Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: g8ofQ9bA3llFDv4DT69HkxBLA2Yy5DFEG11okJwjWfw=
Subject key identifier: 85:DB:C8:CE:22:85:8B:E9:18:A6:66:AC:EC:E9:9C:CF:30:7B:DD:FC
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019D99992CFBF0765D01DDF902A855BF1299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 13C1
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: tAEQAWXhnNLfPwVXxgPR1FFiaUVNFwD0490Tpz63pKo=)
2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2c:fb:f0:76:5d:01:dd:f9:02:a8:55:bf:12:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=85dbc8ce22858be918a666acece99ccf307bddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:75:f7:3a:c6:89:86:22:fe:e4:b7:21:98:
aa:f2:0b:27:f9:49:ac:14:cc:75:70:87:b1:c6:2a:
5b:b3:20:dc:4f:4a:ff:9c:59:e8:4d:a7:ff:bf:74:
2e:95:30:12:b7:9f:18:8d:42:65:91:22:00:00:df:
17:cc:17:2c:9d:6c:f8:7f:56:6a:3d:13:56:ea:c9:
43:e1:0a:f4:96:50:e2:67:11:e0:48:b1:7b:52:af:
bb:2b:f5:51:14:04:84:04:52:e2:3a:36:a2:32:14:
ec:62:6a:cc:1d:62:bc:d1:2a:13:c1:fe:91:ec:8b:
04:09:ab:1d:3b:2e:f8:42:93:41:61:ff:ee:78:15:
a2:16:76:10:5b:78:e3:ca:71:19:a7:fa:a7:04:c0:
53:66:80:c3:33:ba:ec:a0:96:52:47:f5:36:73:05:
10:a6:60:71:53:69:b6:48:08:3f:74:bd:6f:d6:20:
ff:d2:32:17:aa:3e:40:5d:dc:8b:59:5e:9b:6f:1a:
01:bf:76:2a:cb:df:bd:49:28:10:85:5f:17:50:6c:
31:76:79:b9:c3:06:19:59:52:41:68:7b:85:d8:fc:
a4:c6:49:b3:8c:1f:63:8e:be:16:eb:ec:a1:ac:c2:
4b:9d:04:36:2b:10:fe:24:1c:0b:7a:93:9c:12:53:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:C8:CE:22:85:8B:E9:18:A6:66:AC:EC:E9:9C:CF:30:7B:DD:FC
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3a:78:f6:02:13:f5:c9:11:a4:4c:be:67:01:b4:bb:13:87:
8a:85:4d:c2:70:60:a0:e2:9e:46:de:70:58:d3:d9:e9:7c:60:
7e:43:57:18:15:2f:c3:95:0f:76:24:40:69:5e:21:50:dc:a5:
c4:3f:91:21:30:86:2a:3f:46:5d:3c:23:0b:55:90:e2:d2:83:
f6:d5:9d:67:fd:61:2c:47:16:bf:af:37:5f:9a:0d:d1:0f:5e:
39:ec:0f:f8:fa:60:e6:b2:6e:e1:d8:da:76:b6:c0:1a:4d:e6:
12:92:26:3e:3d:cf:b8:de:ce:61:9f:8e:6c:ea:d3:58:7b:84:
15:8a:db:f7:8f:e9:43:f1:ca:94:bf:56:50:95:52:58:d7:6f:
c2:ce:e3:70:e2:46:3a:1e:60:58:b7:41:b8:57:86:1f:5c:83:
87:57:ea:4b:29:a7:46:33:a2:5a:68:57:b5:b7:be:34:97:a6:
57:c6:49:60:6d:cd:42:96:35:28:9c:f3:fb:c2:a9:e6:e4:c0:
84:5d:5f:de:fd:39:3a:59:f0:74:e2:bb:51:06:06:cc:2a:fa:
90:12:f5:ff:13:ec:49:0e:a8:08:4c:ea:e2:86:f2:3d:09:94:
4c:57:73:12:98:e3:2e:2d:0d:e4:52:b7:86:a0:de:10:0c:db:
ae:25:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:40 2026 by rpki-client