Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: oL6+H7ffowCQ7AwyYz6mf/ALSCU4YatrKNbDCrb/DvU=
Subject key identifier: 0F:2E:F5:AA:A3:40:91:54:C1:59:8B:E5:AD:32:6B:9C:22:BC:54:69
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01A0DC4DFDF26DF4A898ECD041AED2E2F451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 06:01:33 +0000
Manifest this update: Sat 26 Sep 2026 06:01:33 +0000
Manifest next update: Sun 27 Sep 2026 06:01:33 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: Xea1ztbVwcdMl8JvzPoGUoWSAubSjuorPdEJm+fnFjE=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:fd:f2:6d:f4:a8:98:ec:d0:41:ae:d2:e2:f4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Sep 26 06:01:33 2026 GMT
Not After : Sep 27 06:01:33 2026 GMT
Subject: CN=0f2ef5aaa3409154c1598be5ad326b9c22bc5469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:f1:63:f8:64:3c:c7:73:3c:f2:64:39:38:
93:6f:37:89:a4:4f:09:da:0b:a2:90:fc:40:f0:db:
cc:cf:18:fb:02:03:92:9b:7d:0a:78:2d:e4:36:6a:
1d:0f:2b:94:df:6e:9c:be:8b:cb:5a:55:31:14:57:
54:8b:b5:82:cd:6f:30:66:72:dd:2c:a0:cf:b3:5f:
55:73:6b:1a:bd:01:22:11:ad:3c:0c:b8:b9:0a:e0:
3c:81:99:51:f0:f5:a3:50:6f:41:0a:eb:e5:05:c4:
fc:fe:20:5a:7a:d4:fc:55:4b:99:45:3e:53:8f:1f:
88:13:d8:e7:c1:a0:4f:88:c6:57:0d:3a:e6:f7:af:
6a:d3:5c:55:39:e6:3f:55:73:88:ff:79:28:3a:cd:
52:87:2f:7a:4d:8d:14:63:2f:aa:a8:b9:59:80:f0:
55:20:70:48:0c:3d:16:bd:dd:4c:a1:ac:5b:bd:b3:
d3:58:af:e0:60:fd:db:bc:e5:02:5b:88:e4:c8:6d:
bf:35:66:ab:cf:f6:b6:bf:e0:2b:99:26:04:51:e8:
76:6f:f8:ca:f1:89:6d:98:d8:d7:84:09:c0:f6:0c:
34:da:e1:71:78:0a:dd:1a:9c:33:14:b6:d5:04:fd:
a1:00:48:39:4f:ea:98:d6:05:ff:c9:d8:8c:db:97:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:F5:AA:A3:40:91:54:C1:59:8B:E5:AD:32:6B:9C:22:BC:54:69
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:8b:95:38:a9:77:bc:02:9d:95:61:eb:0d:c4:88:7d:45:
ab:17:d7:eb:9a:11:35:77:28:54:ea:bb:4f:9b:c0:1c:98:8e:
a1:bf:21:f7:49:58:6f:6c:13:b9:24:3d:8c:39:7a:5d:13:8b:
41:3e:e7:5b:e7:ca:9e:b7:25:40:a0:c7:5e:2f:fd:58:9b:74:
50:c3:c3:5d:b7:97:eb:0d:55:4b:79:50:96:c8:bc:3c:2b:dd:
b6:84:28:d8:c6:64:d8:c1:54:7e:3f:3b:3a:a2:f4:f9:91:2b:
58:16:ac:1b:45:00:cb:ee:be:50:68:d2:a8:a3:1e:f0:85:9c:
63:31:24:2c:84:d5:69:58:71:5d:52:45:b3:fb:1c:56:ea:92:
f8:a3:49:6b:75:e2:3b:1b:a9:95:2d:0c:47:4d:99:38:1d:47:
99:be:cc:17:80:ff:fd:29:10:7e:fa:a9:a5:92:ef:4b:f6:6c:
a9:c8:b3:5f:fe:a3:bd:cc:dd:04:3f:59:c4:c6:11:93:0e:f4:
91:db:61:09:86:cd:54:e6:3b:30:d3:64:4a:80:85:3e:15:05:
c7:ab:d0:41:26:a7:51:2e:21:6f:c8:b5:4c:6d:d2:de:db:58:
a2:73:7d:0e:1b:8b:1e:90:4c:f1:58:79:e0:16:b6:db:1c:53:
ec:ca:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:35:01 2026 by rpki-client