Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json)
Hash identifier: aaurVT7saiGD68atGVvkKZn2FfJOxdkcxs+gGIxr6Wg=
Subject key identifier: AB:C8:2E:96:DA:B8:36:EF:00:9D:7B:57:91:52:A9:16:7B:FB:CA:3E
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 019CAA8F5FEA9F5F37F533BB20AE64A504AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: 3EshPFt8Rg1CIiWA/cK1sYYDD4U336ktRDlMHCdVl5w=)
2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5f:ea:9f:5f:37:f5:33:bb:20:ae:64:a5:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=abc82e96dab836ef009d7b579152a9167bfbca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:fa:03:ab:20:e2:7c:28:26:79:c3:72:cf:
14:64:18:b8:df:d1:dd:16:85:91:fd:65:52:d8:9a:
51:e5:a7:fa:cc:f4:1a:e4:ec:2c:cd:be:b0:cb:42:
a0:54:74:c2:1f:de:b3:0d:d2:34:ba:29:9c:b7:26:
63:55:f1:c8:53:23:55:01:8e:78:0b:82:8f:c9:e0:
ea:6c:12:ff:0a:94:e4:6b:55:a5:3e:6c:25:b5:f7:
64:0e:f9:3c:4b:14:b5:b6:dd:fd:33:0c:ce:4c:8e:
36:db:80:aa:66:a7:cd:5c:c9:26:c8:9f:bd:05:bd:
e5:c0:5e:f5:8a:31:24:a5:32:f3:3b:cc:bc:47:38:
f8:d7:69:18:e3:76:df:a7:65:73:a8:05:03:7e:51:
4d:a6:bb:e7:95:10:32:79:0c:d1:40:9e:b0:4f:53:
d8:da:bb:6c:46:d0:dc:9e:4e:54:7e:07:9e:c1:f2:
52:98:22:9b:28:e4:67:67:a9:04:3f:e0:65:87:17:
db:62:d1:15:e3:fe:7d:a9:d0:74:92:ee:75:a3:72:
2b:f0:1d:41:85:94:8a:97:91:e8:cc:47:a5:c1:92:
0e:1d:8c:7b:7c:fd:79:ff:bf:63:02:97:e3:dc:aa:
43:2e:11:1e:b0:73:b9:be:e3:4a:f9:ba:1c:d3:34:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:2E:96:DA:B8:36:EF:00:9D:7B:57:91:52:A9:16:7B:FB:CA:3E
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4d:95:ad:02:7a:4b:63:f9:b9:60:20:fe:14:87:fc:a1:2b:
df:b8:ed:8e:c3:c4:e2:73:64:0f:67:8a:91:13:b8:1e:04:9b:
3d:31:74:fb:ad:71:d8:c5:2b:3c:1e:27:b9:30:ec:58:22:ad:
0d:05:63:06:2e:31:3b:18:59:57:e5:61:72:76:c0:82:b5:fa:
a5:21:f2:a1:09:95:f9:66:be:ae:41:fe:8f:6e:c0:4a:d5:a0:
2d:3c:e8:f9:1c:ea:3e:bd:d4:d9:8e:11:89:bf:8e:66:0b:54:
c9:f9:72:db:82:ac:38:5e:5c:2b:8d:9a:2e:46:7d:59:9d:ad:
ce:95:7d:ae:ab:61:f4:77:5d:a4:67:f8:9d:6d:f2:8a:53:b9:
0c:6c:2e:92:fb:09:93:48:02:70:83:27:32:ca:45:68:d1:e7:
0d:56:02:09:02:2f:41:45:03:b4:4b:d6:cd:d6:c2:bf:27:3c:
1c:e7:91:30:d8:ec:44:96:57:7f:d0:95:c6:f2:38:4e:b5:48:
0c:12:ba:29:a1:7f:75:4e:c8:e4:16:63:08:0c:ed:d4:2a:07:
8c:cf:1f:ed:33:b9:41:3a:4e:a8:b4:1a:5d:bb:14:9f:db:75:
16:bc:25:82:e5:88:37:75:a1:22:dd:53:82:5a:6a:ce:76:7c:
eb:44:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:45 2026 by rpki-client