Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: X/E+BLHunVwZHWNTXdtCbXWAFQJ0ciQcr2gNY4a1IDM=
Subject key identifier: 01:FB:E2:E7:F6:5A:7C:18:04:DC:47:18:D1:9B:92:12:98:67:CF:57
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 01A18CAF632B43AB28F620E7764B8C0E1BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 1983
Signing time: Fri 30 Oct 2026 12:01:06 +0000
Manifest this update: Fri 30 Oct 2026 12:01:06 +0000
Manifest next update: Sat 31 Oct 2026 12:01:06 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: FEE0KItF3IxixPbgL60kzKEiacec0ibZQ41JXz/vshY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:63:2b:43:ab:28:f6:20:e7:76:4b:8c:0e:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Oct 30 12:01:06 2026 GMT
Not After : Oct 31 12:01:06 2026 GMT
Subject: CN=01fbe2e7f65a7c1804dc4718d19b92129867cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:59:f2:80:91:7f:6f:df:1e:01:ff:46:4c:
8d:11:77:1e:88:f6:45:de:45:d9:e7:98:6f:7b:2f:
cf:6b:c0:ce:13:ed:5e:eb:cd:fe:ed:fd:f8:49:7b:
fc:37:9f:99:e5:01:c1:73:85:8f:da:35:87:80:42:
65:21:f9:45:83:d3:68:ce:dd:ae:07:95:ac:44:c6:
7f:3e:d0:51:b5:1b:c4:b5:d9:98:51:73:03:aa:72:
d7:fc:04:58:2d:31:5c:7d:ea:e6:3c:0c:84:b1:13:
ee:d4:ac:3d:2d:f2:0e:07:27:f5:91:bf:b6:b9:a4:
02:af:8e:f8:19:56:c4:66:ea:a9:45:3f:97:2e:67:
82:7a:66:92:6d:1f:19:58:be:a9:76:61:35:59:36:
fd:fe:64:d4:13:ea:b0:64:fa:b1:a1:bd:4f:ea:c1:
95:91:2c:97:f1:d6:46:ba:b0:bc:92:d6:cd:80:b1:
73:11:ea:1b:87:8c:49:2f:f4:7f:70:5d:73:47:4f:
19:a7:41:b9:8a:7b:a0:ce:83:c0:74:55:ee:2c:b5:
a6:69:6e:af:d0:da:42:b5:75:35:75:bb:7b:10:39:
5b:58:62:5b:a8:2b:b5:73:a0:b5:53:b5:97:d1:85:
ff:8a:fc:78:08:de:49:d8:a7:82:e6:55:a3:e0:18:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:E2:E7:F6:5A:7C:18:04:DC:47:18:D1:9B:92:12:98:67:CF:57
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:75:12:ca:9b:ba:35:b4:07:e7:ee:54:bf:9f:78:cf:0d:4c:
48:5a:4c:5b:ed:34:44:da:58:1e:8f:10:ee:e3:90:4e:d3:8e:
89:38:d7:73:d3:da:d5:c2:cc:c0:31:3f:a2:a4:cb:db:b2:70:
2c:86:63:6c:d1:d9:c3:ed:19:13:63:fe:0d:6a:34:0d:44:e0:
c7:fe:79:f3:d5:67:a6:3e:c3:93:8b:55:d5:77:f8:3e:c1:96:
c8:0b:67:05:cb:44:41:ba:24:1d:ff:6d:3d:65:a7:90:b1:98:
9f:c9:ff:4d:59:15:2e:55:ea:9a:86:84:8e:10:0b:a2:21:de:
d6:65:15:6a:e8:76:9b:6c:59:27:50:64:dc:1a:58:57:6c:3e:
4d:06:da:f7:93:d6:53:7e:8f:00:14:9c:3e:f5:3e:1d:2d:c8:
34:de:44:33:03:2b:6f:57:b1:7e:1d:a3:8b:70:5d:a9:e4:69:
08:64:50:b2:31:3e:a7:89:9b:2b:bf:e4:7e:d0:3c:25:28:d9:
02:79:db:d0:5f:68:c3:ab:26:73:c3:55:bc:6d:60:55:ac:79:
a9:c5:81:d8:ac:d3:a5:65:e1:57:8a:19:05:df:69:f4:7b:fc:
22:76:af:35:d5:17:bd:9f:a9:bb:ce:d2:7c:6d:33:fe:d5:e4:
ad:c1:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:09:42 2026 by rpki-client