Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: 0/yDEFKwCfE5MaWY3B3XqM8tvG9rbtSVo7jwa4JMTHY=
Subject key identifier: 20:E4:1F:60:91:04:6C:80:72:CD:85:9C:87:63:DF:B9:1A:C8:6A:03
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019D9B87BC0EA2DF2A0269AD112B538D84B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 11F0
Signing time: Fri 17 Apr 2026 13:00:57 +0000
Manifest this update: Fri 17 Apr 2026 13:00:57 +0000
Manifest next update: Sat 18 Apr 2026 13:00:57 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: 7HusQcS7Ej2+368M5HknqeKNd+djVXZlnayl/Af2R+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:bc:0e:a2:df:2a:02:69:ad:11:2b:53:8d:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Apr 17 13:00:57 2026 GMT
Not After : Apr 18 13:00:57 2026 GMT
Subject: CN=20e41f6091046c8072cd859c8763dfb91ac86a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:7e:75:4e:0c:8a:65:69:6e:5f:33:ba:ee:
cb:c0:88:1c:f7:60:9e:cd:8d:cf:aa:21:31:87:a5:
bb:c6:a9:e9:b8:e1:89:f5:14:4c:3a:94:9c:ee:f8:
8f:7d:ee:75:4d:69:8e:28:ef:46:62:6c:ec:8f:51:
dc:2b:c5:8b:5c:99:cf:48:62:dc:92:61:78:b8:f3:
7c:3c:b2:dc:97:12:ba:71:12:e9:c9:e4:e1:96:bd:
78:02:e8:e3:1b:cf:31:c4:a6:a7:5d:f6:c1:75:bf:
6d:5e:79:98:97:81:0e:c4:02:19:f4:b1:59:d6:ba:
b0:cb:2e:eb:5d:ce:bd:a2:3e:69:4e:ff:7e:52:94:
4e:7b:68:5c:3c:a8:4b:f9:24:61:94:97:5d:75:17:
14:3a:87:62:9d:9c:d4:4b:67:8a:ee:05:a5:70:4c:
49:ff:57:9f:a3:5b:b3:2d:c3:b2:3f:d2:9c:3b:e4:
df:1c:e0:64:a6:4f:7f:e0:1e:b1:1a:fd:ff:b8:ae:
52:b4:fb:d5:62:51:78:54:13:97:e4:b5:a5:1e:c0:
3d:fe:d9:a1:db:a9:35:a9:47:73:55:de:3c:e7:03:
1d:06:06:bd:8b:0c:80:52:78:bd:39:9f:b8:47:9f:
61:a1:e0:26:f7:b6:6d:5a:05:01:16:bd:9b:a5:53:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:1F:60:91:04:6C:80:72:CD:85:9C:87:63:DF:B9:1A:C8:6A:03
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:6f:60:ce:75:9f:c5:72:d1:36:0a:b8:d6:1b:c4:7f:3e:
65:a0:21:92:fe:22:da:5d:f9:74:22:13:e8:33:24:cc:e7:a6:
39:b4:c7:dd:6b:f4:c5:1c:d0:43:de:6d:ea:58:0f:e0:d5:9a:
66:f8:06:44:8d:8f:fb:b5:4a:f5:98:af:8c:19:6f:fb:9e:04:
8f:66:c8:3c:a3:1d:91:31:2e:93:2c:d4:dd:e5:ca:aa:93:20:
2d:d0:09:6a:86:fc:00:ae:4b:55:54:fc:4f:f5:43:78:8e:4e:
05:40:c5:84:a8:27:77:2e:a8:2f:12:74:56:d9:17:84:96:cb:
ea:cf:5c:c8:23:66:6e:7d:80:15:0b:f7:19:3c:2c:6a:bd:5e:
c7:3d:1b:ca:56:43:0b:31:d2:ad:d0:a0:66:0c:b3:c2:8c:93:
57:d0:07:7d:13:48:47:f7:6c:ea:b7:2f:9e:41:f5:b5:1f:00:
11:bd:30:71:a7:0a:c9:a8:fe:dd:08:65:e8:37:95:83:d6:5d:
d6:72:50:ce:23:35:0c:c1:23:61:ef:b3:b5:54:c3:2e:73:da:
a8:88:fc:9e:e5:47:61:a4:b7:67:f6:46:58:b6:fe:e6:27:63:
a8:eb:1e:b9:b9:cd:71:b5:73:1c:ea:1e:4b:24:7a:48:0c:b4:
c5:28:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:44 2026 by rpki-client