Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: Pjit5uI2oO17mk4Jg1McpRVyNOOVAI9SslxQCGykl+w=
Subject key identifier: E0:F8:CF:82:85:DD:69:19:56:DA:EE:A5:5D:A2:47:89:1A:97:65:6B
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019FAB63F5FBBCB73BDD73468C5267C23D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 13D3
Signing time: Wed 29 Jul 2026 01:01:22 +0000
Manifest this update: Wed 29 Jul 2026 01:01:22 +0000
Manifest next update: Thu 30 Jul 2026 01:01:22 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: pEYCJqxPb5LdhYD3e0ycmdyInycFuwkHz7SpspxZABk=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:f5:fb:bc:b7:3b:dd:73:46:8c:52:67:c2:3d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jul 29 01:01:22 2026 GMT
Not After : Jul 30 01:01:22 2026 GMT
Subject: CN=e0f8cf8285dd691956daeea55da247891a97656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:cb:3f:ac:41:26:35:ba:b7:6e:32:d1:4d:
48:d1:40:5e:a7:50:af:14:e7:a7:b8:d3:db:e0:b5:
c9:b5:4b:5d:e1:af:31:cf:ba:7a:d9:a7:a2:48:9a:
3e:74:17:34:36:83:34:e7:f7:f5:5e:0d:0e:eb:79:
07:35:03:40:e6:18:17:1c:91:03:cf:a4:54:c8:30:
f3:ad:fe:f6:9e:f1:1b:d0:ec:08:e2:68:e3:4d:43:
fd:f3:cf:26:51:0e:b4:57:c2:02:f9:c5:03:50:57:
ff:51:d8:84:e7:e1:aa:34:8f:e7:aa:34:d7:c4:06:
1d:f2:10:0d:88:16:59:cc:ad:b1:4b:9a:76:c3:72:
12:d3:2d:4e:17:39:1a:04:f8:1f:2f:94:05:4b:90:
c9:f1:ff:8f:1b:f8:ef:64:ea:a3:12:9d:8c:1b:0f:
4c:98:fa:60:df:9a:0c:36:69:6b:b6:fe:ba:40:5d:
ab:c4:a8:f7:c8:27:e1:18:02:fd:4f:d2:ad:7a:d3:
f7:a1:77:63:63:2e:e4:bb:11:7e:a6:43:dc:57:1f:
82:e2:f2:c2:99:6c:07:43:fe:ad:4b:59:65:97:2e:
bd:a2:bc:e1:34:7c:1e:70:a2:8e:1a:fa:f2:d8:41:
c7:40:41:33:d8:c5:77:b7:43:7e:b2:6b:3d:3f:62:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:CF:82:85:DD:69:19:56:DA:EE:A5:5D:A2:47:89:1A:97:65:6B
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:1e:da:9f:cf:60:67:2b:f5:8d:a7:ff:f9:4e:62:d5:dd:
0a:e5:c3:01:5a:61:3b:ca:ca:e0:2f:23:d0:4e:1c:26:97:51:
36:69:a1:7d:54:09:65:4e:d8:61:02:a4:d8:5b:ab:97:54:48:
ea:0f:8c:ff:a3:bd:e6:08:d5:99:31:a5:cc:c7:3e:05:74:a3:
79:1f:8d:2c:da:99:4d:b3:a4:1f:4c:da:c4:a6:85:3b:a2:7a:
47:f2:89:92:d0:af:9e:f7:53:ca:7e:b0:69:94:14:d5:9e:5a:
f0:3f:30:35:09:8d:0b:45:87:ed:e3:7e:7e:50:88:23:00:b3:
52:37:5b:1f:58:45:de:a4:00:99:6a:37:7f:83:43:3f:3c:02:
93:cb:85:ef:5e:86:c8:02:af:7b:f0:c8:cf:00:4f:1a:6a:f5:
c8:ef:41:a0:75:65:5a:0f:7e:c7:a9:b9:58:0d:7a:53:59:45:
7b:63:c0:53:8a:ee:35:75:e6:34:c6:3e:9e:13:81:6f:ee:aa:
40:b0:72:1a:44:f8:2a:e7:b5:a3:9c:b7:20:30:3e:30:41:f4:
42:ce:e8:d7:0d:8b:60:66:68:ff:be:bd:ff:72:e3:da:6c:1c:
be:ac:f6:07:bf:83:1c:03:1f:37:c6:5d:fd:78:4a:78:b6:17:
88:cc:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:20 2026 by rpki-client