Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: KOBKX0sEVQ7GD/43YdJ9CmNzsNNccPcZQy9shRgX6vA=
Subject key identifier: 06:96:43:77:2D:8D:A3:F8:54:D8:92:6F:2D:41:20:3F:6F:65:A7:0B
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019CAAC67E8087D3830909A9A7D10B17ADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: zLC3bCSSiq3rtw+aMqPUIu4TA8ac0oVBzYV7Kbse9BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7e:80:87:d3:83:09:09:a9:a7:d1:0b:17:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=069643772d8da3f854d8926f2d41203f6f65a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:af:68:4b:4a:0f:76:58:38:04:2b:44:87:
ad:7e:f5:e3:25:3a:b0:90:0a:3f:bf:a6:f7:f4:7d:
f9:71:39:11:b1:91:b7:f7:a3:44:36:37:79:78:21:
c3:2d:eb:b1:86:30:50:5e:7b:30:8b:d6:56:f2:09:
aa:9a:47:7a:18:be:6e:c0:b5:d9:97:8d:de:0d:a7:
ba:9d:f6:ee:82:ae:94:23:5e:0f:4b:f4:e2:12:25:
b1:d1:7c:e8:e1:c6:26:5c:6a:7b:94:6d:87:5d:07:
5a:3b:50:19:26:7c:68:4f:1e:76:60:3b:3d:34:d1:
80:2f:af:fa:99:c4:84:66:8c:6a:74:21:02:dd:b4:
89:81:fb:81:d0:42:3b:5d:a7:ea:ee:0e:45:54:57:
24:bb:0e:c4:4f:50:d5:fc:c5:52:a4:09:a4:27:8d:
66:35:d9:32:16:fe:2b:cb:9d:0d:b6:af:a6:67:97:
8a:17:08:9c:46:b5:5a:a4:37:5f:e1:91:73:91:15:
3f:21:63:bb:9e:a2:04:8c:9f:17:f4:3f:f9:fd:83:
af:d5:e7:0e:f4:31:5d:66:0f:51:b3:55:ea:1c:92:
a8:aa:5a:14:66:7a:a8:36:d7:77:77:e0:28:c0:57:
ea:9e:f6:82:c0:14:35:8c:ef:4f:ed:19:4d:01:b7:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:96:43:77:2D:8D:A3:F8:54:D8:92:6F:2D:41:20:3F:6F:65:A7:0B
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d5:3e:7e:23:86:ae:34:97:50:77:f2:27:09:07:66:a6:47:
bb:b6:7e:6a:b8:b3:5e:cc:ae:0b:02:02:41:2a:65:38:de:1a:
43:7b:14:77:55:a4:46:e3:61:33:da:53:b8:3d:34:b0:03:63:
e9:8b:28:6a:a5:94:3c:c9:f6:dd:93:2a:97:48:76:cc:fe:16:
9a:d4:4c:a1:a6:4e:de:84:10:92:37:fb:53:23:ea:4a:a4:5f:
db:1b:c6:36:96:0e:8d:0b:50:5e:44:d1:9e:a9:98:98:a5:a2:
e3:0f:c5:01:69:f7:3c:b2:e6:02:98:c0:21:90:8c:ac:b5:00:
7f:14:c9:ed:15:12:9d:3b:b0:7f:47:c7:79:7a:f2:d2:c6:77:
f3:bf:3d:f9:7c:a4:ca:73:5b:bd:90:81:7b:40:03:75:d4:6c:
b4:ec:61:84:d1:59:2c:a5:17:fc:b7:df:b0:68:7e:10:a7:9b:
96:00:f0:bc:ff:b3:a8:f8:29:cc:16:11:ba:10:88:ce:97:78:
4d:3b:b7:4b:7e:61:f6:b1:e0:1a:fe:81:12:8f:71:38:23:2a:
d1:ac:7e:bd:b9:e8:76:42:c8:56:df:38:49:2c:43:ab:29:d8:
bd:48:48:ab:32:47:03:f9:dc:c7:b4:50:40:e7:1b:92:a3:bd:
35:cf:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:21 2026 by rpki-client