Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: rc9h3hzS+PXGepkh6FX+5f0Xi+JOPFDoCNCAeypHcHc=
Subject key identifier: 11:7F:8E:6C:61:AA:B4:40:EC:3D:7A:0F:06:D8:0E:60:D1:86:45:81
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 01A0D83C49EC4A220A9A776153DDB2544E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 11:03:44 +0000
Manifest this update: Fri 25 Sep 2026 11:03:44 +0000
Manifest next update: Sat 26 Sep 2026 11:03:44 +0000
Files and hashes: 1: DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa (hash: NPIW3IPajlO+RZm/cg9qqMOdImUpO6F0PwMyYtUpmwo=)
2: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: 2k1Jd+YnG86yaDinPgS1joFJnfRU3igUwhH+3M3C/+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:49:ec:4a:22:0a:9a:77:61:53:dd:b2:54:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Sep 25 11:03:44 2026 GMT
Not After : Sep 26 11:03:44 2026 GMT
Subject: CN=117f8e6c61aab440ec3d7a0f06d80e60d1864581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:a4:ad:81:e1:ba:46:3f:c9:cd:83:b4:48:
86:ed:c6:07:cf:a7:e7:3a:a6:c1:81:61:ea:e1:1c:
f0:a0:0b:a0:68:d2:7d:37:e2:96:d7:3f:57:e6:85:
87:b7:e3:93:9f:7f:11:61:86:30:ab:6f:6c:53:61:
14:84:da:af:44:b9:1a:58:2b:cb:ce:aa:9d:0a:80:
33:1d:7b:b3:87:ba:98:ee:d1:61:28:59:9b:61:7e:
13:96:58:6f:c0:66:26:6b:30:74:ad:8a:2a:e5:57:
c8:35:ad:b8:94:b3:78:2a:df:50:3e:61:88:9b:a8:
36:39:38:d7:3d:65:f4:ac:b5:5a:a7:d1:0b:9b:7f:
8b:33:86:c9:68:6b:af:8a:64:7c:82:00:45:d4:22:
9d:31:99:43:e5:5d:54:ca:d6:95:5b:f3:7e:44:3f:
c3:19:c5:a9:b9:16:c0:8f:ab:3a:39:6d:83:74:f7:
d7:00:69:fa:a0:65:50:12:78:ee:e9:f5:39:4f:4a:
26:e0:f1:97:7f:96:84:5e:70:ed:b2:6f:b9:50:cc:
ae:3a:d6:ab:d1:aa:70:dd:11:37:2d:09:68:c0:65:
b4:01:de:45:98:f6:c0:e8:53:bc:05:76:e5:02:82:
92:13:0e:39:6b:7e:09:74:64:a4:9f:00:2f:92:4f:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7F:8E:6C:61:AA:B4:40:EC:3D:7A:0F:06:D8:0E:60:D1:86:45:81
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b0:db:36:4c:e2:cb:0d:e4:f4:5a:1e:08:72:7a:6c:12:4d:
6a:f4:c8:67:c6:33:78:ad:cf:51:37:8b:ea:f6:0a:a2:0e:ff:
0d:04:93:63:63:65:12:a6:78:7c:26:09:fc:32:c5:6f:ff:07:
2a:7a:39:f1:d1:b0:f9:36:c4:e8:52:24:ab:5d:09:53:6f:72:
f7:5e:f1:83:a4:6c:64:38:7d:ac:46:ab:3a:5d:cb:c5:e0:c1:
40:51:1a:c3:fc:9d:ab:20:80:e4:d8:6d:e0:81:11:7a:ac:7b:
f9:2d:c8:86:72:56:35:4d:91:30:a2:7a:c7:43:8c:50:e5:2a:
2c:bb:2b:6c:e1:97:d0:f9:cd:b9:1f:8e:b4:36:58:fd:f9:b7:
7f:f1:0b:38:6f:02:be:fe:a0:d2:31:46:3e:8f:97:e2:f0:d9:
92:0e:d0:81:30:8c:0a:9e:f7:83:3b:98:c0:ec:15:02:24:ae:
b9:ce:ee:50:0b:3e:b5:1f:ae:b6:98:cf:61:c8:f1:c2:4f:7c:
4e:9c:dd:36:72:0b:7f:57:2a:f5:8a:ec:72:c6:a1:5e:c8:07:
23:c2:ee:fe:5a:df:e7:81:72:e9:0d:87:3d:df:57:96:c1:12:
74:d4:28:c0:66:fe:37:c0:ac:b6:9f:73:bb:00:c5:12:44:e8:
49:85:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:00:25 2026 by rpki-client