
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: cub+Is4wo5NpTpsxrKTgxNWxbRd0mvYo7AJ3Xzkpx30=
Subject key identifier: 01:C7:80:8C:0A:E4:A4:DF:CD:A0:1B:87:EC:65:15:F6:4F:7F:0A:28
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 01A0C88FBCE6F982FDDB67B3B5B60C6CEBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1567
Signing time: Tue 22 Sep 2026 10:00:58 +0000
Manifest this update: Tue 22 Sep 2026 10:00:58 +0000
Manifest next update: Wed 23 Sep 2026 10:00:58 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: JsQ8VL3fO+jM/rKB/CuGAdjrJVWlvmDv54hiVrN3kUI=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:bc:e6:f9:82:fd:db:67:b3:b5:b6:0c:6c:eb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Sep 22 10:00:58 2026 GMT
Not After : Sep 23 10:00:58 2026 GMT
Subject: CN=01c7808c0ae4a4dfcda01b87ec6515f64f7f0a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:62:03:fb:c6:eb:be:2c:74:bc:75:40:81:
aa:8c:62:06:ed:b2:96:f0:df:fe:75:11:51:4e:29:
7f:a2:45:c7:a4:2e:50:04:ce:0f:ab:e2:de:7b:24:
c5:a9:da:b8:13:3f:32:df:5e:e1:40:27:7a:01:fa:
56:e1:3a:7b:2f:1a:7c:a4:a8:67:7c:b2:b7:56:07:
4b:09:12:bf:04:22:8c:7d:7c:c5:11:02:3f:48:c5:
0d:93:56:93:1a:25:39:50:d7:2a:34:5f:fd:47:20:
24:31:6e:6c:39:2e:8b:d2:2c:3d:b8:66:02:fb:58:
91:6b:10:ff:3c:e6:cb:b1:21:4c:67:e7:30:98:4b:
83:d1:10:c5:b2:2e:e3:de:f8:92:cb:78:1e:f1:43:
dd:3a:26:7c:a4:3d:9c:1c:c1:b9:4d:4f:4f:79:b2:
f1:64:39:51:01:dc:a4:9d:90:8c:0f:0c:fd:20:7a:
ea:31:cd:2d:eb:14:cb:9f:59:4f:be:4a:8c:61:2c:
98:8a:69:75:58:80:12:16:c1:46:fe:35:2c:a9:b5:
0c:9f:8d:3a:0a:44:e2:46:63:7e:f1:32:a2:f6:09:
35:72:14:18:3a:96:1c:85:7c:3d:8f:4c:4c:67:71:
dc:ea:87:23:95:a8:cb:f0:a7:8e:ab:1b:01:c1:48:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:80:8C:0A:E4:A4:DF:CD:A0:1B:87:EC:65:15:F6:4F:7F:0A:28
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ce:b6:dc:21:d0:3f:1d:82:87:12:b9:30:6d:64:f0:e0:0b:
ba:34:8b:fe:3f:1f:84:d3:61:7b:e6:75:f8:84:2a:ad:31:cc:
90:31:05:dc:53:f7:8d:b0:e0:31:cc:b1:52:9e:1f:30:d5:49:
a2:49:98:e3:47:57:9f:20:4e:41:c6:0d:22:91:45:40:cc:5a:
d1:b4:c9:ad:73:46:13:7a:3a:15:37:61:3f:b0:fc:41:40:67:
6c:88:f7:c4:6c:ec:76:54:8a:4f:4a:78:bf:8c:77:52:11:43:
d7:c1:83:3d:e4:ef:23:59:17:57:09:ef:ad:34:5a:39:6a:b3:
9d:08:9e:4a:8d:10:9a:db:46:9f:dd:52:2b:75:25:ee:22:43:
f1:a9:7a:32:7f:1b:6d:08:19:12:93:0f:24:ae:ce:07:ca:fd:
33:9d:be:dd:5a:32:8a:6d:29:32:aa:6c:21:8f:75:c6:43:25:
a1:40:6c:ca:c4:9c:ed:d7:4f:04:90:7c:b2:d8:b3:80:5b:44:
58:d3:d5:ca:d8:bc:88:6b:91:8e:67:1e:e3:01:e4:bc:3a:8f:
ab:1a:11:88:d9:48:bc:64:36:b7:ff:de:5d:0e:8b:f5:9d:72:
da:aa:e3:22:e3:3d:ac:f1:82:f0:f0:be:c1:3f:e9:a5:b8:29:
32:ee:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:33:19 2026 by rpki-client