Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: 2rh2WaqMx9gfSmhXgyFTIFTTM/mbo1LfcRnTKvTKyZw=
Subject key identifier: E2:5B:C9:E6:C8:E8:F6:D6:BA:6B:3C:46:E5:2B:DB:70:AF:9A:48:82
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019DCDBD8B8916075F21544F5BA8FAD9DF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 13DC
Signing time: Mon 27 Apr 2026 07:00:44 +0000
Manifest this update: Mon 27 Apr 2026 07:00:44 +0000
Manifest next update: Tue 28 Apr 2026 07:00:44 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: MXP/95o6DfgAmGVu1A6JWzWZIzWobHPGvlxgNbgXU3Y=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:8b:89:16:07:5f:21:54:4f:5b:a8:fa:d9:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Apr 27 07:00:44 2026 GMT
Not After : Apr 28 07:00:44 2026 GMT
Subject: CN=e25bc9e6c8e8f6d6ba6b3c46e52bdb70af9a4882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:db:25:f1:12:a7:51:38:8d:3f:d1:50:01:
b1:40:b4:86:99:47:42:41:b1:04:73:15:1d:8c:90:
41:a2:fe:3d:4d:a0:3e:51:5b:b0:38:a8:a7:88:04:
b7:f9:73:f1:0d:52:e9:bc:45:e1:da:9a:3d:24:dc:
16:73:11:6d:f2:23:83:13:d6:bc:8a:38:df:4e:1f:
28:42:7c:e4:3a:8f:9b:f0:b1:20:94:cc:a8:58:b4:
0b:a1:9d:55:bf:22:b8:0e:8c:21:bb:7c:0e:ef:0e:
b2:5b:bb:49:8a:d2:51:7f:d0:69:09:07:0f:0d:08:
d6:0d:ee:e1:89:9d:8c:3f:fc:47:51:2e:fb:1f:8e:
72:67:f3:a1:28:96:ee:30:b1:9d:00:79:7b:dd:20:
90:5a:fc:eb:c7:29:aa:e1:76:5c:4e:a1:41:f1:b6:
56:1e:fe:0d:3f:6c:99:48:fb:f9:8a:30:57:3f:cd:
f2:54:3c:fa:4e:8a:84:a7:b6:2a:bf:2b:55:b2:8c:
ea:5b:18:58:14:cc:a5:15:41:bb:fd:c0:0f:26:2c:
73:c5:c5:cd:b1:14:f3:34:60:dc:70:70:43:f0:8d:
b3:70:35:a0:74:cb:ad:ac:48:a3:c6:d9:5b:a5:73:
98:6b:1f:ce:c6:c7:d8:cc:5f:92:31:93:a0:57:10:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:C9:E6:C8:E8:F6:D6:BA:6B:3C:46:E5:2B:DB:70:AF:9A:48:82
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:41:23:a1:21:c6:48:24:e2:a2:c6:52:7d:2f:db:0b:54:
c4:9c:ea:74:bd:95:37:22:e0:8c:37:ca:fa:42:85:33:4b:16:
8d:f7:e9:fd:aa:04:39:60:f1:ce:fd:f6:1e:c7:7a:d3:e4:58:
e6:b8:b3:8b:33:92:f0:ce:23:cc:ee:6c:e1:b3:98:93:8f:10:
c5:92:21:93:08:8c:5a:c0:82:0e:ec:30:12:35:46:8d:01:32:
bb:69:d8:7a:ca:29:7b:8b:a0:c4:c1:5b:f1:dd:ce:fb:ac:7b:
51:30:3e:ec:6d:41:0d:e0:41:8e:d0:23:fa:3f:79:94:5b:54:
75:1c:18:5d:9e:6d:7a:96:19:01:01:b0:bc:fb:39:36:9f:95:
bc:d4:0f:4e:98:5f:ef:a1:e9:9b:1b:ad:92:32:a9:68:e9:2b:
39:48:64:28:b8:5e:ac:0c:e4:07:ba:8c:d7:6d:93:9a:1b:ef:
9b:1a:bb:6e:0a:b6:65:61:cf:0e:9b:63:a6:c0:78:1a:11:7a:
d6:65:85:3b:95:54:7b:f8:94:4d:af:c2:18:c2:d1:7e:b8:13:
e1:e6:8c:21:39:87:4f:22:16:0e:72:1a:3d:a6:c1:92:dc:af:
6e:c7:3d:d2:ac:84:24:1e:f8:bb:e8:3d:99:19:58:f7:86:d5:
fc:8f:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:43:15 2026 by rpki-client