:a7:dc:5d:14:a1:48:47:65:c2:4a:
76:06:25:9a:48:18:84:b8:bb:c5:11:a0:65:90:f4:
29:cb:53:b4:90:48:cd:b5:78:ae:40:e5:34:7b:95:
56:bd:f6:aa:31:4e:2c:8f:60:77:6b:c0:ae:7e:d3:
c0:83:3c:ed:07:80:39:ec:7b:0c:92:2e:a1:07:71:
6c:b6:8e:23:a9:0c:1b:bb:ab:a3:98:a2:5e:68:99:
6c:57:66:e5:cd:cf:39:27:31:dc:0e:35:11:51:55:
bd:0a:e6:99:e0:cd:9e:d9:30:de:9e:a4:a1:41:21:
d4:fb:85:ee:2c:43:4f:ed:0e:35:d5:2c:e6:41:f7:
f6:be:61:87:6d:f6:72:44:c7:73:4e:11:51:20:6c:
4f:95:dd:23:f0:e2:38:b5:40:03:93:90:2e:b0:e7:
23:6e:b6:80:10:e3:c4:a5:10:06:1d:7c:4b:93:ac:
4d:74:68:4d:7c:17:e7:98:f1:67:bf:32:9f:ff:46:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:69:25:8B:9D:67:F6:E6:26:B7:19:16:AA:70:00:C2:C8:5F:E5
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:d7:68:9d:44:4e:fe:fe:87:fe:87:35:aa:b7:01:84:50:
e1:09:d5:72:63:b0:ae:0f:d0:af:5f:ac:8d:83:75:2b:34:3d:
21:81:2d:e4:4f:60:39:fe:55:18:b1:b6:1b:89:9e:f3:70:b9:
8a:61:3b:7d:3b:84:eb:9d:7d:9f:ef:43:2a:87:3b:6a:8b:a1:
a1:2f:65:1b:4c:ba:71:e4:89:8a:cc:8b:47:1c:e6:58:83:f6:
c4:a3:99:a6:48:04:09:73:2d:4c:2c:3b:fc:74:89:95:40:60:
80:2a:85:8d:17:a4:98:cf:c2:59:cb:fb:3d:00:0a:cb:72:51:
5e:3f:6f:bb:19:ca:72:c1:34:8f:75:4e:8f:13:5b:bb:62:fb:
bd:9e:4e:79:b2:90:e1:a5:02:8f:f7:29:ba:7c:a2:42:1d:9f:
78:b1:c8:e2:43:e8:ad:46:46:6e:57:b3:a0:75:ef:88:5c:15:
5f:38:02:21:bd:39:4c:08:e5:dc:d6:c7:ca:8f:c8:b4:5c:9a:
07:07:0b:66:c7:21:dd:d1:9e:29:0d:6c:16:73:48:dd:79:8d:
ce:a3:ad:1b:1c:05:29:d2:42:2e:d4:dc:ed:42:3f:41:03:23:
48:d4:77:50:94:fe:a7:71:57:46:e8:78:af:05:89:ab:4f:f8:
4f:9a:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:58 2026 by rpki-client