Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: Gyfie6E9eBlz71UK/qtX85EjgM4fXJ5SLdYGh3gqcAA=
Subject key identifier: 2D:3E:C4:94:D9:83:ED:F4:A3:33:4E:A1:4D:7B:60:8A:3F:E8:AB:9A
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019D668765C9A4F5EA1B35C2E445A66AE74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 06CD
Signing time: Tue 07 Apr 2026 06:00:42 +0000
Manifest this update: Tue 07 Apr 2026 06:00:42 +0000
Manifest next update: Wed 08 Apr 2026 06:00:42 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: BsJ+BaN7cjburiRUD+Z1BfbnbqFTlHsos/vKHOTiMK0=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:87:65:c9:a4:f5:ea:1b:35:c2:e4:45:a6:6a:e7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Apr 7 06:00:42 2026 GMT
Not After : Apr 8 06:00:42 2026 GMT
Subject: CN=2d3ec494d983edf4a3334ea14d7b608a3fe8ab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:e8:ce:20:11:6b:65:76:47:57:2d:7b:d0:
8a:a4:ad:a8:f0:84:e7:77:14:b7:89:37:bb:0a:1c:
db:86:f0:dd:6a:51:60:cd:f6:ec:02:46:ae:1b:e7:
e9:af:8a:ea:86:34:d6:80:09:b6:f0:48:06:99:94:
3a:cb:34:a3:b0:f3:9c:02:38:b6:4e:67:d4:32:00:
c6:af:56:e7:00:52:b2:6e:88:7e:c1:db:e0:ca:69:
ef:6a:b2:28:b0:f7:57:d8:54:72:b7:3d:c8:49:df:
98:8e:7a:1d:b5:31:3c:f6:e1:5b:1d:ea:13:64:25:
90:7b:b7:d2:da:d4:84:87:d8:a0:9e:9c:37:30:cb:
0c:9c:0c:a2:73:48:82:88:2d:36:63:3b:cc:0b:02:
3f:99:79:93:dd:2c:1a:5c:62:bd:88:6f:6f:0c:d9:
18:b5:78:ea:b2:62:6f:f2:4d:c5:13:14:2c:d8:18:
45:4f:ae:84:09:f7:6a:ee:ab:74:e2:46:60:e9:d3:
b2:9b:63:27:3f:8f:84:5b:87:48:1b:6e:ee:08:db:
8b:99:36:61:93:82:38:b8:93:a7:e4:34:d8:eb:2f:
e1:ff:78:d6:c3:ee:1d:c7:1d:d8:2d:e0:19:6c:44:
99:96:42:ca:6c:d1:25:f8:b5:b8:36:d6:b3:f0:88:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3E:C4:94:D9:83:ED:F4:A3:33:4E:A1:4D:7B:60:8A:3F:E8:AB:9A
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e5:17:35:29:c8:ca:9c:65:39:31:1e:db:cf:10:8b:14:ee:
95:dd:3a:03:df:0a:cc:2c:a0:3d:0f:63:29:4e:54:e5:70:45:
8c:93:76:13:25:d7:74:c3:cc:b6:d7:d7:a2:c2:6d:cb:9a:f6:
df:28:0d:74:27:22:29:ab:c8:8f:f7:46:d4:ca:90:96:e1:ec:
31:50:49:b3:3e:fc:2e:55:8c:88:5f:31:b6:bc:36:ec:4b:df:
70:4e:29:51:87:90:29:67:51:ca:01:5e:89:7c:5d:01:a4:f8:
b0:f5:d1:05:e7:fe:70:c8:45:47:25:bf:22:3c:f8:f8:c2:6f:
93:39:67:40:87:8d:b1:67:dd:85:17:76:60:a0:42:2e:14:cc:
79:3d:6a:5f:ae:e0:8c:3e:77:f1:55:67:10:41:15:81:d9:c4:
28:0e:c4:7c:e7:79:d0:df:88:d1:66:67:bc:01:c8:3f:6e:f4:
06:f3:34:13:96:41:24:cc:c7:e6:f9:73:ff:5c:1a:4a:24:d3:
5f:c6:2c:ad:42:b1:5c:81:fa:5b:b7:a8:ee:55:45:12:62:8b:
e2:da:e5:7a:1f:9c:b2:08:08:fd:7f:ff:d0:a4:3b:05:16:5c:
71:6b:b6:cc:43:1d:15:3a:1b:e9:d8:25:79:63:ca:44:95:76:
a5:d7:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:09:06 2026 by rpki-client