Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: yNmaa3XE/09MZt/gvroBiqMEjSw9bsWQyB7eLHluhYA=
Subject key identifier: 98:85:66:BC:1D:F5:2F:9F:89:CA:0C:E8:BB:C0:BA:93:D4:CA:FC:13
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019E1D9018DC74108FF71ADFC96512FE0B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1305
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: wgzAGetIJ7o1WD9IPCSUOf88cqvKbWMawPFPTwRME5U=)
3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:18:dc:74:10:8f:f7:1a:df:c9:65:12:fe:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=988566bc1df52f9f89ca0ce8bbc0ba93d4cafc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:63:2b:83:8c:1d:fa:6e:02:e3:49:24:18:
61:a5:fe:e4:e4:98:7c:69:be:ef:e3:49:a1:f8:c6:
15:43:81:36:b8:dc:22:9a:65:c3:0f:78:e0:14:40:
69:d6:4b:3d:b5:39:b2:fa:b4:ec:2a:ba:a1:f0:c7:
1d:e0:d5:c0:96:0d:6c:c3:4d:ee:6d:45:d0:a1:51:
73:1e:80:29:a3:f8:a4:c6:57:15:7b:c8:bb:e6:26:
fd:e7:a6:b0:08:c7:1e:90:69:ee:c0:64:c8:dc:0e:
3c:f4:c5:56:aa:e6:39:87:5a:21:bf:1c:c0:4e:77:
5c:b5:a0:5b:ce:76:4a:46:34:08:a2:54:ad:bb:98:
de:09:52:37:27:84:5f:8c:98:05:3f:d8:70:5b:41:
83:c2:d6:b9:13:36:ef:55:0c:cc:8a:d6:6c:a0:49:
94:5c:0f:4e:4b:63:ca:bf:17:ac:80:e9:5f:92:9e:
bc:99:5b:46:dd:33:7b:63:0b:16:50:eb:1b:3f:f9:
6e:96:e8:80:73:14:e8:6e:e5:48:42:21:99:de:73:
d7:cd:0b:b4:b2:49:de:a6:43:ec:9b:ec:b7:23:6a:
4e:e8:30:ab:2a:07:e8:ff:89:70:10:1b:15:d5:1c:
9c:ba:fb:4d:5b:15:dd:76:d5:e6:c3:2f:0a:4d:c4:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:66:BC:1D:F5:2F:9F:89:CA:0C:E8:BB:C0:BA:93:D4:CA:FC:13
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:d4:f0:1b:50:81:61:dc:e8:b4:25:d6:f5:6a:14:81:e0:
ab:48:0c:e9:0d:08:c0:d7:9d:18:5e:03:43:7a:1a:18:8e:61:
01:6a:56:c3:ae:f5:6b:b0:a0:3d:78:bd:11:b3:12:e7:87:43:
a4:d8:0b:7b:ae:31:9d:cf:63:db:e9:4f:dc:9c:ba:2e:43:76:
fd:c8:f2:cc:9b:92:aa:ec:8e:c0:52:37:57:12:03:3e:46:a8:
73:5f:3d:de:b8:ec:ec:78:c3:bc:ad:e5:e3:71:6c:1d:93:17:
1f:e2:38:a1:60:a2:05:15:96:ec:6d:80:04:da:c9:7f:8a:a8:
da:87:d9:ce:5c:9f:2c:b5:fe:ee:e4:37:77:c2:ac:40:41:2c:
a3:21:1c:50:85:7c:c9:f5:ae:4b:8b:d6:0b:97:4f:42:a9:fd:
79:de:2b:c0:6e:36:d2:6a:81:a3:a9:d1:39:6c:47:9b:bc:a4:
8f:0d:b3:d9:9b:ff:6d:b7:a5:07:bd:02:63:96:20:1c:aa:57:
fd:1d:a8:1f:98:74:09:c5:8e:8d:a4:d5:48:8e:72:67:a4:09:
22:ab:67:14:4e:e7:da:2b:61:cb:90:0f:c2:19:ae:bd:84:c2:
b3:c2:87:93:59:58:30:c8:e9:fc:75:2b:4a:d0:92:96:a5:0a:
5f:80:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:02 2026 by rpki-client