Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: rTgtyR/PrcNAK1BKpiw0r2De3xlUwy+9MHZjaL6qcsY=
Subject key identifier: 08:D3:04:AE:24:0E:9E:7B:D9:E7:CA:1B:D1:AC:CC:E3:04:E9:B3:A7
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019D37C0203D0A2B4DB1D76E3E175BBB79A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: V7/NBWQGdwND7Rz/9oXqPW7oQN+gCZd0/ocTcPzZGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:20:3d:0a:2b:4d:b1:d7:6e:3e:17:5b:bb:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=08d304ae240e9e7bd9e7ca1bd1accce304e9b3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:a5:73:37:7b:e5:62:ca:f7:89:a0:53:87:
a3:1f:45:b6:5e:9c:54:30:a5:c6:9a:be:8e:fc:70:
a3:b0:36:54:c5:7f:cd:89:14:52:8a:14:a9:0b:cf:
85:4a:13:e7:9b:db:f4:2f:86:ef:35:69:db:5e:13:
ff:e6:48:cb:f9:a0:6d:60:31:25:e7:8b:11:31:ce:
64:da:bd:d5:9b:95:c5:21:15:5d:89:a0:96:ac:b6:
e0:5c:ca:02:5a:08:f1:2a:ba:70:49:56:c2:01:78:
d9:0f:df:02:07:f7:a5:7f:fd:59:29:30:b1:14:5a:
5a:d9:c4:01:65:d3:55:ae:bc:f7:ff:8c:5a:22:cf:
c4:68:b0:5a:9b:15:7b:7e:d9:e3:38:c9:4f:1e:2d:
b7:ba:5c:09:3c:e6:54:fc:2d:e2:7c:b9:86:ac:f4:
19:5a:e2:fe:12:14:af:49:91:ec:ab:97:bc:5f:b0:
22:58:78:5b:f9:7e:98:2d:3e:8e:4b:86:7e:ed:ac:
2d:d1:e3:ba:83:e4:4a:dc:d6:f5:a7:c1:b2:b8:a7:
f2:a2:4e:4c:5a:64:89:df:01:1b:ed:a9:43:d3:74:
96:a1:e0:ac:9f:6a:81:5f:ab:e0:e8:4f:ce:e3:d0:
f1:96:be:fc:aa:d8:ad:c1:a8:de:02:0d:d2:75:81:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:04:AE:24:0E:9E:7B:D9:E7:CA:1B:D1:AC:CC:E3:04:E9:B3:A7
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2f:d4:b3:3d:f1:eb:ab:0b:db:29:7f:ab:b8:1b:2b:55:c0:
ec:2c:9b:33:31:49:b3:f5:32:fb:66:ef:5a:cc:a1:1c:0b:f7:
ca:b3:15:84:18:ca:93:2f:12:e4:01:16:1d:71:6d:ac:dc:41:
f4:93:62:00:c1:b0:df:72:12:55:4f:84:c4:98:89:f2:ad:6c:
98:74:2f:ee:df:90:49:6d:33:ae:78:c2:a7:37:26:92:06:7b:
74:4c:f3:58:50:dc:24:4e:cd:d6:02:33:41:66:92:b7:99:94:
82:65:0f:9d:ea:c2:bf:53:61:78:18:38:fc:d7:b4:3c:a1:e1:
2a:cf:22:4c:08:8c:d1:ef:a2:a9:4a:42:2d:dd:83:c7:1b:e6:
3a:08:e4:d6:2b:8d:a8:3d:ce:f7:be:bf:da:85:f0:80:48:4a:
88:68:29:30:69:ae:a9:26:d1:28:bd:5b:7b:13:56:d9:a5:51:
e2:16:a8:1b:12:cb:a3:25:ad:b7:3c:48:9c:78:cf:ce:46:94:
39:f9:1b:d2:a5:7a:5b:eb:0b:45:1a:fb:3e:e3:f8:d6:78:64:
5b:42:0a:7a:65:64:cd:c8:20:41:49:85:f8:03:cc:08:19:3d:
65:f8:8e:c6:b9:55:88:a5:32:32:ac:ce:ed:a6:9c:2a:fc:85:
a7:92:3d:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCA9CitNsdduPhdbu3moMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj
YWI0NTIwHhcNMjYwMzI5MDQwMDMxWhcNMjYwMzMwMDQwMDMxWjAzMTEwLwYDVQQD
EygwOGQzMDRhZTI0MGU5ZTdiZDllN2NhMWJkMWFjY2NlMzA0ZTliM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5ylczd75WLK94mgU4ejH0W2XpxU
MKXGmr6O/HCjsDZUxX/NiRRSihSpC8+FShPnm9v0L4bvNWnbXhP/5kjL+aBtYDEl
54sRMc5k2r3Vm5XFIRVdiaCWrLbgXMoCWgjxKrpwSVbCAXjZD98CB/elf/1ZKTCx
FFpa2cQBZdNVrrz3/4xaIs/EaLBamxV7ftnjOMlPHi23ulwJPOZU/C3ifLmGrPQZ
WuL+EhSvSZHsq5e8X7AiWHhb+X6YLT6OS4Z+7awt0eO6g+RK3Nb1p8GyuKfyok5M
WmSJ3wEb7alD03SWoeCsn2qBX6vg6E/O49Dxlr78qtitwajeAg3SdYGS2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjTBK4kDp572efKG9GszOME6bOnMB8GA1UdIwQY
MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt
MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx
LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACC/Usz3x
66sL2yl/q7gbK1XA7CybMzFJs/Uy+2bvWsyhHAv3yrMVhBjKky8S5AEWHXFtrNxB
9JNiAMGw33ISVU+ExJiJ8q1smHQv7t+QSW0zrnjCpzcmkgZ7dEzzWFDcJE7N1gIz
QWaSt5mUgmUPnerCv1NheBg4/Ne0PKHhKs8iTAiM0e+iqUpCLd2DxxvmOgjk1iuN
qD3O976/2oXwgEhKiGgpMGmuqSbRKL1bexNW2aVR4haoGxLLoyWttzxInHjPzkaU
Ofkb0qV6W+sLRRr7PuP41nhkW0IKemVkzcggQUmF+APMCBk9ZfiOxrlViKUyMqzO
7aacKvyFp5I9BQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:59 2026 by rpki-client