Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: OYCvpFLkFwvtJp+TwakDDbn9jWhra+x8Jj57Q1Ebrv4=
Subject key identifier: 9B:91:C5:5C:0C:92:F1:64:E3:5A:5F:A1:F6:AE:00:1A:DE:B4:3C:A7
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019C7CDB6F3F6D7CACA359F128FA0A697979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0654
Signing time: Fri 20 Feb 2026 21:01:21 +0000
Manifest this update: Fri 20 Feb 2026 21:01:21 +0000
Manifest next update: Sat 21 Feb 2026 21:01:21 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: 3QoMWnogh5T9CiB2o0bYvxTT8fZATrq+SFydgG2nc4U=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:db:6f:3f:6d:7c:ac:a3:59:f1:28:fa:0a:69:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Feb 20 21:01:21 2026 GMT
Not After : Feb 21 21:01:21 2026 GMT
Subject: CN=9b91c55c0c92f164e35a5fa1f6ae001adeb43ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:41:13:93:8d:49:8c:93:4c:ed:8f:17:7b:
01:58:8d:cf:3c:91:9a:c6:4e:b8:50:93:01:36:51:
7e:08:4d:3c:9f:aa:e9:b3:c5:ca:5c:7d:fa:32:57:
b9:ff:a6:40:47:8b:d3:a7:92:61:0b:c0:be:10:58:
19:28:89:01:12:43:e6:6f:bf:be:b9:b1:be:52:18:
a6:c0:20:2b:f3:13:e6:02:92:fc:d7:d3:83:a4:8b:
51:4f:90:c9:bc:20:0b:0c:c7:e5:67:dc:03:b0:3e:
9c:cf:cd:d5:f5:94:98:e5:00:d5:8a:fc:e4:a4:cf:
5e:41:e4:01:cd:96:1b:33:25:97:2e:2a:1a:1a:ca:
c4:ab:b1:bd:32:e3:f1:34:29:e1:72:b7:be:0d:37:
28:87:ec:8c:1e:7e:7f:ca:5e:11:6e:00:f2:13:c7:
48:1b:64:1f:8b:b1:92:dd:fa:00:98:1e:81:c2:86:
0a:f2:cd:39:06:a6:43:55:28:55:ca:03:04:e7:95:
55:9f:f5:29:60:f7:e4:18:84:75:d5:c6:f4:08:79:
c9:d8:6f:09:18:91:2d:2d:bf:fa:14:fa:d1:a1:c6:
f6:d6:32:b4:44:4d:d2:c9:45:7f:33:36:29:3d:79:
ba:75:f7:07:6d:9a:18:78:d0:7a:86:03:89:f0:08:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:C5:5C:0C:92:F1:64:E3:5A:5F:A1:F6:AE:00:1A:DE:B4:3C:A7
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:99:a3:6c:e8:1f:60:d8:fe:f0:e6:44:15:3a:8b:06:ca:c9:
dc:26:ea:49:7d:df:ce:77:84:31:ab:9d:f8:7f:93:f3:ba:b6:
61:87:71:93:f3:70:66:23:a6:70:42:4a:88:98:da:1f:5d:7f:
9a:4e:9e:c4:c7:d4:c9:b1:ac:af:b6:55:44:6b:51:8e:0f:37:
f9:db:9d:92:c1:f2:eb:50:af:3d:01:43:1b:ee:4f:b2:e8:f7:
02:fd:30:41:59:ae:7c:4d:11:40:34:da:0a:87:76:48:42:d7:
21:95:54:58:ff:ac:4c:63:49:ad:31:28:db:99:b5:a0:73:33:
5b:f4:a4:5f:ea:d2:13:46:91:23:69:8f:e7:41:2c:04:90:89:
38:72:87:75:4c:ef:e7:af:26:86:99:d7:36:8f:2e:60:3c:94:
72:96:08:70:80:de:e2:43:84:cf:a1:22:c7:e5:62:6a:73:97:
7a:4e:13:05:a2:7d:f5:11:9b:27:72:b3:91:fd:d8:ef:54:fc:
29:be:87:5d:c4:5c:66:ac:d4:7b:b0:e5:7e:41:5a:70:de:bb:
1d:91:d2:67:5b:81:2b:a6:b1:e5:25:8e:5c:97:36:df:a6:1e:
9a:a4:76:ad:0f:d6:12:19:94:39:b8:0e:f2:60:6b:1d:4a:40:
8c:39:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:08:52 2026 by rpki-client