Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: wG30XZDHKlJnN/2i3rSUSZtBKaXppdb9dI3ACnZPC0A=
Subject key identifier: 04:91:30:F7:88:BB:F4:96:00:CC:21:CA:D7:5C:73:D9:58:EF:53:95
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 019D38D34A4B8BF7F5D3158B8032330CE3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: HNJNzhIiGdCx3j8g7pTTnn9DRxWuih+yH2mhAtqqUxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4a:4b:8b:f7:f5:d3:15:8b:80:32:33:0c:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=049130f788bbf49600cc21cad75c73d958ef5395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:dc:55:9a:e8:fa:74:ef:6e:79:84:44:9b:
b0:de:d8:0f:54:9f:88:7f:78:6d:65:8e:14:63:64:
b6:a8:c5:58:b5:5a:67:fb:8d:6f:cf:6c:fa:f3:75:
c2:c7:2b:b1:69:71:84:aa:e0:8a:65:b5:7f:73:e4:
88:26:90:1a:58:ad:79:01:b4:33:49:12:9e:47:41:
c0:59:83:74:49:a4:0c:be:cb:a1:a7:b7:0b:f5:17:
44:dd:67:84:ce:42:61:70:cc:b9:d7:88:fb:45:0f:
7f:8a:cb:f3:b1:b8:7c:d1:45:1b:f1:22:b4:20:28:
58:7c:1d:5d:ff:64:aa:04:40:f3:20:e2:41:7e:f7:
34:a3:b1:a1:a1:50:72:12:ac:2e:d8:38:53:0c:12:
1a:0b:37:64:ee:83:b8:eb:43:c9:a6:65:ac:9f:c4:
bf:58:78:54:e4:5d:88:28:0e:74:f0:e7:74:ec:5e:
4f:38:93:6e:7a:46:98:68:90:bb:bd:c5:fb:ef:b5:
83:e1:c4:30:78:22:a5:56:48:17:f8:b7:d6:99:d1:
6c:85:ad:89:1b:e4:b1:cc:d8:06:da:aa:4e:02:f2:
33:46:a4:4e:b6:a7:99:03:af:d0:5b:79:64:b3:5f:
23:8b:f4:05:f8:0b:7e:d9:97:81:05:d9:3d:9d:15:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:30:F7:88:BB:F4:96:00:CC:21:CA:D7:5C:73:D9:58:EF:53:95
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b2:f0:d0:74:19:a3:42:bc:d1:b2:49:ca:ea:c8:35:9a:9f:
e7:7d:b3:6b:53:1d:02:90:29:c2:ae:36:7b:6e:6f:11:42:e6:
65:d7:44:fd:13:06:55:27:38:4f:8f:95:89:ef:ad:99:1d:67:
52:1b:64:a7:0a:ee:11:3d:39:92:10:88:ae:d0:8c:92:98:17:
a0:78:ee:96:42:96:9c:ef:2b:70:97:01:9f:05:3f:2d:f1:ec:
f6:3a:43:99:2d:2a:53:b8:12:e1:e4:99:ad:2c:08:83:6f:cf:
b5:87:46:13:d2:f5:3f:c2:ac:55:95:9f:a9:c0:72:ea:c7:d6:
27:37:7a:22:db:ff:44:6b:f5:a3:ac:7c:29:67:3e:2b:22:f8:
71:db:4c:f6:f5:b0:bf:b4:ba:e6:48:b7:d1:38:ee:66:f9:45:
d5:b8:1c:fb:34:bb:3c:d2:6f:32:a9:0a:22:88:97:43:41:13:
a6:dd:01:fc:69:1a:e2:78:e7:aa:91:be:7f:2c:95:09:5b:fe:
53:92:5a:50:ce:a2:00:56:d2:d5:0f:5a:6e:f8:dc:1f:5d:94:
23:6e:ae:6c:cc:ba:15:30:f5:8b:ad:02:1e:5a:c7:0a:27:37:
d0:3a:12:50:0d:3f:79:f4:83:f6:4e:ea:c3:e1:2b:73:dc:da:
1b:26:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:42 2026 by rpki-client