Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: 6cZsHRXqF9YUUhrWtgSVF+P+WznfL5J96p4RHAV7/Kg=
Subject key identifier: 3F:8D:55:D3:E4:E0:A8:FB:9E:42:43:0F:03:1F:B6:59:5C:32:A2:25
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 01A108EFDBF0B3DC69608E53BA060E177320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1488
Signing time: Sun 04 Oct 2026 22:01:39 +0000
Manifest this update: Sun 04 Oct 2026 22:01:39 +0000
Manifest next update: Mon 05 Oct 2026 22:01:39 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: Wj/VEIJz30ouYts27svqp6AxaiaV4K+eujadLXaBPMQ=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:ef:db:f0:b3:dc:69:60:8e:53:ba:06:0e:17:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Oct 4 22:01:39 2026 GMT
Not After : Oct 5 22:01:39 2026 GMT
Subject: CN=3f8d55d3e4e0a8fb9e42430f031fb6595c32a225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:ef:6b:02:bf:9d:21:81:11:8c:32:ca:ab:
bb:b7:58:95:72:64:b1:8a:93:b8:4a:92:b2:b5:e7:
07:3e:6f:fb:6e:b4:f6:91:2b:5b:5b:01:29:27:d4:
1a:61:98:c5:ac:47:ec:af:e9:cd:0f:6d:28:03:d6:
21:87:ca:0b:2b:6d:91:50:eb:2d:f2:00:ef:7d:a7:
11:59:de:5b:2c:d7:6e:87:98:aa:97:bc:e9:03:fb:
79:3a:81:7f:6a:d1:87:c8:9f:0f:f4:c6:8a:97:38:
a6:e4:36:f1:b0:3e:4a:91:ea:e2:88:12:e1:50:81:
5a:a4:f2:08:47:a0:b2:15:c9:0d:96:00:f9:a8:bf:
a4:d5:0f:47:a6:09:6a:11:d8:75:c3:88:a4:05:5e:
e3:c9:fd:37:b4:36:a3:38:c9:33:1d:8f:6b:57:5b:
91:05:c0:f1:87:76:6d:61:d1:40:40:96:a0:66:f1:
2c:a7:27:16:e4:89:aa:e7:58:4f:64:64:14:7f:d4:
21:95:fc:7a:bd:73:cf:ec:fa:4d:dd:9a:9e:01:5d:
f8:76:df:69:fa:82:38:c3:43:89:c9:b4:33:5f:22:
9d:c3:15:a6:f4:e6:d1:2d:96:99:9f:4b:8a:2a:90:
d6:58:0a:d2:ce:bc:82:b3:e8:6d:c4:f8:db:d7:c9:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:55:D3:E4:E0:A8:FB:9E:42:43:0F:03:1F:B6:59:5C:32:A2:25
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:dd:70:da:29:ec:53:4e:dd:25:5b:cb:b6:69:95:5b:12:
3b:df:bf:3a:8e:a2:b3:d9:2e:95:0c:ce:5f:2a:a5:df:54:e8:
f8:43:c9:f2:49:d0:d0:29:d0:04:0c:2e:b3:c9:ec:e0:98:e2:
b6:d5:b4:0c:07:97:72:bc:9f:cb:2d:aa:f5:42:03:01:9d:48:
75:77:fe:a3:46:1b:33:ca:5a:fa:d2:69:14:25:38:42:15:3a:
3b:47:7f:dc:5f:3d:0b:e2:f4:c2:04:b2:73:4b:50:42:0c:5f:
9e:b1:31:47:1a:5f:9e:00:60:80:35:5b:f3:4c:84:f4:b0:1d:
3e:ef:e9:d3:e7:5b:bc:5a:f1:25:07:5c:33:0d:54:8d:fe:5f:
95:d6:fa:db:b6:cb:b1:e9:49:9d:f9:95:9b:4d:ef:5b:a8:01:
9b:22:36:f6:32:7a:c7:6d:24:4c:38:56:54:f7:f9:36:e3:00:
f6:e2:ad:02:13:0a:89:78:1e:79:7b:f8:50:08:fe:6f:b1:a4:
a8:da:c1:57:99:83:b4:08:39:80:95:23:1c:3a:d7:c6:26:90:
a6:98:75:b4:d4:26:2f:de:40:ac:63:50:9d:93:97:be:3c:db:
d5:06:1e:d0:25:f3:13:23:19:33:b9:87:3e:77:15:00:74:97:
d2:10:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:46:34 2026 by rpki-client