
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File: nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier: 3opl40ZuJzZTDYmH74F7bt8KfqorlSmLlAvGRedrQ3A=
Subject key identifier: 63:2B:1E:AD:D9:52:6B:2D:D3:79:B7:69:21:7D:DB:76:72:CA:67:E5
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer: /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial: 019CAD597074116A8294B0BBAB9EDF585662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: vRshzFpUuEhDUutGD+f22ZjBJTblbN84xmFn0MxyKqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:70:74:11:6a:82:94:b0:bb:ab:9e:df:58:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=632b1eadd9526b2dd379b769217ddb7672ca67e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:ff:e7:65:af:1c:2e:06:a6:b1:5e:2e:6c:
36:9e:a0:6d:03:4e:16:21:af:a5:03:fe:a0:37:41:
fd:6f:4a:0b:9f:96:14:74:4d:ef:2e:6d:15:52:79:
69:8a:d2:8b:67:a3:e9:b2:51:e1:f8:da:f7:65:f7:
07:a8:4c:0c:50:26:01:7c:ad:53:9d:eb:d7:a3:b9:
90:42:b1:61:dd:db:91:f9:4b:f6:d6:d2:00:b7:c7:
d4:37:55:b6:fe:b0:e7:9d:c5:58:f1:09:57:be:0f:
2e:5c:fd:96:b5:4a:61:7b:1a:f8:ba:b5:b0:db:c9:
cd:7f:a9:14:3a:6d:fe:55:80:3b:59:63:ca:e1:ec:
c0:a2:6f:fd:f2:4f:99:1f:f2:ee:76:1a:37:70:7b:
b7:3d:b2:6a:5a:be:1a:3a:b4:e8:89:4a:d8:b0:f8:
cb:c4:c0:ea:9e:58:1b:74:53:3a:3f:55:8a:4d:f0:
7e:38:ee:d0:3e:fb:0b:96:e1:4f:92:5d:61:bd:c7:
0f:7e:9c:03:bb:a7:6c:76:07:17:6d:9f:9b:78:81:
a8:c9:8b:f4:53:62:6d:1c:0b:d8:57:88:4b:ef:ea:
8b:0c:13:aa:fa:e9:1b:43:88:9f:fe:8e:f7:99:d0:
fc:7e:dd:60:cc:b1:fd:71:8c:6e:29:09:25:35:5c:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:1E:AD:D9:52:6B:2D:D3:79:B7:69:21:7D:DB:76:72:CA:67:E5
X509v3 Authority Key Identifier:
keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fa:cc:6d:8d:0a:a7:99:16:84:ed:22:a3:ef:1e:fd:0a:cb:
3c:7b:57:f9:6f:c9:8b:f8:1c:f4:68:0d:51:e2:21:9a:7e:ae:
ff:c7:3b:34:d8:9f:fe:78:71:04:6f:94:0b:30:95:98:ca:60:
bb:0c:b8:90:3d:d5:ec:24:db:3f:c7:4e:f0:22:b7:36:88:f1:
5a:16:99:e4:cb:64:7c:30:b9:59:51:ef:ab:a3:b3:94:32:00:
a8:f1:a4:7d:62:71:5b:83:af:04:60:85:6c:ec:86:da:f2:93:
8a:2a:89:03:28:c2:85:86:98:05:cf:24:df:9e:8a:72:2b:8c:
2d:de:ae:cb:c6:d4:a9:f0:e3:4c:85:51:fa:c2:cb:d2:04:0e:
b8:ee:95:e2:d6:ee:c1:c4:a6:7e:44:61:91:8b:92:d4:5a:7e:
72:e1:c2:13:9c:f1:c8:81:af:28:58:30:1f:1d:6e:29:98:d1:
37:fb:ef:ee:84:02:fc:43:03:25:be:4e:fd:46:e4:80:5f:9d:
55:0f:97:01:fd:ed:b5:9b:1b:d7:2d:78:07:b5:b5:ba:28:db:
44:f2:ba:e2:52:52:5b:ee:a1:64:d5:39:85:ae:20:07:22:6b:
91:56:bd:c1:eb:68:ec:7c:fb:22:e4:d3:27:15:f7:dc:59:19:
55:3c:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:11 2026 by rpki-client