Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: DCn4jDyPXUGeKMZ38PBs5HpoY3aqPc9L0WoQ+IGhAmg=
Subject key identifier: 16:40:85:13:90:2E:6C:33:13:14:2F:85:B7:B9:50:3B:E8:8A:0B:0F
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019D382EB1848C89A1130AF5283A4A878538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 1745
Signing time: Sun 29 Mar 2026 06:01:17 +0000
Manifest this update: Sun 29 Mar 2026 06:01:17 +0000
Manifest next update: Mon 30 Mar 2026 06:01:17 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: FnRnIxzTn6oHc8NCh6y3lVYVlscYVIbGc5jyTq26q1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b1:84:8c:89:a1:13:0a:f5:28:3a:4a:87:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Mar 29 06:01:17 2026 GMT
Not After : Mar 30 06:01:17 2026 GMT
Subject: CN=16408513902e6c3313142f85b7b9503be88a0b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:15:bb:84:ab:21:81:be:2e:1f:20:53:16:
5f:bb:fd:e6:f1:e7:57:7a:ba:24:cb:23:07:fe:a2:
5e:70:c4:87:ac:10:ce:c9:d7:6c:ed:37:b2:e2:38:
3b:74:05:07:56:b3:08:1e:73:1e:b8:da:90:ba:8c:
18:a0:18:a1:7a:f3:84:fc:ba:48:d9:1b:91:fc:57:
2f:e5:10:25:5f:d7:07:0e:05:16:b0:85:c4:6c:a2:
bb:0d:96:d9:1d:22:e5:77:6d:e5:e0:72:cb:4e:9f:
fd:40:16:31:54:69:8f:a5:5f:3d:49:15:7b:5e:90:
39:1e:10:fe:e8:d4:6a:06:a4:dc:79:4d:50:f7:9f:
b1:63:37:bb:eb:3f:65:72:2f:13:a9:00:53:b3:65:
b3:19:e6:89:86:14:9f:3f:2c:52:7a:2c:97:ff:68:
9c:4f:3b:55:1e:c5:c5:3d:6a:32:6b:80:54:24:2b:
4e:1c:a1:1a:58:69:21:c2:55:0e:ca:d6:7a:f3:62:
c5:15:86:4e:d1:80:f2:69:6c:52:42:a3:2b:bb:7b:
73:72:57:7f:47:75:8d:ee:25:f7:29:e4:37:c7:fb:
07:b9:ef:29:d0:09:be:be:0d:f3:09:75:2b:1d:7c:
d8:7d:30:26:94:5c:bf:98:5b:5d:ef:8b:f2:81:91:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:85:13:90:2E:6C:33:13:14:2F:85:B7:B9:50:3B:E8:8A:0B:0F
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:24:af:3b:d3:82:22:60:57:d5:1d:08:77:29:4e:e3:6f:
68:0a:39:5a:ff:d9:c2:a0:a9:74:bc:0a:db:f9:56:c4:5d:1e:
70:03:56:32:eb:ed:46:3c:df:70:76:5d:f0:bf:3f:ea:ed:b4:
95:91:02:c2:2f:d0:76:90:74:d9:79:90:2b:e5:2d:3c:01:37:
55:a3:9a:b2:4e:cf:3f:7e:91:15:50:9d:7e:91:d6:c9:0c:1d:
cf:56:9b:0f:a7:62:90:26:1e:31:6b:31:07:a2:99:18:90:0e:
e0:7b:c4:34:b4:e4:e2:ea:b1:6a:87:9d:ed:03:a7:16:a7:bd:
41:42:a4:1d:6d:42:74:cf:8f:db:4b:44:9c:4a:0c:91:1f:f8:
8b:30:29:5a:79:e9:10:db:b1:62:b9:21:9a:81:e9:aa:de:89:
e1:44:7b:84:90:2c:d3:29:a2:2d:6f:63:24:5e:93:d7:6b:79:
e9:ea:d3:72:6d:61:3f:c2:da:13:df:90:50:60:d0:f1:4b:42:
0e:5b:66:f4:ad:2f:86:05:86:5a:4d:0f:bc:de:7c:20:a7:82:
88:33:04:e6:e3:92:14:e0:10:2c:5a:7a:36:95:22:73:5c:ff:
0e:8a:f7:da:ba:e4:8e:e4:6d:dc:c0:31:1e:ba:f5:0c:c5:e8:
40:a0:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client