Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: VZNMl6u5PWTCuKvNmkDzzLbgCVOb4TDjqU6ORWRAAP0=
Subject key identifier: CD:00:AF:B7:42:CD:71:86:B8:F9:39:27:A6:89:9B:78:04:36:A2:44
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 019D2961144D93E09CBDEDF45C893FCC36A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 09:02:01 +0000
Manifest this update: Thu 26 Mar 2026 09:02:01 +0000
Manifest next update: Fri 27 Mar 2026 09:02:01 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: VWQ9THAnBlNXxtXfn761ddiia0FUgc2/Y2tGhUR4k18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:14:4d:93:e0:9c:bd:ed:f4:5c:89:3f:cc:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Mar 26 09:02:01 2026 GMT
Not After : Mar 27 09:02:01 2026 GMT
Subject: CN=cd00afb742cd7186b8f93927a6899b780436a244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:f3:6d:66:38:cc:4b:cd:17:cc:ae:d4:68:
bc:25:cb:46:8b:66:59:bc:37:8d:6c:0c:9d:8d:62:
55:08:cf:24:ab:70:58:3b:38:e9:ff:af:89:c5:bf:
b6:cf:f5:81:09:95:d1:c3:34:ea:ce:63:db:67:c0:
88:1f:83:d8:32:2c:51:88:92:63:a8:cf:88:0e:7d:
ca:cc:35:09:cf:43:38:e0:4f:11:b0:e3:da:81:3d:
33:4b:1b:3a:94:ce:48:a9:81:65:a9:48:32:2e:aa:
f4:17:ce:1c:43:8b:73:10:bc:05:74:c4:bf:9b:e6:
47:d5:6e:35:41:d9:e6:7d:a1:af:45:0a:49:78:82:
74:ae:59:8f:6d:76:b5:ea:a8:58:67:bf:bd:99:0e:
76:3e:99:82:de:93:96:86:da:7a:64:ad:53:d1:2f:
6b:5a:3c:36:ef:07:bd:e7:57:2a:9d:f1:d7:94:19:
c5:a1:ba:d8:d8:1c:24:55:b5:3b:f9:ed:73:33:5f:
63:1c:b5:c5:a5:15:a2:71:58:f5:e0:d3:aa:34:2b:
f7:53:8d:91:c2:76:a3:5c:69:46:9a:b5:9e:b2:0f:
c2:36:bb:58:c5:2a:5d:13:ec:cd:f0:da:de:61:7e:
01:51:01:cd:78:fb:a6:f1:94:23:21:ec:2f:82:af:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:AF:B7:42:CD:71:86:B8:F9:39:27:A6:89:9B:78:04:36:A2:44
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1e:07:38:d2:63:b7:c3:50:d0:f9:7e:5b:82:c4:a1:25:43:
8a:18:4e:e4:66:07:73:8b:30:8b:0c:7d:49:10:44:03:bd:d1:
0d:bc:72:3d:dc:31:f7:4f:ae:29:c6:be:08:4c:0e:cc:3f:0f:
9e:4c:44:0b:52:b1:46:05:12:33:d8:14:20:31:85:60:47:50:
ad:aa:02:ad:6a:b1:f2:b7:fa:95:61:6b:2f:55:c4:5f:38:f3:
21:10:85:66:cd:69:0e:56:81:d7:cd:3f:1d:78:cd:dc:da:28:
2d:c7:8f:d2:9a:fe:82:30:70:72:a8:a2:d1:51:9d:60:ee:e1:
39:2c:9b:e0:94:57:d5:b2:b9:af:e9:5d:2b:b7:0b:00:7c:da:
db:73:2c:e3:a1:f5:11:03:ba:9c:4c:cb:f7:cc:c9:b6:a6:15:
0b:c4:2d:43:87:df:80:81:63:83:3b:d1:98:c0:9c:f4:4e:5e:
48:2f:c3:72:eb:65:dc:9d:85:0a:e2:ed:45:fe:ff:c2:51:3f:
ee:48:41:bb:fc:62:02:81:8b:74:3c:02:06:57:39:cc:4a:a4:
01:95:f1:a0:8b:77:6c:3b:3c:56:d1:0e:79:f4:e2:45:fd:af:
df:8a:e9:96:11:90:a8:2f:37:89:07:e9:8a:36:a7:72:af:de:
82:26:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:53 2026 by rpki-client