Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: b0ZW6fLkEmPMKpZRK8yoBJMMluazOaT4eomRCPk+toY=
Subject key identifier: 0B:B0:35:1D:9D:C7:69:CC:5B:1C:47:95:5C:FA:2C:6B:FC:7A:A0:E1
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019FA4F350AEF344CEBDD587763E7C0937E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 14D0
Signing time: Mon 27 Jul 2026 19:00:37 +0000
Manifest this update: Mon 27 Jul 2026 19:00:37 +0000
Manifest next update: Tue 28 Jul 2026 19:00:37 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: ITl/GqP+84w4goHG1LRoVbJIsVAKrhzgEvYOiH5Q7nY=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:f3:50:ae:f3:44:ce:bd:d5:87:76:3e:7c:09:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Jul 27 19:00:37 2026 GMT
Not After : Jul 28 19:00:37 2026 GMT
Subject: CN=0bb0351d9dc769cc5b1c47955cfa2c6bfc7aa0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:64:d7:73:04:ef:38:e2:29:ba:ff:aa:ed:
a4:31:62:d1:1a:ed:05:e7:2a:1d:90:8a:e4:88:f8:
54:a3:89:4f:d8:b1:b6:57:4f:f2:de:89:eb:1d:06:
60:3b:b7:af:cf:48:44:52:0c:16:77:1c:3f:74:b7:
62:b6:ed:62:d0:f7:40:35:44:cf:b7:4d:94:8b:38:
88:5a:74:49:67:d3:e4:a0:56:06:8d:a4:2b:39:ed:
fd:af:8a:c8:d4:90:94:48:b9:5c:33:4a:c9:09:99:
20:87:fb:d9:71:ed:6d:bf:4f:7d:c0:46:3b:ac:9c:
9a:86:0a:50:43:07:57:4c:4e:89:6b:24:56:73:38:
27:18:3b:dc:b3:15:9b:7d:2e:a3:67:17:73:fc:9a:
dd:86:86:0d:a1:39:65:1c:d0:80:92:42:04:13:2d:
21:21:ad:99:cd:1a:21:6a:cb:59:5e:da:e7:9d:21:
4a:ae:e9:a6:3e:38:79:ec:ee:c2:27:f2:67:39:15:
d2:55:c7:f0:1c:1e:2d:0c:0b:e2:16:f1:ce:3f:4a:
d2:ed:bb:b9:d5:72:3c:e9:d1:2a:13:e9:ca:51:9f:
ab:3b:2f:21:2f:22:f5:84:50:ef:c0:0b:e3:cd:a9:
74:a0:f5:f1:06:9e:77:13:d8:9e:d9:43:99:01:4a:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:35:1D:9D:C7:69:CC:5B:1C:47:95:5C:FA:2C:6B:FC:7A:A0:E1
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9b:eb:ef:27:a0:24:3b:06:5b:d2:fe:98:53:e2:1d:aa:e4:
2b:af:d7:bd:b7:51:03:86:64:9d:b4:be:52:09:cb:7a:0c:f6:
e3:22:c1:9a:3f:0f:52:f0:a6:37:84:70:fe:41:96:41:23:a8:
62:02:98:be:fa:ec:3e:46:e9:05:c3:ad:59:9a:9f:79:50:97:
02:67:b6:a0:2d:8f:f7:fb:70:ec:2e:45:d6:31:7a:4a:1f:b8:
5e:79:f3:73:18:2a:86:ed:6d:31:51:42:85:34:25:a8:93:d2:
8e:a3:6f:de:3f:52:43:f7:54:8c:22:69:fd:fe:47:29:d9:cb:
57:cc:2d:b8:16:62:b4:66:32:9e:a7:e8:d3:21:5e:f2:8c:13:
35:73:0e:83:ca:1d:55:84:8a:af:28:d9:1f:06:eb:94:71:58:
3b:c6:b9:da:7c:44:83:0d:0b:c1:71:92:33:fd:ff:52:4f:f9:
d7:00:1b:96:f3:2f:51:75:fa:04:ab:da:ec:50:2d:b9:e4:15:
84:38:d6:6e:cd:01:4d:a6:82:d0:b6:4b:00:bd:87:d8:5d:9e:
1b:09:28:b2:ac:2f:1d:01:07:12:69:03:ee:fe:5a:32:48:fd:
a3:f6:c6:59:76:90:b8:47:5d:1e:a5:d5:87:bf:ae:e7:8b:e4:
93:63:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:18:51 2026 by rpki-client