Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: 0sYlmeXlnY5+dHQrNGR0lKEhF6TZVWsF/oAvA+Z0yI0=
Subject key identifier: F9:46:D7:6E:2A:14:CC:A3:3F:AA:DB:12:BE:98:6A:0F:5C:B7:21:53
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019D98507C955BD4BC8190C0B1EAFD7763E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 12C0
Signing time: Thu 16 Apr 2026 22:01:44 +0000
Manifest this update: Thu 16 Apr 2026 22:01:44 +0000
Manifest next update: Fri 17 Apr 2026 22:01:44 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: RF71Qmc4TkC3YQjjE2iEBuc7hxkb+Av7+VDLffLVSn0=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:7c:95:5b:d4:bc:81:90:c0:b1:ea:fd:77:63:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Apr 16 22:01:44 2026 GMT
Not After : Apr 17 22:01:44 2026 GMT
Subject: CN=f946d76e2a14cca33faadb12be986a0f5cb72153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:9b:26:7f:b1:d3:df:60:0f:ce:09:4d:78:
a3:bc:9b:a9:66:14:e6:cc:3a:c4:a3:75:84:40:0a:
d7:b1:37:49:d7:6b:98:76:b6:ed:3c:e9:b1:07:18:
cb:ba:07:cd:63:0a:ab:b8:ca:b7:cd:c6:04:bb:dc:
6a:2e:d5:3e:b8:05:49:55:0a:f2:cc:be:1e:9e:60:
67:f0:6a:3c:df:87:78:7e:3f:1b:dc:26:50:f1:59:
9c:a9:ed:05:d5:90:26:4b:ae:44:93:51:3d:5b:f4:
e3:78:ac:35:63:c0:58:af:45:fe:f1:ea:3a:0d:3d:
d4:58:68:a5:af:fc:e3:25:b2:11:41:d9:68:f2:85:
e8:d0:16:e8:27:ee:be:df:1c:7d:70:dc:6f:c3:06:
c8:f7:38:07:d9:78:3b:57:68:8e:e3:5c:b4:7f:e8:
d3:2e:b5:6a:40:09:83:f0:ac:f4:58:15:6b:9a:84:
93:bf:48:fe:cd:5d:ad:a8:d7:51:fe:82:49:d3:df:
d8:c7:6b:f6:35:47:20:bf:44:ef:b7:3d:0a:e9:b5:
b7:98:24:fa:c9:64:5f:08:4b:f3:36:0e:33:89:89:
a0:3b:a3:e6:8a:07:6c:b1:25:d9:f1:cd:d7:f2:18:
6c:13:ac:6f:31:54:14:fd:33:ac:22:53:08:5a:ab:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:D7:6E:2A:14:CC:A3:3F:AA:DB:12:BE:98:6A:0F:5C:B7:21:53
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:12:92:ea:08:5f:a5:bd:95:d4:bf:cb:f2:f4:4d:6d:77:
9f:b7:28:db:fe:48:75:86:56:8b:cc:4e:f9:2a:58:f8:f5:ce:
15:4c:ba:26:6a:9a:76:d9:c9:84:82:6e:3f:78:d8:ec:ab:95:
67:b0:da:58:38:3f:8b:9f:57:d6:fc:1f:68:62:6b:b4:ae:57:
45:dc:ad:31:d7:25:d1:4b:10:99:e1:48:f8:80:8c:6c:65:ea:
78:1f:92:e3:73:12:c0:38:ad:34:70:4b:fd:24:14:38:e9:98:
61:2c:bf:4c:10:55:5a:29:87:c0:cb:37:90:1c:9f:63:88:73:
5c:00:3e:e5:74:c1:a5:fe:63:43:45:91:85:6b:32:2c:22:54:
c8:5c:a2:c2:f6:e9:45:a6:df:8c:6e:57:53:18:a7:49:3a:87:
32:53:ba:53:57:86:7d:17:ce:23:f2:a5:38:c0:e7:03:d1:eb:
27:e0:1d:01:9c:e6:9a:68:c7:c2:a5:55:22:b8:59:ee:86:22:
f6:25:65:88:3f:65:e9:c2:6d:2d:d6:81:1c:bb:28:a1:81:92:
2f:7a:d7:1c:e0:52:77:35:e3:8b:b0:0f:17:c4:fd:95:17:26:
5d:15:a9:3d:1c:1f:d2:65:48:c1:d8:51:d6:29:3d:7c:98:67:
5c:ab:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:24 2026 by rpki-client