Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: v3csOYjeHOFQUvR6Z4CsXSBOO0SdVV+UbbWXHJKuWiY=
Subject key identifier: 09:17:6D:46:3A:5E:0C:ED:17:19:9B:4B:DA:DC:5D:21:D1:79:E8:B9
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019D39AF868C3A1DA206A16FC394692CF968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 128F
Signing time: Sun 29 Mar 2026 13:01:37 +0000
Manifest this update: Sun 29 Mar 2026 13:01:37 +0000
Manifest next update: Mon 30 Mar 2026 13:01:37 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: I7/jEaiHRZYWMGcZZdXbtU6bmHLXhYuquBYR4rZGezU=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:86:8c:3a:1d:a2:06:a1:6f:c3:94:69:2c:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Mar 29 13:01:37 2026 GMT
Not After : Mar 30 13:01:37 2026 GMT
Subject: CN=09176d463a5e0ced17199b4bdadc5d21d179e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:72:ff:b9:4c:5f:f0:aa:fc:30:f1:f0:52:
4d:12:f9:21:91:54:4b:34:a0:d9:99:c1:5e:e7:74:
20:a2:08:af:1b:27:08:17:ec:3d:0d:7c:c5:1d:1d:
73:a5:af:31:64:56:ac:25:07:db:3e:0a:6e:9e:87:
57:c3:38:51:b8:b8:39:33:d9:7b:28:c8:8b:bc:0b:
df:98:16:d8:55:60:b7:0e:ac:38:a3:ad:48:3e:26:
f7:01:95:72:ec:4d:13:dc:93:48:09:d0:f2:e9:ac:
96:5d:16:eb:43:bd:2c:1d:49:a9:11:1d:32:7b:fd:
e3:3b:e6:df:f8:89:c9:f3:27:38:6a:9a:a0:91:85:
21:c1:ee:0f:a0:9c:1d:60:89:be:d8:04:d7:7e:5b:
37:18:7f:26:96:e4:fb:fd:ec:91:f1:b5:6b:c1:43:
f7:fe:0e:0a:04:ff:aa:d1:1b:2e:92:48:f0:c7:e2:
11:05:56:70:93:a0:18:c2:af:5d:95:49:f2:d1:b3:
85:2e:ae:59:51:0a:4b:a7:cc:9f:93:47:02:a4:01:
4c:6b:29:09:d7:58:7f:fc:20:20:bd:8e:15:97:84:
fe:86:08:65:b6:7a:59:4b:76:8e:df:36:74:2c:59:
c5:d0:5e:3a:7a:fa:53:b9:ce:c2:5c:9c:82:49:be:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:6D:46:3A:5E:0C:ED:17:19:9B:4B:DA:DC:5D:21:D1:79:E8:B9
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:70:3f:06:77:6e:fe:d8:63:3d:21:b7:8d:e7:03:3f:04:a9:
fb:6e:fc:b5:98:28:5e:3d:c1:10:9a:bf:b0:a9:57:f3:40:00:
1f:90:96:2e:18:3c:46:5d:26:50:32:4f:0e:b2:34:0a:51:50:
3f:32:6f:03:c0:cf:a0:16:36:84:cc:e6:6d:d3:f1:11:d3:48:
e5:7e:a8:a5:9a:d3:67:5d:91:36:9a:2f:a4:b2:c3:bb:d4:a9:
9c:53:91:58:28:a8:fb:80:b8:54:0b:79:d2:87:52:2e:f0:bf:
1d:1b:6f:1c:79:21:55:f0:01:6d:4c:e0:bf:d2:ab:ff:86:37:
c0:43:85:00:37:88:f5:45:54:d9:15:6c:fe:78:d2:c0:fd:3c:
36:e3:8e:bd:ba:a6:22:31:8e:91:c1:45:69:92:07:c8:b9:1a:
4f:e8:f8:62:00:77:c8:12:e7:8e:08:00:50:42:3b:fd:01:12:
66:94:a9:f8:7e:d9:cb:37:bf:76:bc:75:d8:c2:2e:49:de:6f:
b9:40:d9:ba:50:c5:9a:19:2c:90:8f:fd:8e:51:ff:89:b3:ea:
f9:e5:91:e0:f5:f4:b2:f8:c0:aa:a6:60:17:76:8a:27:28:e0:
03:e9:ca:71:06:89:80:41:c3:74:a9:37:39:dd:13:c6:fe:a5:
c4:ae:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:54:04 2026 by rpki-client