Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: P3+FQku75JBn8zbT+qGss8rI2QS4JJUA7Kd/UvFa930=
Subject key identifier: F7:E9:D1:25:BC:2B:33:76:0C:D3:7F:E8:DD:C6:99:E6:61:38:13:B0
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019FADBF7620B6052448B6D395A383E9115F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 188B
Signing time: Wed 29 Jul 2026 12:00:33 +0000
Manifest this update: Wed 29 Jul 2026 12:00:33 +0000
Manifest next update: Thu 30 Jul 2026 12:00:33 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: hltNOLJ/hox3IknGdY6Qnj8NnbYZJi0d2hbZ6qANFww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:76:20:b6:05:24:48:b6:d3:95:a3:83:e9:11:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Jul 29 12:00:33 2026 GMT
Not After : Jul 30 12:00:33 2026 GMT
Subject: CN=f7e9d125bc2b33760cd37fe8ddc699e6613813b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:66:ab:02:6f:8b:a0:10:48:23:e3:de:e6:
0c:0d:f8:61:70:f6:bf:df:b7:00:66:48:1d:21:0c:
66:ad:1c:b1:a1:db:07:61:a3:9e:82:0e:fc:52:d0:
7c:0c:78:a1:a3:e6:24:2e:e8:35:25:26:ba:38:cf:
d5:1e:57:ed:b4:a1:c5:19:c5:90:a0:4a:a5:a3:55:
8d:69:57:22:9c:cd:86:b0:67:a7:f4:f6:02:18:11:
a6:d8:41:79:b3:4c:92:40:ab:c4:31:cc:22:4f:01:
47:97:60:d0:fd:95:ba:95:c6:10:a6:f6:05:f3:fa:
00:2a:f6:6a:f0:30:74:56:df:ea:c7:e4:4d:4f:57:
d2:ee:71:de:33:b9:db:92:17:fa:e7:3c:33:f2:6f:
93:f1:04:4e:ae:2f:be:d1:6a:c1:24:99:ca:3a:5a:
a4:9d:d6:4b:6c:b9:bd:d3:d5:d2:78:a5:c1:d2:47:
99:88:52:84:ac:8d:be:91:02:0a:b3:90:f0:51:68:
30:26:88:c1:fb:ec:f1:21:cf:31:a6:75:02:20:ac:
16:a0:02:67:75:e6:1e:f5:30:27:4f:64:00:30:e5:
ff:bf:ee:aa:51:de:c5:d7:9c:f7:0e:e0:51:97:b2:
ef:f1:52:a2:0b:ec:b7:df:b2:fd:39:1e:91:d7:ba:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:D1:25:BC:2B:33:76:0C:D3:7F:E8:DD:C6:99:E6:61:38:13:B0
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:19:a0:71:1e:c2:d8:5e:c9:22:f3:29:5e:92:8c:76:c7:
75:8e:bf:d9:92:d8:a2:26:0d:dc:5f:31:7c:1c:9a:dd:9a:f3:
f2:e5:3c:6b:8f:27:13:a5:77:a2:b6:0c:ef:07:9e:7a:37:1f:
23:bd:e0:27:b8:4e:f0:d1:35:45:fd:70:4b:92:42:f5:3d:7a:
63:44:fe:97:52:00:40:dd:6d:f9:52:a0:dd:e8:a1:d0:bd:b9:
8e:af:8d:a9:67:73:13:7b:d6:fe:87:88:77:bc:c8:88:64:44:
e1:e2:bf:92:c2:d5:e3:e6:99:c0:51:68:63:e0:6f:70:f9:fa:
ce:e0:13:41:dc:33:c3:57:88:58:95:ba:c4:4f:e7:5b:b0:9b:
b7:d2:06:e1:49:8f:13:76:d3:5e:e5:ce:0c:58:d8:92:d6:57:
b6:83:98:5a:c4:ed:6a:39:65:38:74:fb:6f:a5:9b:f0:0f:53:
dd:9e:5d:ba:66:35:bd:71:55:24:fc:c8:7c:78:23:35:cd:0b:
07:40:32:c0:72:77:58:a7:8e:73:f2:40:ee:b2:20:02:d5:1e:
50:c0:a7:2e:32:ac:79:71:28:ab:6a:9b:d7:6d:08:9d:25:53:
41:af:40:c3:6f:81:f3:87:f0:01:65:42:ab:9f:a0:0b:12:6c:
9d:88:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:56:04 2026 by rpki-client