Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: LFEa3VhhPMA5x/FaNC0jw3joomBqD0EaZ/6PlVq6YkI=
Subject key identifier: 78:22:FC:E6:4C:59:23:54:20:F6:7A:D6:99:87:EB:42:AF:23:CD:01
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 01A08FB2CA1E835666F88A8979F9B0DBE003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 1900
Signing time: Fri 11 Sep 2026 09:00:53 +0000
Manifest this update: Fri 11 Sep 2026 09:00:53 +0000
Manifest next update: Sat 12 Sep 2026 09:00:53 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: KxZ57VGzjXg8t9emYzowFr6b2CzpbG8C1Yhc2hJPyhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b2:ca:1e:83:56:66:f8:8a:89:79:f9:b0:db:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Sep 11 09:00:53 2026 GMT
Not After : Sep 12 09:00:53 2026 GMT
Subject: CN=7822fce64c59235420f67ad69987eb42af23cd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:89:8f:ed:ef:75:05:d4:45:60:19:50:05:
01:7c:02:06:e0:14:6d:c9:da:7e:94:17:94:cf:bd:
84:af:a6:00:c9:53:70:5b:c0:44:bb:64:6a:74:b3:
46:62:d9:e3:77:25:90:db:81:f7:dc:39:81:4a:86:
53:31:59:33:fd:e6:83:ac:ea:ca:d5:8f:48:63:3d:
e1:cb:bf:eb:ca:e5:30:2a:61:b0:dd:f1:b5:e1:ff:
47:ea:5c:ce:5b:ac:72:84:e6:0f:0c:01:f6:7d:3a:
5f:b9:74:bb:9c:6e:b9:ab:35:4a:f2:f6:c7:a1:65:
0b:0c:9f:66:4a:d1:06:9d:83:0d:c0:ae:c1:65:6b:
b0:9d:2b:83:9b:2a:f9:be:2e:95:5c:61:9f:cb:f7:
d4:56:4c:46:3d:fa:b9:f7:7e:31:dc:24:67:a7:69:
40:bd:68:fa:59:93:0e:f7:d4:76:d3:1e:cb:af:55:
e0:9a:04:cc:62:3e:32:09:0e:f2:38:d6:9f:0d:95:
8b:e7:0f:cc:ec:fe:81:ef:94:4f:a4:dc:37:7a:59:
22:e6:5b:e4:a6:a0:5c:77:9a:6a:a4:b6:04:20:92:
77:7b:3a:5c:91:2a:76:45:96:77:49:8b:59:28:dd:
c9:18:d6:ce:d9:74:2b:a4:b2:33:f4:4f:08:98:2f:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:FC:E6:4C:59:23:54:20:F6:7A:D6:99:87:EB:42:AF:23:CD:01
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:98:f6:38:54:58:e0:12:3d:27:92:04:f4:17:29:76:76:28:
9b:14:b9:cc:7d:b7:ad:4c:ad:17:9f:30:93:73:08:4e:d8:17:
dd:5a:17:f9:89:6d:c4:51:ea:f1:c7:f1:39:48:88:02:1b:1f:
b1:b2:c4:94:1c:65:ab:06:5f:0e:42:d1:ed:c7:f5:29:fb:db:
89:95:df:16:ae:e0:fb:b6:76:a8:e2:a3:0c:cf:10:5d:4d:21:
75:9d:ad:d8:1e:e8:de:36:49:f5:0e:77:de:f6:f5:17:6a:67:
ff:95:c2:34:70:b7:1a:40:21:fb:73:b5:33:b3:1c:5a:a0:d5:
35:cf:db:46:45:2b:62:09:89:0b:69:4e:a1:73:ca:e4:81:51:
ae:9e:14:1b:d4:8f:63:b0:89:6b:0b:df:bf:b8:d7:fb:8e:64:
b8:35:85:4f:ef:15:56:5b:b6:d6:1f:2f:25:be:b1:3b:4f:48:
49:84:ed:66:c0:8d:f1:de:0b:68:ec:18:5c:fc:f7:05:bd:e6:
a9:ed:90:e5:0a:94:b8:24:58:de:d7:1e:f5:b1:b1:42:01:0d:
58:9e:86:54:4c:dc:21:af:be:3c:2f:f8:3b:1f:e9:91:22:c6:
3b:57:68:59:57:95:77:9b:f6:93:b2:0d:9c:c3:b2:a6:c0:ea:
da:06:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:43:11 2026 by rpki-client