Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: FHKOcc2OCKUKQiO6itXASL2c86Di+y9swPRTNyzt+Fw=
Subject key identifier: 5A:08:24:31:69:BE:2A:A2:19:39:EF:B9:51:68:20:26:45:53:C1:14
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019F92489D7F6149D7D973ECC5BB28B761EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 13C6
Signing time: Fri 24 Jul 2026 04:01:00 +0000
Manifest this update: Fri 24 Jul 2026 04:01:00 +0000
Manifest next update: Sat 25 Jul 2026 04:01:00 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: U41NzEM7vG4Xd8V8zpn9y1/wvctxPEPWSzo8lDG0sjA=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:9d:7f:61:49:d7:d9:73:ec:c5:bb:28:b7:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jul 24 04:01:00 2026 GMT
Not After : Jul 25 04:01:00 2026 GMT
Subject: CN=5a08243169be2aa21939efb9516820264553c114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:63:da:18:b6:e4:1b:45:c9:55:dc:37:10:
91:01:bd:64:4c:8d:4b:b5:48:98:22:d8:a2:44:69:
12:a2:d6:40:6f:a1:41:af:dd:bc:5a:ab:c7:26:18:
bb:8b:41:2c:09:de:14:33:4f:7e:0a:51:38:91:95:
e9:c9:8b:24:26:02:7d:01:c7:cd:3e:70:de:a8:07:
ce:54:59:17:45:ba:a0:c7:31:a4:81:3e:5e:75:fa:
82:a3:8a:18:21:bc:e9:ef:f6:fd:35:70:07:59:57:
81:f7:99:dd:44:44:cc:f6:04:81:bc:91:4a:26:c3:
50:ea:d0:a8:4e:fa:b8:f0:bb:81:d3:21:af:ed:1f:
19:96:27:3e:5c:3c:72:7a:86:e0:17:30:6c:44:8f:
25:fb:9e:b1:46:82:68:5b:40:12:45:7b:63:fb:11:
28:d5:69:62:89:e3:fc:e3:5f:f8:f4:a9:58:5a:69:
67:2d:0c:29:a3:e2:4c:fb:53:09:11:73:9d:79:2d:
4d:86:d3:ce:8f:6c:bd:c4:44:c7:bc:2a:48:97:2b:
8e:99:f9:7f:af:6c:b8:7d:03:5e:a8:9e:c8:cf:d8:
e6:28:24:a7:b5:6c:c3:c8:ac:b9:d4:37:a7:0f:c7:
c7:13:a5:19:d2:9e:8e:52:a5:5f:88:d4:0d:b7:2d:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:24:31:69:BE:2A:A2:19:39:EF:B9:51:68:20:26:45:53:C1:14
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7b:6f:c0:c4:c1:01:cd:52:0a:e8:08:2d:e3:3f:87:13:c1:
3b:89:c4:ea:8d:fb:fa:29:60:e1:91:a9:0f:85:cf:87:b7:a5:
f8:b9:85:76:d1:27:46:a1:7f:39:6a:95:02:66:3d:b1:33:51:
04:d1:fd:5f:ea:c3:bc:16:5d:74:f6:74:dd:b3:71:00:08:9a:
1f:eb:7a:72:c0:f5:d3:d8:79:ab:ec:45:f7:50:aa:11:3c:6a:
67:45:3f:26:9b:0a:74:f0:f9:84:e7:b2:76:2f:d0:3e:50:51:
b8:9f:c1:08:c8:5b:b0:e8:47:dd:6a:67:84:7d:39:c5:cb:b8:
5f:5d:be:8f:c3:15:a1:0e:fb:30:1c:19:6f:41:27:74:4e:52:
fc:4a:02:db:d8:29:b4:9e:d2:cb:c1:57:7c:ac:24:1b:39:4e:
54:e6:1c:9d:e8:26:ff:72:5c:1f:1e:d0:63:20:fa:97:3e:1e:
93:84:33:b0:b6:11:27:fb:2d:22:96:17:3c:40:72:f3:75:d7:
fa:ba:07:09:32:4c:40:13:d5:fa:0a:0a:af:a1:8a:c7:49:34:
5a:05:0d:89:29:ac:67:3c:aa:b9:25:c0:3a:37:d8:b7:c4:a6:
80:82:80:57:c8:cb:8b:91:e6:32:91:cb:e1:36:8b:cc:14:19:
5d:e3:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:43 2026 by rpki-client