Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: 1kxaMzmfw29Mp3+WfvJd29MheD8q2R8N7Ffx8AZcgvE=
Subject key identifier: 0C:14:CC:4F:67:28:FD:C9:74:95:B8:EF:C1:D1:30:25:45:58:61:88
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 01A18FAFF89F5B8A22B961FF7A9A4B1B51BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 1ACB
Signing time: Sat 31 Oct 2026 02:00:36 +0000
Manifest this update: Sat 31 Oct 2026 02:00:36 +0000
Manifest next update: Sun 01 Nov 2026 02:00:36 +0000
Files and hashes: 1: DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa (hash: NPIW3IPajlO+RZm/cg9qqMOdImUpO6F0PwMyYtUpmwo=)
2: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: 7ICBZKYRDAT9D0eL5KNxheCUKep6BjmVXQ/QFeai9OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:af:f8:9f:5b:8a:22:b9:61:ff:7a:9a:4b:1b:51:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Oct 31 02:00:36 2026 GMT
Not After : Nov 1 02:00:36 2026 GMT
Subject: CN=0c14cc4f6728fdc97495b8efc1d1302545586188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c1:b9:f5:a0:81:3a:21:7c:43:5a:32:22:7e:
a4:f2:af:3e:f4:17:84:3a:41:72:8b:91:03:88:b1:
4e:25:03:e0:3c:4f:ae:e8:99:10:3c:40:21:3e:6b:
52:d0:f9:9b:f7:ed:26:4f:dd:24:b6:a5:d9:8e:cd:
13:28:3d:f3:50:4e:d5:c0:b6:c4:f8:9c:3f:d0:88:
03:44:aa:2d:29:1b:2f:ec:c8:f5:a6:5f:42:b2:10:
24:44:88:68:f0:cb:e1:52:c2:ee:48:3b:7a:9b:a6:
61:eb:f2:07:05:dc:48:70:2e:eb:f7:c9:84:28:d2:
a5:0b:ad:7e:69:a0:91:55:dc:62:45:87:5f:44:70:
10:aa:6d:23:d2:62:6e:37:99:92:35:34:78:c7:a8:
ca:f0:15:a1:c8:46:5c:b8:24:31:8a:03:8a:2d:5e:
25:74:11:cf:3d:aa:ce:f4:79:b4:02:f4:f6:65:76:
18:24:34:01:7c:d5:9b:e0:63:b6:ce:b5:aa:8e:1e:
b2:cd:bd:9d:f3:8f:f1:10:e2:d6:a6:ff:46:fd:ae:
e3:c1:b9:d8:bd:f7:1e:eb:ba:07:df:6e:d1:4c:af:
5a:1c:71:57:c7:6b:d6:4e:e7:75:30:13:40:41:b7:
6e:16:91:cb:c1:82:20:8b:90:60:cf:07:04:75:3f:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:CC:4F:67:28:FD:C9:74:95:B8:EF:C1:D1:30:25:45:58:61:88
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e7:4f:58:60:4c:8a:4d:a1:e9:f1:29:7e:0f:17:41:11:d7:
85:fb:46:cb:5e:a1:78:79:6e:3e:56:50:75:43:68:5d:d1:17:
b5:8f:e7:5a:12:99:79:a3:28:37:50:cf:c8:f1:43:d2:4e:16:
61:08:56:16:9e:f4:72:2e:9e:fb:4e:ed:fc:8b:f4:1c:f6:ad:
da:28:c9:93:b1:e0:87:0a:9b:3a:79:50:46:ae:b5:58:46:44:
09:27:f6:28:8b:a8:92:79:2b:19:2e:33:2f:be:dc:9f:d3:1d:
03:6b:4f:52:0f:5c:72:7f:0a:91:3c:f3:69:4e:c5:18:7e:e4:
cb:6a:bc:2b:ed:7d:04:4c:ea:0e:cb:15:3a:be:33:24:3d:27:
5e:2d:a8:10:bc:f8:f4:92:f5:eb:ec:ba:fe:ba:d7:ea:42:7a:
c5:ab:a7:e0:ad:d1:47:2a:46:50:10:27:a9:f1:07:80:fb:15:
51:08:95:e7:1b:f6:3f:68:5b:bb:e6:49:c2:8b:67:94:98:e7:
92:64:55:03:5d:67:f8:06:56:98:23:45:b4:65:ff:be:e4:db:
48:60:e8:60:5d:b6:3b:49:a4:43:c0:25:35:b4:f3:a1:85:41:
c9:c6:f6:1a:c1:4e:2a:77:c6:38:2a:17:a0:16:03:46:5c:0f:
d0:5f:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:16:43 2026 by rpki-client