Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: X5i0rPW7d1EPLzBsghmE9RFoXmJiNSlvrN0BYGHXTKE=
Subject key identifier: 18:94:51:A1:A7:43:A2:6D:3D:A2:6D:27:FD:DB:7D:D5:08:9C:6D:54
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019CE410B12A6A5380E3C7848C2DCB0C3F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1363
Signing time: Thu 12 Mar 2026 22:00:25 +0000
Manifest this update: Thu 12 Mar 2026 22:00:25 +0000
Manifest next update: Fri 13 Mar 2026 22:00:25 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: K2YbwVGSpxVdFSParyCgWPpmpZj/g3ebFuX++i1t5+U=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:b1:2a:6a:53:80:e3:c7:84:8c:2d:cb:0c:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Mar 12 22:00:25 2026 GMT
Not After : Mar 13 22:00:25 2026 GMT
Subject: CN=189451a1a743a26d3da26d27fddb7dd5089c6d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:5d:b3:c1:c0:fc:90:43:a9:ad:42:f6:97:
72:67:a4:1e:3e:ae:4c:e1:95:3e:62:7b:34:4d:83:
43:80:52:3d:55:d3:7f:4a:72:cc:09:e3:e9:6e:51:
8b:11:d0:0b:37:b8:93:30:57:99:0b:50:db:fc:52:
7e:f2:7f:ab:5a:b2:b9:71:2b:54:31:54:da:c7:f7:
08:5b:89:fc:62:8b:72:02:7d:62:a1:c4:b6:13:63:
10:e5:c4:eb:5e:ad:ef:6d:68:72:90:44:b5:f2:65:
74:07:07:9d:04:12:80:d9:d9:e1:10:c5:35:18:c7:
4e:67:26:45:fa:42:d2:b2:67:0d:66:8f:47:51:ea:
38:42:0a:ae:00:8f:48:fc:98:06:f6:1e:f7:37:e6:
93:62:1f:0b:09:b5:74:46:54:16:13:8f:de:3e:b4:
9f:e2:da:23:d0:9c:91:bd:d1:cf:13:99:2b:8c:1c:
ad:35:1e:c2:9d:8c:8a:3e:93:07:05:f9:c1:58:78:
eb:53:36:27:9c:4f:c4:80:a5:64:15:c0:46:60:44:
ac:a2:a9:03:c7:bc:4e:2e:d2:c9:e7:42:76:06:86:
48:09:c2:30:db:38:18:1e:bd:ed:24:98:94:96:ca:
22:5b:39:3a:aa:24:b9:2c:fa:03:1a:26:b3:84:25:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:94:51:A1:A7:43:A2:6D:3D:A2:6D:27:FD:DB:7D:D5:08:9C:6D:54
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:30:c7:eb:c7:72:c1:a9:01:dd:1e:22:8f:0b:29:f3:48:66:
42:99:95:0b:85:5e:ec:a5:45:bb:1d:21:9f:b5:2d:85:88:81:
b7:9d:2a:af:f5:20:54:e2:92:45:2d:45:d0:8c:03:ff:cf:de:
db:e2:0d:2b:6b:a9:0c:e7:cb:8e:cb:79:5b:fd:52:69:8e:aa:
67:6a:7e:d8:80:0c:a8:7c:5a:18:42:82:58:35:b4:a7:2e:1e:
f5:ce:c4:45:47:0c:c4:c0:e1:ef:08:a7:95:72:13:06:50:f2:
5b:e9:67:90:5b:c5:33:13:81:0c:1a:d9:33:42:0b:6b:3a:3c:
f5:8e:12:6c:cc:c0:bc:24:e7:cf:24:70:86:4f:5d:e7:a1:69:
1b:fc:6e:c7:e0:34:d2:24:47:5e:0d:38:3a:fb:72:f1:9e:c5:
fc:33:6f:a8:bd:af:3a:86:6e:26:56:da:2d:31:44:aa:39:e1:
af:be:72:ec:4f:11:9c:9e:f2:9a:04:da:67:50:17:92:eb:24:
40:d5:a6:4e:7a:45:9a:83:0b:60:8a:af:89:b5:64:43:21:e0:
44:dd:ef:c9:c6:69:cb:1b:ec:58:48:66:a2:5e:cb:60:73:38:
b7:27:be:ad:0b:67:bb:51:4b:4e:67:1a:c3:73:bb:f7:3c:9f:
52:a4:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:52 2026 by rpki-client