Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: fKE+vDZB/3Z0FSgpjk3hcVk0j97dxTR0QK6NTQz268U=
Subject key identifier: 32:A7:BF:C7:B7:A4:D0:5C:D7:C8:4F:DB:9B:C8:10:1E:8D:2F:87:E0
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 019D25B9FE7F9E37C1A9160B2665C265683B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 11B3
Signing time: Wed 25 Mar 2026 16:00:39 +0000
Manifest this update: Wed 25 Mar 2026 16:00:39 +0000
Manifest next update: Thu 26 Mar 2026 16:00:39 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: 8cExQtCuuAFqsaW9IvnNfPG1y4jOPTtcPS50Ga+7qAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b9:fe:7f:9e:37:c1:a9:16:0b:26:65:c2:65:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Mar 25 16:00:39 2026 GMT
Not After : Mar 26 16:00:39 2026 GMT
Subject: CN=32a7bfc7b7a4d05cd7c84fdb9bc8101e8d2f87e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:f5:4c:30:97:89:be:d6:94:c9:3e:9a:55:
8c:bb:32:08:db:89:bd:2d:28:9a:47:b9:86:8e:10:
51:70:c0:1d:a4:4a:d9:83:54:54:b7:59:e0:74:9b:
13:e1:8a:63:f5:06:19:eb:87:72:a3:0c:7d:4e:f6:
c3:fa:62:d9:de:35:e1:0b:c8:cf:0a:7c:bc:0c:0c:
75:bb:65:14:0a:88:e3:e0:31:00:10:0a:55:89:fb:
0d:0e:ca:d5:b4:73:c1:31:7f:97:66:e3:1d:c6:18:
a8:7d:a6:ef:5c:18:f6:16:ce:7c:7e:12:98:8c:82:
38:54:d6:cf:7c:cc:5d:0d:d0:e7:c2:bb:1c:4d:eb:
ed:81:15:ae:90:dd:8f:1a:bb:97:96:56:4d:b2:ed:
f3:b8:96:d4:f6:30:e4:97:49:91:03:58:32:ac:e0:
fb:01:dc:bc:88:a3:ea:da:9e:99:ad:c3:07:ba:0b:
07:66:40:63:71:9b:31:67:58:e2:c0:57:5f:56:74:
37:b9:3a:f6:45:39:ce:69:59:39:15:b7:fc:ad:d2:
24:4b:f6:16:df:6b:95:33:49:3e:54:5a:96:5b:2a:
4c:19:66:26:bf:11:a3:66:60:7a:b6:83:25:9a:76:
b2:4d:49:25:a2:fb:bd:f3:c1:91:8d:71:08:af:25:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:BF:C7:B7:A4:D0:5C:D7:C8:4F:DB:9B:C8:10:1E:8D:2F:87:E0
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:0a:ff:ae:72:41:59:c5:65:e4:28:1f:cb:08:45:48:c4:
31:72:80:e8:04:c0:a0:df:2f:0d:e3:f6:db:4c:b6:5b:fa:a1:
a1:45:b4:87:96:9e:8f:07:a1:ad:26:a5:95:7e:0f:96:e8:5f:
9b:f1:52:16:c6:bf:3b:8e:b5:57:73:c2:79:d9:8a:90:f2:79:
28:fb:75:20:51:38:60:9e:c5:47:52:94:ba:a0:21:94:20:71:
b4:30:93:d5:f0:e8:3f:a1:da:86:d9:78:a1:6e:2f:2a:c1:85:
23:22:25:49:6a:fc:46:cc:c6:fa:0c:3c:61:70:2a:36:d1:64:
28:40:86:4d:d5:56:6e:71:db:9c:8c:64:2c:41:48:40:e0:1b:
3f:b3:bb:57:d1:97:27:2e:db:f1:50:f8:0a:d1:25:06:f2:7e:
74:d2:a5:dc:e5:99:5f:dc:ea:f0:10:e1:66:01:66:13:e5:e0:
b7:8f:9f:e2:6d:f9:20:62:17:4e:da:da:58:d0:4d:47:06:39:
e4:73:56:85:f3:e3:0f:b9:a5:6b:46:6b:7b:94:dc:4d:76:da:
5c:cf:f4:fc:92:f5:e8:45:fd:eb:0e:d7:d7:2e:44:02:0e:9a:
6e:1a:cd:1e:66:10:87:08:dd:9c:8e:73:7e:ac:66:44:ac:62:
42:cb:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:25 2026 by rpki-client