Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: 0rKoR5M7iKMyjRwmmfBncAgtcYKCPoF1wQaOWi4ckY8=
Subject key identifier: BE:8F:4E:99:B9:18:DA:9D:E3:3E:85:42:3F:E0:6E:85:FC:2C:F8:8D
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 01A0E8890C962BAF036ABE7057FE33B604EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 192E
Signing time: Mon 28 Sep 2026 15:01:30 +0000
Manifest this update: Mon 28 Sep 2026 15:01:30 +0000
Manifest next update: Tue 29 Sep 2026 15:01:30 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: QXJQLY0UtmaYw4xvHurrN3fNN3HRn8g7ZM5bF3SwFmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:0c:96:2b:af:03:6a:be:70:57:fe:33:b6:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Sep 28 15:01:30 2026 GMT
Not After : Sep 29 15:01:30 2026 GMT
Subject: CN=be8f4e99b918da9de33e85423fe06e85fc2cf88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:ed:da:1b:8f:54:2c:c4:7d:5f:fd:f1:8a:
f4:74:a1:89:ca:57:e5:88:12:4e:8d:a2:a1:b7:a3:
2f:92:e0:60:9f:b7:74:bd:eb:d9:1b:be:68:a7:94:
d5:8d:a1:4f:eb:13:48:9e:f8:30:ce:bd:fd:7b:98:
39:40:dc:5c:c2:21:a0:09:a2:e0:69:c9:86:38:7d:
28:0c:dc:9a:ba:09:12:4b:cd:a7:2a:77:ab:66:cb:
68:43:6d:1d:c0:19:04:cd:90:d6:55:79:a4:1b:e6:
7a:b4:74:25:aa:ca:6a:34:25:54:9a:2e:ea:37:28:
52:2d:d1:c9:a6:6c:ee:c0:60:f6:65:5a:ec:ee:60:
6a:06:07:d6:0c:22:15:07:e4:c1:ca:1b:b3:c6:60:
44:45:46:4f:8d:f3:5c:b1:83:72:10:56:70:90:e2:
d1:24:bb:ff:ba:f4:5d:92:b3:8f:21:2c:50:be:2e:
e7:c2:03:5d:44:be:39:92:2b:3f:92:9a:ee:ea:79:
bc:cf:2c:7b:10:7a:6d:bc:3d:03:07:46:57:f3:bf:
d2:fa:61:31:aa:40:90:b2:00:a0:ef:5c:b2:d8:87:
9c:7f:d8:aa:2e:e0:49:3b:b3:7b:39:f5:8a:fb:20:
ce:35:9a:9f:4a:13:7f:de:ad:4d:3d:1d:23:ce:38:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:4E:99:B9:18:DA:9D:E3:3E:85:42:3F:E0:6E:85:FC:2C:F8:8D
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:59:b5:20:a5:82:d3:31:03:d5:eb:13:b3:af:a0:4c:19:1c:
06:4a:17:2a:a2:95:75:62:9b:75:f7:95:42:f6:0e:d6:be:70:
93:39:51:c9:3d:d5:9c:d7:e6:50:05:bc:bb:7b:10:57:5a:63:
36:09:26:e7:df:28:53:a2:72:1a:58:26:98:9f:c9:93:78:01:
f5:d1:da:6c:cc:ce:91:ce:17:08:be:e6:2e:c0:24:ab:7a:2e:
a4:7b:eb:c9:4e:18:38:bb:b2:bb:bf:0a:ea:20:60:2b:d9:ff:
ff:b0:04:a9:3b:8e:65:81:c4:39:f6:7e:1b:1e:d9:9f:8e:61:
fb:34:ac:a8:84:53:d6:34:02:38:02:50:42:7d:13:7d:4e:84:
5c:29:61:46:8f:28:57:cc:a1:51:0a:c1:bb:fd:d9:62:41:de:
97:85:1a:1c:37:07:4b:86:e1:84:47:4e:8a:3b:21:85:72:28:
98:44:e8:f3:1d:91:e7:5e:ba:82:42:23:26:fc:70:36:50:f0:
ac:03:8e:25:06:78:d8:f9:37:24:3c:58:1e:ad:f0:3c:94:7d:
51:ba:f8:54:5a:5e:eb:02:6d:7f:f0:c1:c8:f4:90:fa:31:a6:
eb:5d:f7:41:f7:44:5d:e7:ed:6b:9c:37:ba:cb:23:d8:1d:be:
f3:6a:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:02:39 2026 by rpki-client