Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: vmXeVDtlQ9/qws83ov3Zh81FnPpTwNmppFnBDVBo/q0=
Subject key identifier: CF:40:EE:03:B3:05:40:19:D5:13:28:6B:F9:33:C4:B2:2D:E2:87:01
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 01A1046E5D06A152302A8EBF3189AC9AB3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1586
Signing time: Sun 04 Oct 2026 01:01:43 +0000
Manifest this update: Sun 04 Oct 2026 01:01:43 +0000
Manifest next update: Mon 05 Oct 2026 01:01:43 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: DA6D9lM4brr4749+3zKuAgyqnHvvMTdlEt3QHTbNizc=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:5d:06:a1:52:30:2a:8e:bf:31:89:ac:9a:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Oct 4 01:01:43 2026 GMT
Not After : Oct 5 01:01:43 2026 GMT
Subject: CN=cf40ee03b3054019d513286bf933c4b22de28701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:6f:4b:1f:cd:32:4e:90:ce:54:bb:e4:89:
67:f5:87:ac:61:6f:71:b0:3e:52:bf:9d:ed:2b:da:
2d:75:55:6a:de:25:12:ec:41:9c:87:5f:95:56:30:
78:0e:68:70:65:36:a6:11:d1:19:7a:3e:17:cd:4c:
ff:13:7b:d7:18:5b:f6:b2:53:c1:5f:09:ce:9d:47:
f0:f1:ab:e5:8f:e4:2d:a9:dc:74:35:46:08:96:4c:
84:2c:08:a4:24:92:62:c5:0d:f9:f3:0d:28:46:eb:
5c:ed:db:7a:81:75:8b:f8:6a:ed:be:02:cb:5f:72:
fa:a6:40:dc:86:19:ae:c8:c2:a4:1e:80:e5:28:e2:
ef:b4:a1:cd:94:5e:71:45:da:17:f4:4e:ea:67:61:
a3:ec:3b:9c:a5:28:a8:09:86:70:4f:7a:47:73:fe:
20:2f:f1:d0:c1:cd:05:b3:71:5d:f5:d6:3a:d5:d5:
92:f0:7b:91:08:5d:8a:ac:2b:5e:89:7d:23:fa:ac:
93:93:3c:ec:c4:8e:d8:16:80:4c:40:1c:13:8e:7b:
9b:fd:ab:d6:96:ef:24:56:a8:46:f1:fb:91:26:73:
71:78:35:e3:df:ad:f6:b2:9a:a0:4d:a8:70:25:cc:
d6:5e:f2:53:ba:50:32:5f:db:45:ea:01:46:09:5d:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:EE:03:B3:05:40:19:D5:13:28:6B:F9:33:C4:B2:2D:E2:87:01
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bd:07:f2:f1:34:49:e5:24:01:50:de:6c:c5:d1:56:42:c3:
77:a2:94:35:4d:db:f0:4e:1b:fb:99:2f:1f:01:b1:1f:ee:0e:
89:0e:19:26:ac:5f:8c:c4:ed:4c:09:a7:5f:9c:66:24:7a:f2:
3b:59:57:00:c9:62:4a:fc:45:81:76:80:e4:e2:5f:f6:c6:32:
d1:e3:c1:88:63:b0:aa:0c:b9:c0:91:22:5a:f2:6e:87:f4:b5:
a4:00:56:04:7f:8f:bf:ba:09:38:fc:ab:91:6b:33:7d:01:60:
28:c7:08:22:d8:a8:51:22:4a:a1:3e:8c:3b:97:16:a1:ea:27:
62:4b:65:95:eb:0b:94:00:bd:19:43:53:b0:9c:99:6b:88:cf:
56:0d:61:3c:f0:02:e5:22:a9:89:7b:9d:7b:82:4a:83:7c:39:
fe:c7:dc:e7:d8:25:ef:12:99:6a:47:2c:39:ff:82:b7:dc:0f:
85:31:ca:42:e3:8b:cf:ca:1c:d0:fa:47:ff:83:b1:4d:31:6b:
06:ad:04:85:de:f3:e6:20:78:20:e0:24:6c:02:8d:f1:32:3f:
33:df:0d:20:04:b0:d2:3c:5f:69:e5:11:f1:a9:c1:bd:a7:11:
d8:75:b5:31:7d:e5:b7:72:94:26:8b:a7:bf:9c:fe:76:e3:01:
4a:f0:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:18:47 2026 by rpki-client