Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: 45LdTP+AZm7IaVqYHf1TJAtZiiksYnXARLrbfLiOuHE=
Subject key identifier: 96:06:C1:1E:17:5D:2B:71:C5:20:06:24:5B:E5:59:CD:C3:17:B1:F3
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 01A06FF16DDAAF48FF5C2E8B2C7D1B3251B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 1A36
Signing time: Sat 05 Sep 2026 05:01:28 +0000
Manifest this update: Sat 05 Sep 2026 05:01:28 +0000
Manifest next update: Sun 06 Sep 2026 05:01:28 +0000
Files and hashes: 1: DNB9L8ZeaHe80R_9nZjHeU3xXLU.roa (hash: NPIW3IPajlO+RZm/cg9qqMOdImUpO6F0PwMyYtUpmwo=)
2: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: svFBG8kPx8z2IfitAjZ5za7UMvXiVrMUkzuCf7BOCog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:6d:da:af:48:ff:5c:2e:8b:2c:7d:1b:32:51:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Sep 5 05:01:28 2026 GMT
Not After : Sep 6 05:01:28 2026 GMT
Subject: CN=9606c11e175d2b71c52006245be559cdc317b1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:20:c4:5a:46:99:e2:18:5c:53:2d:b0:3f:
fa:8e:9b:9f:c0:9f:39:92:0c:0c:9a:d7:c4:ad:1a:
10:66:0c:7c:3b:82:a3:97:31:6c:a8:e7:31:81:74:
d3:72:37:2a:31:e4:f8:7b:be:83:9c:1b:e3:0d:dc:
e5:97:b1:fc:47:0f:00:fc:45:f1:22:c2:81:ee:76:
1d:7a:ff:cd:fa:91:f3:56:ac:8d:ab:64:b9:f1:d5:
f2:0d:45:f4:f5:7f:e4:84:9a:8e:fe:0f:08:81:f0:
52:a0:ee:b9:4d:3d:72:01:81:84:3a:6c:79:67:74:
b4:7d:4a:15:13:ce:e0:3c:3e:92:8d:e8:8e:68:a2:
e8:69:ea:13:11:a4:ae:f8:03:3e:7b:23:6f:14:0a:
48:74:7b:05:84:02:cd:c7:52:15:19:e9:bb:69:91:
cb:62:68:df:16:85:e3:bb:ef:c2:68:d3:df:3e:3e:
c8:f6:ac:4d:b3:ef:a3:d1:da:39:da:99:23:30:6b:
79:a3:39:ee:40:17:a5:85:e1:ac:62:cb:9e:86:fa:
70:25:c1:ab:25:83:79:7b:38:79:a6:f1:7a:2e:f9:
e3:7c:22:c3:72:b5:64:71:45:e9:5d:f3:a5:a5:54:
85:d4:8d:b5:ae:9c:7e:fc:51:c9:af:71:62:48:cd:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:C1:1E:17:5D:2B:71:C5:20:06:24:5B:E5:59:CD:C3:17:B1:F3
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:75:d2:f8:81:c2:46:e8:42:5d:34:b5:fc:35:bc:f1:82:
c5:1f:4e:33:00:f6:ca:35:bc:2a:ee:3f:fd:49:a2:1c:3f:50:
7f:bf:00:fe:13:f9:5f:33:af:85:cc:b1:3f:77:38:00:34:7b:
62:d7:68:c4:ca:8e:f5:d5:3f:f1:b5:dc:d3:ca:8f:69:c8:61:
3f:ba:26:91:0e:d1:6a:91:7e:6d:86:af:fb:50:45:fb:6c:d1:
64:a8:9a:90:d3:0d:a2:3f:41:45:52:e6:46:75:da:20:ed:2a:
55:c7:4a:76:57:86:18:b0:6b:99:67:31:16:ce:df:95:8b:6f:
a0:a3:ff:df:00:32:30:4e:84:fe:68:f3:21:b0:9b:41:0a:8f:
2c:b6:d7:19:cc:57:02:c6:3f:6c:de:04:bd:c5:8a:d4:26:84:
33:5e:80:d9:64:da:14:e1:44:d1:96:21:89:b9:7a:15:ae:2f:
68:70:b5:01:45:f6:b6:15:f1:35:db:d3:8f:41:90:61:d5:7b:
83:84:58:25:05:6d:5d:bb:91:62:e8:f0:33:a6:7b:f5:15:e2:
a3:5f:7f:0d:ef:09:25:58:f3:cb:6d:c1:4c:34:bf:ef:6b:52:
f9:4d:73:b7:8e:ba:d7:a0:96:b5:f4:57:40:46:64:9b:b9:b1:
96:92:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:04 2026 by rpki-client