Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: C41zrWrdy5G4e+Dsn352xhD52zQCjRU2HSzPUw4PJBw=
Subject key identifier: 98:A2:60:D3:E9:90:63:D4:5C:F2:8B:1F:8E:93:E0:B1:A3:17:88:F5
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019EBF9132038747F912A99ECED6EC174BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 06:00:24 +0000
Manifest this update: Sat 13 Jun 2026 06:00:24 +0000
Manifest next update: Sun 14 Jun 2026 06:00:24 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: 2PeqGIZIVw5lDeEpb9i2vBWNcF0hcWexyz8Wq6IbJ8c=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:32:03:87:47:f9:12:a9:9e:ce:d6:ec:17:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jun 13 06:00:24 2026 GMT
Not After : Jun 14 06:00:24 2026 GMT
Subject: CN=98a260d3e99063d45cf28b1f8e93e0b1a31788f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:a5:9d:9a:20:47:db:8e:ec:d9:fa:30:8d:
7e:aa:cf:d2:1b:31:eb:4e:81:9f:a7:2f:3e:24:ee:
5b:95:cd:87:e9:e8:e7:fa:68:9c:a4:c0:19:1b:34:
3a:e8:f7:be:65:1d:14:56:4a:10:9b:06:bb:ef:b7:
96:6e:95:b3:0f:d8:56:b9:a3:e6:a2:47:9e:d3:cc:
18:fa:ce:be:70:6a:70:65:e1:4a:b4:b0:fb:2d:fa:
9f:f1:57:f4:88:1c:70:a5:02:25:3f:f9:53:46:be:
6f:d1:37:74:e6:e8:78:df:9a:74:88:4d:a4:a4:55:
07:53:92:ea:e9:bc:ab:a8:53:27:d3:5f:09:1d:74:
70:99:e1:77:65:68:42:0d:ad:67:5b:82:bc:6a:fa:
e3:58:9c:a8:bd:21:d4:43:4b:60:32:79:d7:0c:3e:
3b:03:be:61:f7:dd:4c:db:bb:bc:c2:7c:24:c3:ce:
d3:14:d0:dc:ae:5f:73:b0:81:89:8e:9b:8d:93:91:
2f:27:7f:6c:31:c3:9e:c4:85:ed:6c:54:56:cd:36:
60:30:8e:bc:c4:72:cf:cc:fd:03:03:82:91:e0:d4:
2d:ab:4e:a4:74:2e:5c:9c:43:93:3e:96:1a:70:21:
25:3e:90:3d:88:44:32:99:99:4c:cd:43:6b:cc:7a:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:60:D3:E9:90:63:D4:5C:F2:8B:1F:8E:93:E0:B1:A3:17:88:F5
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:28:78:76:09:43:6d:f8:9b:d7:59:0b:c1:5d:de:a6:cb:
ae:39:90:7b:b0:4a:0a:78:09:db:a9:75:61:72:91:ac:13:99:
da:36:15:a1:87:d7:1d:2e:41:26:b1:63:10:0f:f9:f8:77:37:
55:72:e7:0f:03:af:3f:37:e9:d1:69:6e:21:8a:61:8a:00:63:
3c:53:20:bb:a2:c7:ea:2f:76:01:b5:53:79:9e:79:65:67:cd:
60:b1:f4:2e:cc:87:5d:25:2e:d9:c7:57:a8:ef:45:0d:95:f8:
2e:f1:82:37:c5:cb:57:72:db:b5:46:17:d4:d0:d8:8b:b7:e3:
47:2a:0f:19:d2:39:35:36:33:b6:75:44:07:57:f4:32:de:51:
84:2e:03:97:1a:cf:32:15:e7:73:f9:66:74:62:24:11:53:2d:
5d:5f:ce:8d:d8:b0:e7:0c:32:5d:db:b1:6d:65:19:e2:3e:98:
9a:1f:03:3b:4c:a4:7c:4e:d5:1a:cd:e8:b5:ec:07:67:96:2b:
0b:bc:1c:cf:2d:c5:11:d3:46:ad:4a:3f:9b:25:42:8e:0c:cc:
bf:46:2f:73:8e:5a:83:f1:00:a1:61:cb:24:23:c5:0d:f1:64:
d3:9f:d0:d1:3f:f2:9c:e8:8b:42:bf:f0:c2:d1:a4:04:c8:e8:
c5:0f:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:46 2026 by rpki-client