Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: FfmpeiglRgCOROTF90LF86iUMw1fJ2Ju4tfstT1Uxmo=
Subject key identifier: 13:C2:CA:BA:F8:E8:E8:5F:55:E2:EA:95:27:59:A6:6F:1B:47:42:51
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019D3909C4D496898AEB3E35CD0B4B82F09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 11BD
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: M7dxRQwxWg7kBAHUr/8GQL1EIGQuEIK8jdiUfTB9GpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c4:d4:96:89:8a:eb:3e:35:cd:0b:4b:82:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=13c2cabaf8e8e85f55e2ea952759a66f1b474251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:56:46:80:7b:10:33:2d:16:a7:bf:d8:9d:
93:5c:1b:a8:98:66:c3:5b:1b:b6:60:38:df:3e:ef:
c5:06:de:9e:af:56:ff:29:86:b1:dc:b4:12:74:e2:
01:0b:04:51:2f:7a:13:69:50:90:0a:b0:4e:cc:2d:
bb:46:18:15:2d:b5:6c:0c:1a:2e:00:54:54:fe:12:
8d:12:f0:54:75:f9:19:99:d7:31:ef:36:e7:03:92:
83:e7:2e:77:0d:dd:48:6a:a0:75:c1:a7:5c:a9:63:
30:df:4e:e2:07:25:f5:10:a7:a2:2d:2e:4d:4e:0f:
2d:e7:fd:8c:81:fc:c1:48:e0:af:b1:37:7b:21:22:
a3:42:94:c1:61:e2:f7:4d:f3:a7:52:86:36:b8:12:
57:e4:89:84:23:d2:f7:75:0c:c5:81:48:cb:3d:46:
0a:5d:36:e4:89:f6:a8:f6:5a:dc:74:6c:3e:74:cb:
e9:b4:2f:4d:2f:54:2e:73:f9:86:b6:0b:63:dd:57:
74:8c:7d:ec:06:20:7b:e8:f1:74:31:eb:c5:d8:28:
32:77:f0:be:73:ee:47:9d:d5:59:dc:06:2d:c6:8a:
77:ce:96:c7:74:fe:7d:0b:e4:30:92:f4:df:64:b1:
69:bf:04:fc:10:1b:74:9f:85:70:69:bd:0a:25:70:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:CA:BA:F8:E8:E8:5F:55:E2:EA:95:27:59:A6:6F:1B:47:42:51
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:6c:0a:33:35:59:29:24:db:b4:75:e2:8c:0d:f8:8d:ba:
63:1d:86:eb:f0:33:67:24:ec:8b:c1:58:1d:c5:d9:96:ed:e6:
41:e7:95:52:58:5a:a5:94:75:4e:a7:a5:19:29:46:c8:78:59:
17:6e:02:57:ad:bd:15:e3:f9:2f:f9:f9:8f:11:17:96:0f:97:
95:5f:f3:e8:de:66:14:90:84:de:c2:b0:64:8e:6a:75:f9:c3:
b3:de:32:6f:e1:4f:3f:c7:35:e7:60:aa:f1:52:ba:d2:17:21:
8b:34:da:1b:3e:5b:1e:68:e2:80:6a:c3:0d:91:0a:39:e6:7e:
2d:75:68:59:0a:9d:e8:8f:44:bb:f8:54:9a:ae:08:f6:23:7e:
c6:81:ca:2f:bc:ab:ea:e0:de:aa:57:bd:7f:07:b2:e5:78:d2:
ea:4b:d3:2f:3f:f1:a5:f1:81:62:aa:ff:fa:b3:27:fb:f2:3e:
90:c3:a0:c3:d9:34:2b:84:b6:87:0c:9d:bd:12:c4:fd:b7:db:
db:19:6d:4d:17:24:d0:f7:0e:95:00:e4:f2:4f:df:cf:34:a9:
41:f3:99:3b:75:38:ef:ce:d3:bf:15:3c:1a:38:8c:11:25:07:
e0:10:14:47:38:29:7d:d6:fe:0c:58:f4:72:65:e2:e0:6a:68:
0d:1a:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:02 2026 by rpki-client