Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: QFAlkbr5RSDtdygFZzo1Egfl3JX+urjbG9cwMvp8UAI=
Subject key identifier: 7B:B3:00:06:04:B8:DC:DC:74:1F:3E:8A:CF:A6:BD:E5:2A:2D:01:A2
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01A14684836782E074F338DB5F8C572CBFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1AAD
Signing time: Fri 16 Oct 2026 21:00:51 +0000
Manifest this update: Fri 16 Oct 2026 21:00:51 +0000
Manifest next update: Sat 17 Oct 2026 21:00:51 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: NynuDj/mP7NXDjE1yj1f/1TMWSp6Fe7YSWOqoOVB5yQ=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:84:83:67:82:e0:74:f3:38:db:5f:8c:57:2c:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Oct 16 21:00:51 2026 GMT
Not After : Oct 17 21:00:51 2026 GMT
Subject: CN=7bb3000604b8dcdc741f3e8acfa6bde52a2d01a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:ca:5e:6b:d3:46:c8:02:63:7a:60:86:b3:
c3:96:1d:2c:18:a7:91:fc:e1:59:23:ef:7b:24:11:
35:c9:ef:a0:03:93:b0:ca:44:00:09:b7:8d:44:99:
d7:65:c7:32:f4:1b:c8:08:01:08:2a:65:54:f5:5b:
bd:2b:bd:61:c0:2f:f8:c1:da:07:8c:d6:53:fa:09:
70:dd:17:c8:f8:b9:b7:66:9e:de:70:1f:89:ac:4c:
56:4a:e5:1f:d6:36:75:d4:05:47:38:86:42:db:a2:
03:21:45:e0:d8:59:99:4d:3e:41:83:ea:62:11:64:
b3:b5:7a:cc:17:67:8b:09:a4:07:3e:1b:04:a3:e1:
92:82:06:92:93:21:43:6c:0d:b7:10:ec:35:fd:be:
46:50:fe:7b:87:0a:b4:21:8b:cb:76:d9:a1:3a:13:
23:44:d6:98:1b:92:54:67:26:be:42:49:ac:9f:04:
f8:dd:05:f2:b8:e5:8a:aa:ef:ad:1d:15:09:40:f1:
21:04:8c:60:ba:aa:1b:de:95:fb:8f:6f:c4:7e:10:
1f:78:28:1d:b8:02:56:2f:2b:fe:42:1b:e3:a1:d8:
aa:75:f4:2a:46:4d:21:f5:bc:08:cd:0f:13:f0:88:
0b:33:4b:31:71:98:b6:ab:05:83:6c:4f:2f:e7:42:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:00:06:04:B8:DC:DC:74:1F:3E:8A:CF:A6:BD:E5:2A:2D:01:A2
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2e:d5:f0:ff:ee:e0:e1:92:bb:83:e2:53:e6:a8:4b:df:72:
91:86:02:ed:01:a7:f1:85:24:2b:b4:d4:a6:78:2f:1a:d2:db:
f6:d6:2c:9a:27:9c:92:89:4f:e5:62:4c:72:3c:e1:3f:39:af:
8d:31:73:80:d9:fd:3e:8f:3d:c7:53:f5:b2:63:84:49:e6:ac:
8f:f2:ca:8f:fe:d9:c8:e4:d9:bd:b1:99:15:89:81:5b:35:92:
aa:da:25:28:1a:5f:a1:15:e3:61:f0:0e:a3:28:b5:d6:88:90:
fd:2f:72:1c:1b:22:aa:47:a9:9b:ac:7a:0d:5d:41:d2:10:57:
4e:2f:5a:fc:5e:14:0d:c3:b3:0a:06:00:77:66:da:53:81:60:
b5:2e:f6:d6:42:df:e5:f9:46:dc:8a:ec:b5:c0:2f:66:13:76:
61:b8:2d:6f:f8:37:15:b7:50:4b:83:f5:bb:f7:01:60:78:48:
40:d6:2a:6b:3a:2c:9a:ea:59:46:31:6a:3f:f2:b6:c7:e9:aa:
d7:4c:8a:1f:29:54:ba:25:67:db:9f:11:3e:4c:c8:10:f8:f5:
7b:be:fa:a7:f4:29:3f:91:28:77:e7:12:4a:03:a3:db:cd:b5:
5c:2a:4b:73:b9:a8:ce:05:4a:74:b2:9b:66:9b:d5:2f:46:14:
0f:c6:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:52:44 2026 by rpki-client