Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: eeKeICpSgsBMSHxl/ogIiKQXmFrD9XAmsam+R/DN8sQ=
Subject key identifier: 7C:4A:43:51:29:AC:1C:EC:8B:06:18:BF:85:FA:CE:1F:FB:1B:03:C8
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019E4E462A61B23B16314F2F3196FA9BD8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0745
Signing time: Fri 22 May 2026 06:01:21 +0000
Manifest this update: Fri 22 May 2026 06:01:21 +0000
Manifest next update: Sat 23 May 2026 06:01:21 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: o6E/dzj0na47vCTnPClMxIhF2MaFcPNbpDKNXTF/8WM=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:46:2a:61:b2:3b:16:31:4f:2f:31:96:fa:9b:d8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: May 22 06:01:21 2026 GMT
Not After : May 23 06:01:21 2026 GMT
Subject: CN=7c4a435129ac1cec8b0618bf85face1ffb1b03c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:bf:52:35:75:25:4e:0c:42:37:ff:18:a2:
f2:88:50:a9:54:e0:ee:3b:89:a7:6b:06:fb:3a:57:
4a:9d:81:8c:7d:c2:6b:c0:f5:ea:2d:51:2c:7d:f5:
81:32:31:01:a0:9a:53:97:45:53:c9:35:19:c9:26:
c3:8c:e8:58:ae:bf:2e:ec:c1:7d:9e:9c:9d:58:89:
4a:27:01:bb:d4:06:ad:e8:ad:a7:70:cb:5d:a4:28:
95:96:93:ba:66:49:b7:7b:07:95:13:f1:23:ea:6a:
0d:e7:f9:f9:bd:08:05:d5:5c:0c:2c:e6:7c:29:68:
26:80:03:34:3a:38:1f:e8:5e:6a:8e:76:37:ba:35:
56:0b:5c:3e:93:98:1d:36:d5:87:3e:50:f2:d0:f2:
cd:d7:fc:73:ca:f4:d7:b8:f0:35:b1:13:b7:ba:05:
53:81:a8:f0:68:e9:ac:4c:4a:48:6b:31:a6:54:a6:
dd:6d:1d:f0:1e:11:05:34:2f:d1:48:b1:3b:a5:b8:
13:40:fc:b4:28:af:23:ef:00:55:be:35:7d:c2:55:
7a:27:33:5c:b8:b6:8d:8d:37:4d:fc:2e:84:8d:6c:
05:d4:f7:57:dc:40:d9:88:f8:85:6d:6c:0f:8a:19:
9b:20:0d:37:35:31:0c:a3:12:46:79:b5:51:a9:76:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:43:51:29:AC:1C:EC:8B:06:18:BF:85:FA:CE:1F:FB:1B:03:C8
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:4e:2d:44:71:a6:1e:44:07:2d:1a:09:16:37:49:1a:50:
c0:84:b1:1a:e4:59:72:ab:19:f0:4d:8f:a7:76:1d:07:82:ee:
81:62:69:f0:96:99:ad:84:12:80:19:6d:6a:34:f6:87:bc:7f:
db:33:1b:cb:c4:07:ab:47:2e:41:6d:52:29:38:64:ce:6b:62:
34:ea:50:93:50:6e:64:ef:42:40:8e:6f:6c:e7:e0:ad:20:2d:
f8:1d:bb:2d:33:54:9d:26:41:8f:db:e7:2e:3d:72:07:1c:cc:
0e:9f:a7:84:29:4e:08:f2:68:ca:69:a7:bf:99:9a:73:ae:af:
3c:92:9f:81:05:2c:d5:be:68:9c:04:7b:c5:76:24:98:ef:8d:
21:85:5e:a5:85:b6:30:40:2c:ab:84:4c:6d:43:8a:01:68:a2:
cd:72:21:e7:a1:84:4f:36:7d:18:ca:c4:33:0f:f2:04:c6:ab:
79:97:fe:ca:7d:c5:f5:44:ba:54:67:fa:ea:80:76:93:3d:1f:
c7:59:8c:34:90:65:9b:64:0a:95:0f:5e:a2:12:1d:ff:d0:ea:
23:88:29:0f:6d:a1:1f:80:c6:99:f7:70:e8:f2:b1:27:96:26:
58:76:07:88:7a:85:f2:24:ca:a2:8b:42:3c:d3:d9:87:4c:69:
c9:76:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:14:16 2026 by rpki-client