Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: UVXzUINrndoB3oADu8pMDmpFfCL21DeD5Jw3xl5wToQ=
Subject key identifier: D2:08:C8:58:CF:5B:D2:CE:C2:54:75:C9:26:27:41:2D:DD:13:B1:3E
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019CADFE77C5F0A63AFFBD8294BEE170152B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 1175
Signing time: Mon 02 Mar 2026 10:01:00 +0000
Manifest this update: Mon 02 Mar 2026 10:01:00 +0000
Manifest next update: Tue 03 Mar 2026 10:01:00 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: SohP+/poVy0645etaMwvntAe07XeTmGzUoGioYju3xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:77:c5:f0:a6:3a:ff:bd:82:94:be:e1:70:15:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Mar 2 10:01:00 2026 GMT
Not After : Mar 3 10:01:00 2026 GMT
Subject: CN=d208c858cf5bd2cec25475c92627412ddd13b13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:eb:c0:23:4f:2f:6a:a0:16:90:73:39:81:
09:5d:3e:3a:27:de:d8:04:52:2e:ad:b6:16:60:07:
75:22:6c:fe:c2:26:e8:73:4f:d2:23:74:98:55:7c:
c2:ce:f1:ab:bc:fa:66:41:52:9b:83:db:5d:ee:7f:
58:14:ba:1e:ad:3a:98:ec:ef:f2:7e:ec:e1:84:8f:
f1:4a:b9:50:57:90:57:e7:f8:a8:3b:e4:65:ef:ae:
a6:f1:da:34:85:1e:dd:3d:e0:c4:4c:03:ed:7b:56:
d3:9d:0a:fd:d6:0d:42:a3:d5:ac:81:a3:67:e7:d4:
fa:31:81:e2:62:04:e5:ec:b2:26:09:e8:fd:6b:40:
18:0c:3d:44:23:39:62:53:0c:aa:43:1b:2b:25:91:
d0:5a:71:8c:3e:03:e4:48:10:fa:ad:70:17:f8:4f:
96:71:42:22:63:06:f7:9c:3e:e4:50:b0:74:a8:1c:
06:56:d5:47:de:e4:b5:72:ed:7f:8d:83:07:b8:75:
48:52:4f:66:10:42:b2:3a:f1:e3:33:c2:f9:b9:c8:
3a:ba:5e:8a:6f:b6:2a:39:a9:0d:6d:37:62:67:f1:
c2:40:bc:3a:81:f4:02:74:55:cc:7d:ad:ee:1a:e0:
a9:7b:7f:47:70:ef:ad:e3:6f:b1:21:e3:30:a5:57:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:C8:58:CF:5B:D2:CE:C2:54:75:C9:26:27:41:2D:DD:13:B1:3E
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:83:4e:a3:b6:67:18:64:7b:9a:57:29:7e:25:01:33:97:44:
c2:cd:a4:af:2a:ea:45:76:36:87:86:80:ac:b6:28:24:91:4b:
ad:5d:f8:38:cf:12:b6:f0:ba:24:cc:a5:17:6f:7d:7f:36:70:
6e:b6:65:89:e2:22:78:86:81:10:d0:ce:91:51:69:55:3a:52:
1e:5b:68:f6:88:29:b9:54:2c:6f:a6:58:af:6a:8c:e1:b7:0f:
e1:d8:79:02:fc:b0:1e:eb:6b:cf:c8:27:d1:d4:dd:e5:32:d7:
89:76:ae:ec:12:46:60:2d:6d:40:97:72:68:06:63:76:a4:c5:
4a:17:46:89:34:db:d8:53:b3:8b:65:d5:2e:d2:c6:c6:4d:ae:
43:68:18:23:68:57:d1:82:05:48:65:4f:38:dc:d2:93:7b:e8:
54:35:17:b4:b6:1a:65:4d:3c:08:f6:d6:6b:4f:50:6c:91:a2:
a5:7b:bb:39:5e:0f:5d:c2:2c:cc:14:77:0b:42:f3:11:36:d4:
85:70:cc:33:b3:80:09:f7:09:56:4d:55:3b:24:f0:ff:d8:d3:
dd:a5:32:03:fc:88:59:89:a5:25:64:62:c5:c6:2c:bd:fb:4b:
30:7b:4a:42:c1:74:9b:62:c4:c1:36:11:ea:8b:28:e4:e5:e9:
3b:40:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:59 2026 by rpki-client