Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: vLuY5QgHkz4YZE3CsGSceyaiha6va3m8bfWHnjNn6Wk=
Subject key identifier: 8D:53:EA:D0:72:4E:0D:5D:AC:28:EC:91:EC:82:22:A2:83:FA:AD:80
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019D9A3EC82DC91ECB96347E0F657F2AC7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:38 +0000
Manifest this update: Fri 17 Apr 2026 07:01:38 +0000
Manifest next update: Sat 18 Apr 2026 07:01:38 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: XVNnVrbBU4l2DSuvSJ6ESQjN9Ma8b0y4Lri2VYbsvOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c8:2d:c9:1e:cb:96:34:7e:0f:65:7f:2a:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Apr 17 07:01:38 2026 GMT
Not After : Apr 18 07:01:38 2026 GMT
Subject: CN=8d53ead0724e0d5dac28ec91ec8222a283faad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:ae:8c:ea:0d:07:78:89:9e:48:87:49:07:
29:27:56:8f:4a:77:ce:0f:4e:c7:59:35:45:2c:21:
f6:b2:ee:e7:b3:a6:ec:78:17:34:f4:fd:5e:7c:ab:
87:cf:9a:fb:63:64:2f:53:79:4d:30:ce:6b:db:c3:
be:e9:6e:6c:68:93:77:1d:71:5a:eb:d6:9a:c0:5c:
57:66:eb:45:28:78:40:06:0d:4f:f0:68:56:0f:61:
39:e4:8c:b0:d1:55:29:ad:e9:b6:24:ed:d1:22:37:
63:56:3e:84:c5:9e:e9:94:4c:9c:1b:e9:4c:eb:13:
ff:c6:9a:24:92:ea:de:c6:31:02:28:4e:5e:55:55:
84:27:10:1d:c9:5a:0e:d4:84:71:80:a5:a1:71:98:
cd:f0:27:7f:ec:14:ad:0c:70:5a:c8:46:b7:6f:a0:
97:a4:56:89:45:19:7d:94:4a:91:53:08:ed:3f:82:
71:91:fd:44:4c:fe:29:d3:98:0a:fa:41:fa:71:70:
c0:b9:d9:0f:54:e1:da:85:73:ff:fd:0a:53:f5:5f:
6f:a5:68:04:da:48:48:f6:c8:58:ba:71:ec:79:31:
65:28:ad:78:c0:68:70:c7:58:f8:2c:57:18:51:28:
12:8b:a7:20:52:36:be:67:9e:df:b5:1f:9f:c5:86:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:EA:D0:72:4E:0D:5D:AC:28:EC:91:EC:82:22:A2:83:FA:AD:80
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:aa:00:0a:da:8c:50:37:a9:15:77:bc:82:20:a7:40:c2:12:
f8:8d:bd:de:ca:96:35:56:e5:f4:e5:76:b7:f0:f9:9a:95:84:
71:1a:ce:9d:c8:dd:8f:c3:80:6a:23:1a:c7:1c:51:d8:69:15:
37:3d:a4:00:3e:f4:63:b8:2e:34:a6:fe:8c:46:8e:16:05:14:
f9:11:5c:57:1a:77:cb:a2:fb:f9:ee:15:90:86:a7:66:e1:db:
c3:2b:d7:0b:eb:cb:ab:39:3d:66:c4:6f:2a:19:71:fb:f7:ca:
85:a4:2e:3f:6c:14:3a:c1:5e:0c:55:36:43:b8:35:db:04:68:
87:77:d6:b8:fd:38:3c:54:41:9f:e7:2a:c5:4b:bb:60:79:5f:
c0:76:2b:46:97:6e:b9:04:40:10:4c:5e:a5:d4:f2:55:11:52:
d6:5e:69:5b:4c:d9:70:5b:b5:52:a4:ec:95:ed:e5:3c:ba:d0:
74:c5:5e:7d:b1:ee:41:62:34:c7:9e:2a:19:c8:cf:36:b0:35:
83:d3:96:01:bf:88:19:90:12:57:f5:56:00:3c:e7:26:3e:dc:
d9:0c:85:a9:cf:7f:9b:67:e6:38:b8:07:ab:4d:4c:2b:f5:1f:
22:c4:70:4f:96:0f:ac:74:95:6a:53:aa:c5:13:16:1a:06:cf:
24:ad:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:02 2026 by rpki-client