Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: CQZUHcmAdJhYnXoGNJ7oE58TvgMn9jsubL1YvQ23E1k=
Subject key identifier: 3B:C7:C6:9B:64:A8:DB:77:89:7A:63:A2:C8:5A:81:1D:E8:8C:A6:82
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019CAAC67F5C9E23AA6BA18E9A9BA44BA3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1245
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: gMtWNH7jBWCs8sZ2KDMM07+qW2zqz1cm8OUQFYZQznc=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7f:5c:9e:23:aa:6b:a1:8e:9a:9b:a4:4b:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=3bc7c69b64a8db77897a63a2c85a811de88ca682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:bb:42:0b:99:bd:44:2f:d3:7e:eb:4d:e1:
f0:8d:72:62:fb:a8:c6:bf:1b:be:ae:75:64:75:eb:
03:ff:a5:71:27:ac:a3:d6:f3:40:59:33:35:2c:70:
23:d5:97:76:bd:76:55:08:a2:13:3f:82:02:d2:3b:
ae:26:d4:11:63:7e:12:82:c1:86:c3:6e:c3:2e:69:
a3:bc:03:bb:4c:b1:d4:c1:c3:39:f9:f0:41:1f:db:
7c:b3:de:56:c0:83:08:22:43:5a:9c:3b:e5:6b:a9:
36:4c:83:4c:5b:35:ed:e5:bc:56:58:d1:17:34:23:
e4:ce:a1:60:b4:70:ca:ea:7b:70:3b:34:76:ae:7c:
7a:b4:d7:e2:8a:44:56:cf:2d:5d:9b:34:b3:0d:08:
18:26:aa:98:17:61:91:0a:23:13:e4:6f:a3:14:58:
f0:02:19:5a:ce:9b:e7:3a:69:51:61:28:1e:43:39:
97:0a:4c:f1:b9:66:82:69:0c:5a:26:cf:f8:ae:9b:
59:78:b5:0c:69:bb:a2:89:4c:03:50:c8:dc:b1:0f:
7a:5e:81:28:7c:a0:5f:74:59:81:eb:6d:f2:0e:e4:
d1:a6:52:18:29:19:14:49:f1:8c:60:78:f8:4b:21:
d2:66:6a:19:d1:f1:d3:9d:89:36:63:3e:d6:f8:ff:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:C6:9B:64:A8:DB:77:89:7A:63:A2:C8:5A:81:1D:E8:8C:A6:82
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1a:c9:ef:3d:7c:3d:1a:e8:89:5d:82:3f:73:15:21:c8:dc:
76:8d:b3:c3:b5:43:77:83:65:0f:9d:b8:4c:3e:d2:82:e3:8f:
b6:ad:df:9a:65:11:99:38:1c:d5:6d:ce:b0:fc:87:a8:5c:41:
15:c1:6f:ef:8c:4f:d9:26:56:4d:68:06:41:3c:85:d8:03:73:
56:30:52:d3:b0:bb:de:68:a2:14:8e:2d:90:17:ab:32:31:53:
99:5c:88:eb:2a:07:ce:36:ec:d3:97:1a:5d:89:49:08:d1:1c:
53:37:37:35:16:40:81:13:c4:f7:84:73:8c:36:6b:52:44:bd:
45:84:02:ce:76:fe:84:5e:31:c7:f1:cf:55:7a:b8:20:05:d3:
29:72:22:c2:a6:2d:f2:e7:5d:6c:43:0f:08:b2:59:c8:6f:47:
ed:99:3c:79:ea:d4:5e:96:3d:92:41:0c:cf:97:fd:17:db:0d:
9c:92:db:cf:fd:17:ae:d0:b1:14:54:5a:6d:9f:72:93:c9:1e:
c1:46:dc:fc:97:f8:dc:40:60:d6:cb:c8:fb:ca:7b:31:c2:b2:
66:52:e1:f9:f8:5f:7b:eb:0c:f1:92:0d:0d:70:69:75:08:a7:
79:e4:c0:2e:cc:01:cc:99:30:62:88:a6:cb:30:19:69:d1:f3:
52:b2:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:39 2026 by rpki-client