Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: M/imAefVxNgrT0ABIenwx5sRM9ueGNvC6MLx6w+uxmw=
Subject key identifier: 04:CF:7A:80:3E:13:10:0B:E9:66:C7:37:E7:78:2A:E5:81:79:C1:23
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019D284E50C84EA6D7F73158264A1D0F8935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1286
Signing time: Thu 26 Mar 2026 04:01:54 +0000
Manifest this update: Thu 26 Mar 2026 04:01:54 +0000
Manifest next update: Fri 27 Mar 2026 04:01:54 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: OMqcBPetoyZajkruHl0DKOf3o7AfQmTbFywBAzys80E=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:50:c8:4e:a6:d7:f7:31:58:26:4a:1d:0f:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Mar 26 04:01:54 2026 GMT
Not After : Mar 27 04:01:54 2026 GMT
Subject: CN=04cf7a803e13100be966c737e7782ae58179c123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:71:2e:67:cb:a8:d0:43:03:17:85:b4:79:
6e:6b:d6:e7:68:d6:e2:b4:de:d0:1c:a7:12:8c:6c:
83:8f:26:4b:e9:da:2f:ae:1a:96:dd:a2:ca:da:72:
f1:fe:5f:d4:de:1e:e2:6a:be:6c:d2:d1:06:78:ec:
c8:f6:46:33:f6:38:6a:17:5c:3e:9c:de:10:1e:86:
33:31:4d:f4:29:c6:06:e2:82:39:a4:b2:8e:50:34:
30:95:d8:5d:87:8c:e1:9d:79:70:9b:78:b9:5d:1e:
81:45:d8:8e:52:7e:22:db:e5:15:74:66:c7:69:06:
da:57:ef:d3:92:59:8e:07:81:28:b4:29:99:f5:a0:
af:12:1c:53:e4:90:37:04:63:df:2f:b8:cc:07:e6:
72:61:8e:a8:23:d8:06:77:25:27:05:bb:59:22:7d:
b2:e2:76:c2:9a:c5:31:a2:20:b5:ff:d6:ea:22:7e:
df:12:1b:16:50:31:e1:e7:9a:3f:77:87:d8:b4:ef:
f4:9d:ad:d2:33:8e:41:bf:8e:16:c0:fb:e8:d6:ef:
fb:fd:91:ac:2a:99:81:44:0b:36:b6:cd:2d:8a:10:
47:da:3e:87:b8:a7:d3:ef:23:f1:d1:1b:20:5b:f2:
d8:62:12:6d:0f:e6:12:de:8a:58:92:8c:91:2b:c2:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:7A:80:3E:13:10:0B:E9:66:C7:37:E7:78:2A:E5:81:79:C1:23
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:cc:1a:34:d0:42:4d:bc:3d:a5:12:7c:67:6c:90:0e:a1:
15:2a:35:84:c5:84:51:0a:7d:06:3a:75:6d:80:d8:6c:dd:75:
70:63:13:14:9c:28:17:a5:0d:31:71:44:99:0b:2c:e9:8d:92:
6c:8d:39:ef:a7:67:c7:49:db:f8:c6:22:60:2c:b9:bd:d9:43:
1a:aa:6b:01:47:b3:d3:55:ff:8a:19:f4:76:9c:e4:cb:54:a2:
c3:2e:74:74:ac:c6:40:63:ae:92:18:be:a9:a1:b8:f9:0a:98:
d3:57:19:1a:d6:6f:3c:fe:8d:92:0a:4b:5e:09:3a:c0:66:c8:
c6:19:57:c6:ba:d5:52:c4:33:cc:48:bf:66:af:9d:05:c0:ab:
eb:e6:e9:19:bf:8c:99:03:d7:0d:06:67:23:6f:b5:1e:71:84:
2f:a1:4f:9a:b4:82:0e:d2:90:95:5c:80:42:5f:94:6a:7d:e0:
93:91:53:91:21:6b:33:22:e0:96:ef:a6:5f:87:33:1a:4a:de:
d5:d3:54:21:7a:4c:0a:22:f7:29:97:9f:8b:65:8b:5b:3e:95:
51:4a:04:a1:7b:91:be:c8:99:22:70:b9:50:cb:09:95:66:3c:
34:8d:1b:64:2f:6b:fa:8b:f9:89:e6:90:1a:75:2c:15:09:41:
05:56:43:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTlDITqbX9zFYJkodD4k1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj
NjczZjgwHhcNMjYwMzI2MDQwMTU0WhcNMjYwMzI3MDQwMTU0WjAzMTEwLwYDVQQD
EygwNGNmN2E4MDNlMTMxMDBiZTk2NmM3MzdlNzc4MmFlNTgxNzljMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueJxLmfLqNBDAxeFtHlua9bnaNbi
tN7QHKcSjGyDjyZL6dovrhqW3aLK2nLx/l/U3h7iar5s0tEGeOzI9kYz9jhqF1w+
nN4QHoYzMU30KcYG4oI5pLKOUDQwldhdh4zhnXlwm3i5XR6BRdiOUn4i2+UVdGbH
aQbaV+/TklmOB4EotCmZ9aCvEhxT5JA3BGPfL7jMB+ZyYY6oI9gGdyUnBbtZIn2y
4nbCmsUxoiC1/9bqIn7fEhsWUDHh55o/d4fYtO/0na3SM45Bv44WwPvo1u/7/ZGs
KpmBRAs2ts0tihBH2j6HuKfT7yPx0RsgW/LYYhJtD+YS3opYkoyRK8JHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATPeoA+ExAL6WbHN+d4KuWBecEjMB8GA1UdIwQY
MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt
MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk
LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDnMGjTQ
Qk28PaUSfGdskA6hFSo1hMWEUQp9Bjp1bYDYbN11cGMTFJwoF6UNMXFEmQss6Y2S
bI0576dnx0nb+MYiYCy5vdlDGqprAUez01X/ihn0dpzky1Siwy50dKzGQGOukhi+
qaG4+QqY01cZGtZvPP6NkgpLXgk6wGbIxhlXxrrVUsQzzEi/Zq+dBcCr6+bpGb+M
mQPXDQZnI2+1HnGEL6FPmrSCDtKQlVyAQl+Uan3gk5FTkSFrMyLglu+mX4czGkre
1dNUIXpMCiL3KZefi2WLWz6VUUoEoXuRvsiZInC5UMsJlWY8NI0bZC9r+ov5ieaQ
GnUsFQlBBVZD6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:57 2026 by rpki-client