Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: KHYn2xXc+EnMHp5ZcJ+7/rVlFP8uLVVIs3psMWFRbgU=
Subject key identifier: A5:12:2A:78:81:EA:F3:D6:28:2D:F9:05:04:02:74:F3:6D:24:65:88
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 019CABD98E3369586AE3E7C4522B1BF63321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1841
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: RQWaBdeY1nJWZdtcXTxt5EPedA8CyjkH0EY2bTnhEtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8e:33:69:58:6a:e3:e7:c4:52:2b:1b:f6:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=a5122a7881eaf3d6282df905040274f36d246588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:5b:11:ed:76:3f:4d:7d:c5:33:0f:81:b3:
83:18:63:93:f5:22:52:ca:6d:30:b9:b6:40:ea:00:
42:92:d0:97:2b:ca:d4:5a:b0:6f:ee:dd:66:4b:a5:
ac:36:6e:ce:e5:c8:4f:15:65:74:1f:f2:fe:19:e9:
87:0b:94:41:ce:86:d3:1b:df:39:6b:25:c7:75:d8:
ce:d5:50:97:b7:11:18:d9:f8:b4:fd:ec:24:76:04:
1d:be:2f:67:60:e4:8b:15:af:a9:fb:ec:b5:9c:cc:
aa:db:dd:1f:59:1f:28:f7:79:55:11:85:94:80:1c:
90:b7:75:12:79:fd:91:e1:6e:f9:04:47:08:44:23:
67:7d:ba:78:c6:84:7b:67:74:f8:6a:3f:f1:d3:d7:
ca:26:14:71:6a:4b:f5:ad:b5:ca:66:30:fc:02:d3:
c0:cc:99:d7:fe:08:c0:59:89:5e:f1:df:1d:88:b7:
6e:ac:0a:be:79:38:28:cf:c4:fe:41:b1:a3:2b:ea:
e3:27:c1:26:f0:11:6a:c9:4e:e3:a5:29:c8:cf:31:
d4:db:48:65:45:06:9c:b6:4e:e8:ad:8b:1d:b3:35:
ac:22:aa:0d:de:7e:52:a9:65:74:cb:c3:71:bc:32:
ba:10:16:cd:83:d3:6c:6c:f6:02:46:66:22:93:52:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:2A:78:81:EA:F3:D6:28:2D:F9:05:04:02:74:F3:6D:24:65:88
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1d:72:e9:1c:ec:f2:5c:29:58:65:a3:eb:1b:9d:d9:dd:69:
0a:6f:ca:c2:24:0d:d6:d5:ce:b2:91:7e:15:9b:5b:e4:26:19:
b4:db:4a:53:52:85:1f:8a:e7:39:2c:05:e0:76:15:ee:59:3d:
93:46:44:f6:75:5a:3d:03:c5:5a:5e:d2:42:bd:1c:3d:b0:4c:
76:93:62:46:77:42:1d:d7:05:03:bb:f5:9e:3c:1f:1c:53:ee:
01:c3:2d:bd:7f:83:39:ed:8f:f7:70:7f:f3:03:21:f4:f0:00:
da:b0:83:97:7c:47:d7:14:47:87:89:49:fe:d2:89:89:30:5a:
8f:77:8e:ee:c9:5e:5a:33:0a:21:a3:26:b2:a4:e5:8b:fe:f3:
ae:63:d5:25:3f:aa:0d:c3:4b:74:a1:ef:d5:12:93:ae:9b:9f:
dd:91:1f:37:f8:9f:ee:d6:ff:ff:df:df:ec:d1:3e:b1:d5:95:
1a:81:de:33:6c:57:63:fd:86:a8:23:11:2b:5e:40:41:b2:27:
9d:79:47:0c:b4:4b:1c:4c:cb:b0:f9:b7:8f:68:63:c9:8c:77:
3b:b3:8a:4b:25:b9:7f:f9:b9:cf:26:c9:c3:7f:de:63:4f:fa:
33:c6:5f:6a:1a:08:95:c8:26:58:39:42:f4:a7:c7:27:cd:00:
14:25:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:57 2026 by rpki-client