Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: CDL/wXXJXaxD6Rvw9lClXI+lhBOVgEkigTChlsjQ+EM=
Subject key identifier: 14:65:F0:45:3B:A3:AA:66:31:40:D4:FC:BF:AD:B1:CA:C1:0A:4B:D6
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019CADFE67872F09EDACEC1E9645AF62C69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1347
Signing time: Mon 02 Mar 2026 10:00:56 +0000
Manifest this update: Mon 02 Mar 2026 10:00:56 +0000
Manifest next update: Tue 03 Mar 2026 10:00:56 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: 5MT+oqozT+ArOHNkQk6PM5rDzyvt7h6KRQB9Wp4tr5A=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:67:87:2f:09:ed:ac:ec:1e:96:45:af:62:c6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Mar 2 10:00:56 2026 GMT
Not After : Mar 3 10:00:56 2026 GMT
Subject: CN=1465f0453ba3aa663140d4fcbfadb1cac10a4bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:5a:9d:99:b3:bc:31:2d:ac:09:42:6b:e5:
7e:cd:5a:d7:d5:b7:dc:b2:db:65:f1:4c:f3:24:2a:
e6:61:f6:f3:98:8d:4b:b7:5b:d3:99:ff:12:77:3b:
e5:65:c8:16:bf:f8:12:48:de:e1:34:2b:9b:1a:9b:
fb:a8:6e:35:4c:e4:e8:19:b6:0a:c7:cc:48:73:22:
8a:f9:56:96:e5:21:c0:b3:7f:7e:75:78:de:52:02:
74:40:37:d7:60:6b:f1:fe:f7:e6:6f:57:6e:18:46:
97:ad:a8:ee:36:6b:1d:b7:f2:d0:7a:a3:24:7a:6e:
7e:ce:05:c9:13:2d:5d:31:41:40:f3:df:73:7b:65:
bb:5d:99:b7:d1:0b:46:29:83:f2:93:a5:ff:47:11:
56:5b:4f:79:69:6c:57:d2:19:f8:ff:d2:00:80:75:
96:0a:e7:0d:4c:3f:c7:06:4c:00:dc:77:d6:43:ee:
03:93:27:67:76:83:89:be:f4:cf:d4:5e:2f:88:4c:
93:cf:03:67:20:cf:c1:ee:f1:1a:0f:c6:d4:3b:1c:
46:f5:8f:1c:01:f1:7c:9c:c3:6e:e5:75:98:27:e5:
29:fe:15:35:2a:86:1d:54:04:bf:28:01:49:46:12:
76:71:a3:d3:09:b8:58:77:3b:e6:df:c1:91:34:06:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:F0:45:3B:A3:AA:66:31:40:D4:FC:BF:AD:B1:CA:C1:0A:4B:D6
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:e8:d3:04:3c:bc:70:a5:a5:9d:41:b4:d4:3f:f9:83:11:
15:c0:8d:c3:e9:64:a5:17:61:30:29:a6:26:f2:23:19:c7:1b:
69:89:8f:db:15:65:83:61:76:4b:78:c7:31:43:e2:0d:4f:b1:
33:0f:dd:00:b6:ef:e2:9d:b8:40:8b:58:9f:6e:06:a6:4b:95:
f1:62:db:74:25:4d:e7:86:89:b8:ab:2e:06:46:6f:bd:6b:f3:
f0:16:eb:e9:62:cf:f8:d8:43:00:5c:f0:94:4c:6e:9e:89:ea:
22:ed:5a:f1:42:4a:97:d3:c4:ef:69:cd:81:cf:a8:b2:98:e2:
49:8c:a2:13:08:35:ed:0e:01:ac:b9:54:4f:e2:1e:7f:4f:b9:
0d:68:5d:70:08:f2:50:32:de:87:f1:e9:36:d2:b4:00:a5:83:
d1:c0:07:c3:a5:58:ac:d6:50:18:37:78:f9:1d:96:18:4a:f5:
04:5e:92:13:70:40:bb:b1:49:86:51:31:13:9a:43:53:61:d0:
b1:d4:fd:8b:2b:f6:ff:e6:a9:fd:32:04:3c:d1:ad:59:df:9f:
11:56:09:7d:80:78:e2:22:6b:ca:2d:18:64:d7:94:9c:26:ee:
b8:3a:61:71:ef:86:06:d8:e0:ea:a8:0f:c3:a1:25:46:6d:90:
6d:92:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:11 2026 by rpki-client