Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier: owyqPT90yqqObYmzz78pTLnmecFtFjAhWwv8t+tlMGo=
Subject key identifier: A4:8D:D2:EF:F2:DB:15:E7:88:EB:88:C7:83:97:63:8F:E9:47:29:50
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial: 019D265FB805221E0EDB2C374D3F4621655A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: cPu7ZdScHcLiiS0RgkoltF1SI62d5ir4E+m/8aoZvyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b8:05:22:1e:0e:db:2c:37:4d:3f:46:21:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=a48dd2eff2db15e788eb88c78397638fe9472950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:2d:a3:f3:f0:f4:73:5c:0a:95:42:bf:94:
1b:24:66:97:9c:fe:5a:aa:09:08:77:74:d7:41:13:
64:bd:2e:1d:85:52:84:e2:2c:35:4c:6d:a5:43:9a:
80:75:5e:1e:4b:4d:df:e9:32:0c:d4:a9:7f:c2:7c:
3b:57:ec:90:6d:d8:87:14:3c:27:77:0e:0f:c9:fb:
47:00:e3:b9:2f:bd:79:90:39:ab:08:af:c6:ea:f2:
69:47:60:f6:0f:49:c3:af:f2:31:65:e4:a7:68:9c:
ba:17:32:df:4a:90:03:01:c9:c5:98:fe:0a:da:c7:
1a:bf:29:b2:1d:29:b2:94:ef:de:9d:0d:e2:bb:53:
3d:b3:1c:0f:a5:30:ef:42:f0:77:51:fe:4a:56:0a:
ae:8b:c7:d3:f6:9e:1c:a5:ae:b2:88:28:a1:53:af:
64:eb:5c:21:3c:09:7d:bd:c9:51:c1:ae:18:41:71:
ec:81:90:65:92:11:aa:62:de:fd:6a:07:8b:24:2f:
ee:66:a9:e8:e0:b4:99:73:1e:5b:f6:03:e4:57:48:
ef:34:0c:49:5d:fc:33:1c:f7:14:fb:68:ef:75:05:
9b:8d:ef:be:fa:a3:0e:f7:37:16:7e:9c:0f:a7:65:
a9:6e:d4:d8:a5:9e:cc:c5:aa:3c:d4:7e:59:93:0d:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8D:D2:EF:F2:DB:15:E7:88:EB:88:C7:83:97:63:8F:E9:47:29:50
X509v3 Authority Key Identifier:
keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fe:d3:42:5d:79:ec:6c:a7:41:d8:32:f6:c4:1e:1e:5b:7b:
4a:af:a5:73:dc:2b:73:bd:80:ff:91:93:07:18:de:4c:0b:8b:
71:46:63:a9:47:36:0f:ab:41:4e:ec:14:b7:62:14:39:e7:de:
4d:90:6e:54:aa:30:15:68:0c:db:46:fa:8b:e7:1c:79:81:65:
4a:d0:d3:7f:9f:1f:fb:e6:e3:57:10:26:99:07:f3:a6:66:59:
1a:94:34:e6:ac:4f:a8:7b:a1:c5:fc:2b:0c:77:ab:cd:a1:1a:
b9:f2:11:a5:13:28:93:e3:c2:7d:82:92:23:08:11:94:83:45:
09:19:df:46:e1:97:f5:76:ab:92:e6:d5:e6:9c:09:2e:66:73:
4c:66:92:d4:4f:42:ca:5d:55:ba:13:82:c7:4e:28:80:ba:9d:
4d:88:cd:67:89:cb:5c:26:19:a8:5e:06:e3:29:37:16:d5:e0:
50:90:0e:03:9d:fd:be:e2:5a:b8:5f:5f:75:aa:d8:57:d6:bf:
d4:a2:b5:f8:88:a2:29:0a:3a:c0:2d:33:5d:1a:c8:89:4a:5b:
89:fa:82:08:eb:8b:08:f5:d8:8e:43:6b:cb:43:1e:a1:88:45:
ea:d8:07:dc:62:46:a3:5b:d5:65:a1:90:1c:52:aa:ad:b7:0a:
f3:49:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:14 2026 by rpki-client