Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: NjpMoj6YGbav1VC0hE+hEGCtdi3mZkTF++31TMoVxF8=
Subject key identifier: 8A:13:34:D3:26:0F:D3:2A:40:B5:FC:A6:67:7A:8E:3B:02:71:14:B5
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019D9A06FCB6FF18A6335274014037A7BB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: rUB2uLp/mOwS7HYfssARRjErpiA2ZzS9t7g+DslX3ds=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fc:b6:ff:18:a6:33:52:74:01:40:37:a7:bb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=8a1334d3260fd32a40b5fca6677a8e3b027114b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:5b:54:47:d9:5a:79:3d:92:c7:07:80:54:
0d:2b:b6:99:e3:44:08:32:86:24:03:14:80:98:e9:
2d:49:e5:07:ed:94:80:57:82:7e:17:59:17:58:e3:
f9:48:fe:0a:e6:8d:6a:62:27:96:6b:ac:8d:16:76:
1c:da:3a:75:75:15:43:69:ad:17:e4:af:fc:41:f9:
95:ae:3f:a1:ae:d0:65:e0:90:59:60:8b:4f:dc:3d:
1f:a4:c5:58:10:90:1b:8d:25:9a:2e:1a:f0:0c:52:
f0:3c:0c:d4:4e:12:7b:ac:62:eb:b3:31:00:13:c1:
65:c1:7a:83:d8:a0:07:a1:4a:3f:18:31:ef:f0:f3:
fb:b6:f3:25:42:06:ea:6e:35:21:66:f3:33:9e:21:
97:c9:0d:25:87:81:4e:6f:75:e3:e1:f0:35:1a:3c:
9d:fe:1a:e6:09:2f:2a:21:4d:48:22:d6:02:50:f1:
ca:68:26:25:f0:0f:73:78:aa:0f:08:7b:31:bd:30:
44:c1:41:3d:73:db:27:82:b6:85:53:ad:44:cf:e6:
c8:3c:89:ab:c3:f2:b8:5c:ec:f7:44:42:cc:ab:45:
bf:1e:e0:77:eb:dc:1a:be:37:34:85:f9:c5:a7:7b:
09:d5:c0:fc:ac:a1:fc:6d:f0:41:20:98:f3:ed:f1:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:34:D3:26:0F:D3:2A:40:B5:FC:A6:67:7A:8E:3B:02:71:14:B5
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f7:5a:31:6c:84:0b:ec:6b:46:a1:0c:81:c5:76:01:de:e8:
3f:11:95:4f:cb:10:45:14:96:8e:8b:0e:5d:10:a1:bd:70:72:
87:b4:8c:46:45:de:41:13:e7:f0:7d:e1:33:bc:63:0f:4d:37:
90:87:db:58:87:a2:28:ff:30:3a:a1:04:0e:ff:f5:03:62:fd:
c8:be:b6:ba:92:95:38:83:15:7e:64:ff:a4:3f:df:bc:01:88:
5f:cd:00:60:a2:50:b5:fc:eb:84:23:29:e5:f7:2f:da:28:bb:
51:7b:c9:05:b5:41:d1:41:5d:26:f3:24:9c:15:64:d0:a9:ad:
d0:e1:a2:d9:01:e6:3e:1e:e2:b3:05:ee:46:b7:e1:b1:1b:e2:
b1:dd:fb:06:0c:37:50:44:b8:59:1f:dd:7f:93:82:43:7f:5b:
53:b4:e5:b2:36:80:90:f2:a5:a4:14:bb:38:c9:51:fe:78:d2:
71:a0:98:7d:a3:39:00:20:6f:a4:0b:28:da:bd:7b:36:b7:28:
f9:dd:a0:e0:69:38:c6:72:92:ed:25:3f:f4:f6:ac:06:c7:dc:
7f:79:8e:8d:d9:1a:03:1b:91:58:04:ff:49:5f:9a:e6:80:6e:
35:9a:ae:00:0e:b0:ea:13:bb:cc:3b:b2:47:78:9d:3a:11:e0:
d3:cd:71:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBvy2/ximM1J0AUA3p7stMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll
NTljYzcwHhcNMjYwNDE3MDYwMDQyWhcNMjYwNDE4MDYwMDQyWjAzMTEwLwYDVQQD
Eyg4YTEzMzRkMzI2MGZkMzJhNDBiNWZjYTY2NzdhOGUzYjAyNzExNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fJbVEfZWnk9kscHgFQNK7aZ40QI
MoYkAxSAmOktSeUH7ZSAV4J+F1kXWOP5SP4K5o1qYieWa6yNFnYc2jp1dRVDaa0X
5K/8QfmVrj+hrtBl4JBZYItP3D0fpMVYEJAbjSWaLhrwDFLwPAzUThJ7rGLrszEA
E8FlwXqD2KAHoUo/GDHv8PP7tvMlQgbqbjUhZvMzniGXyQ0lh4FOb3Xj4fA1Gjyd
/hrmCS8qIU1IItYCUPHKaCYl8A9zeKoPCHsxvTBEwUE9c9sngraFU61Ez+bIPImr
w/K4XOz3RELMq0W/HuB369wavjc0hfnFp3sJ1cD8rKH8bfBBIJjz7fH2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoTNNMmD9MqQLX8pmd6jjsCcRS1MB8GA1UdIwQY
MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt
NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx
LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPdaMWyE
C+xrRqEMgcV2Ad7oPxGVT8sQRRSWjosOXRChvXByh7SMRkXeQRPn8H3hM7xjD003
kIfbWIeiKP8wOqEEDv/1A2L9yL62upKVOIMVfmT/pD/fvAGIX80AYKJQtfzrhCMp
5fcv2ii7UXvJBbVB0UFdJvMknBVk0Kmt0OGi2QHmPh7iswXuRrfhsRvisd37Bgw3
UES4WR/df5OCQ39bU7TlsjaAkPKlpBS7OMlR/njScaCYfaM5ACBvpAso2r17Nrco
+d2g4Gk4xnKS7SU/9PasBsfcf3mOjdkaAxuRWAT/SV+a5oBuNZquAA6w6hO7zDuy
R3idOhHg081xoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:20 2026 by rpki-client