Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: OPtW1cKSB21yiaqcsx0tl1jg/KWcam0+J7U31dMLUmc=
Subject key identifier: A0:3C:DA:DB:E6:15:31:EC:61:4F:70:C1:6B:E4:18:58:8B:48:CF:43
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01A13D81112FBEAD5253B7600473177B0EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 08CA
Signing time: Thu 15 Oct 2026 03:00:31 +0000
Manifest this update: Thu 15 Oct 2026 03:00:31 +0000
Manifest next update: Fri 16 Oct 2026 03:00:31 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: IFK8/kp5GZHJ6r9bhwrQk/cpeTaFoQFu8PzywrRUDM8=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:11:2f:be:ad:52:53:b7:60:04:73:17:7b:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Oct 15 03:00:31 2026 GMT
Not After : Oct 16 03:00:31 2026 GMT
Subject: CN=a03cdadbe61531ec614f70c16be418588b48cf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:01:ff:60:15:c1:3c:30:7a:d9:90:ef:d2:
90:ff:f8:00:cc:fb:ed:08:24:c1:cb:0c:cf:d8:b3:
bd:e4:57:ac:ba:16:2f:55:4e:27:47:a3:a8:72:ed:
9a:2d:57:25:6b:57:82:39:b0:29:77:a2:91:be:e3:
37:2c:f7:8e:9a:ae:26:2f:ae:7b:4c:06:c3:1e:f1:
b7:f8:fa:ca:a0:ad:b9:2a:ef:fb:34:3b:9b:57:49:
94:9b:12:9f:5f:1f:91:d7:e3:82:4e:1d:61:78:36:
42:97:d9:6b:2c:53:d7:2c:7e:11:5a:60:12:b2:1a:
99:c4:1d:cc:37:ff:94:2c:4e:89:6b:e3:dd:9e:f1:
c3:9d:94:7f:42:12:6d:de:9f:34:00:78:15:5f:cd:
66:fd:31:68:01:40:59:a4:c4:98:ef:16:df:26:7a:
12:bd:c2:12:02:8e:a4:20:7b:2b:ad:a9:3f:ed:97:
0a:ff:76:bc:f0:07:1a:54:af:07:d3:b9:f7:9e:f4:
db:45:3a:e5:02:bb:38:8d:b8:b8:ea:c1:8f:9c:76:
d3:15:da:f2:4c:cf:8b:06:cd:41:bd:ff:92:70:bb:
d2:80:67:8e:2b:4f:ec:57:ca:21:ce:7e:72:86:af:
5a:07:38:f9:d3:4c:a3:8c:a0:ec:3b:5a:ca:64:20:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:DA:DB:E6:15:31:EC:61:4F:70:C1:6B:E4:18:58:8B:48:CF:43
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:a2:82:3c:05:e4:e0:e1:4a:e1:c5:54:02:2c:48:b6:3b:
86:3e:08:4c:41:97:f7:b8:d0:32:56:69:0f:ad:8c:a8:fb:5a:
b2:f9:06:16:cb:80:96:b8:40:80:de:b6:90:a5:9e:91:b6:97:
fa:97:de:bd:3d:fb:32:a6:6b:ed:47:15:cd:5b:68:f2:d3:3e:
33:65:86:28:ad:25:a5:14:45:77:b7:2d:c0:52:b6:bc:e9:22:
97:31:7c:87:a2:25:88:f5:de:1b:8c:7d:16:97:74:7e:15:aa:
03:96:3a:dc:8e:ea:a2:f9:ef:b2:15:af:f5:c7:7e:4a:2c:b5:
3a:e3:18:94:10:cd:74:73:e2:09:38:17:08:4e:94:89:45:86:
c4:09:c4:4c:8d:1b:a5:52:1d:df:4a:02:47:e8:17:ec:98:6e:
4d:c8:5d:54:11:e3:f3:67:42:39:50:6a:58:3d:ff:ed:b1:b8:
b7:83:24:52:d0:09:1b:0d:d9:04:75:06:5d:a9:3f:03:25:c6:
5d:d0:be:23:4b:04:a5:20:5b:ad:91:72:79:49:c2:b4:c6:49:
96:17:65:ad:43:4f:1e:aa:a1:1f:2b:ca:b0:c5:19:e0:81:3e:
d0:91:c5:03:82:83:22:ff:e4:48:a0:c1:ba:27:90:bd:2f:5e:
96:8a:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:39 2026 by rpki-client