Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: gHFv5ltx9pD1/EHil9lJJwnK/Z/UEDxmG7aj0VvCdzA=
Subject key identifier: 4F:45:34:41:95:7A:9F:65:1F:7B:00:16:7F:2A:EA:B6:ED:9F:16:B1
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01A040853A07473E63188C2503872B10C9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0847
Signing time: Thu 27 Aug 2026 00:01:07 +0000
Manifest this update: Thu 27 Aug 2026 00:01:07 +0000
Manifest next update: Fri 28 Aug 2026 00:01:07 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: NjwJpKd2CVg09ezx9a6UKrg5d/uWm7oyg84tA2+B4Tk=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:3a:07:47:3e:63:18:8c:25:03:87:2b:10:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Aug 27 00:01:07 2026 GMT
Not After : Aug 28 00:01:07 2026 GMT
Subject: CN=4f453441957a9f651f7b00167f2aeab6ed9f16b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:d5:f1:86:e2:37:c1:8c:5d:fd:6d:ff:f7:
58:5e:15:d9:36:32:ed:a3:21:01:1e:04:75:e7:d0:
85:76:dc:73:46:18:cc:93:93:11:05:f5:70:b9:8b:
c6:06:64:d1:5f:70:1f:d2:09:2e:3d:57:45:48:7c:
ba:b2:89:9e:de:40:a2:52:fe:72:56:b5:77:e1:8e:
b6:1c:5d:a7:dc:e4:96:ac:85:20:be:6f:9d:3c:ca:
c8:8c:2b:03:96:4f:53:72:56:cc:36:f3:f8:9a:43:
09:ee:7e:65:b6:db:04:26:22:a1:e6:b3:72:9c:f6:
c2:78:9f:a8:f6:7d:0e:10:2c:ed:84:8a:4b:06:bf:
ee:d2:cf:6a:4b:a1:c2:67:7c:f6:89:9c:6f:13:e0:
1a:89:a5:c9:87:52:17:3f:ae:7a:59:12:f3:4c:7e:
3a:c4:ed:fb:93:27:e6:1c:64:dd:b0:c0:c3:27:73:
b0:45:e2:ce:ef:97:46:4e:02:82:3e:90:ac:9a:0f:
84:32:af:d2:86:a3:6a:f8:17:4d:f4:80:92:26:96:
d3:a2:13:0e:65:c6:85:44:99:d8:69:63:e7:2f:05:
59:a8:71:5e:b1:8c:90:14:86:5c:75:04:cc:ea:ee:
61:ef:72:80:6a:59:2f:93:31:b8:6b:83:25:86:c9:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:45:34:41:95:7A:9F:65:1F:7B:00:16:7F:2A:EA:B6:ED:9F:16:B1
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ee:e5:7c:12:e0:63:15:d4:63:0f:ac:1d:b1:87:86:dc:78:
2f:56:a3:f7:c3:b4:bc:02:09:6d:83:5b:7e:91:d7:91:bd:c0:
f3:80:79:11:2c:f7:41:85:ce:8a:dd:17:03:a3:13:45:30:47:
9f:e5:cf:6b:96:cd:10:26:53:ba:f6:90:95:4b:30:b5:00:1a:
87:9c:32:02:73:9c:7d:84:d0:cc:40:20:70:5c:cd:1b:5c:ab:
73:e6:32:ef:c4:7a:a4:5d:c2:84:1e:7f:cd:c8:cf:29:76:8b:
7b:64:2a:6b:8c:f9:14:fb:b8:9f:22:6c:d6:eb:ab:45:f4:96:
40:f6:c3:da:05:cb:ee:83:29:f3:b4:14:a2:ca:74:f6:4d:dd:
2e:97:eb:fc:09:3f:63:b1:f4:02:5f:39:b8:b6:9f:f2:1b:a8:
69:c3:8c:84:90:75:ce:58:d3:b9:51:e1:e3:dc:9c:ab:11:2a:
46:d2:65:40:40:1f:1f:46:9a:1b:be:8d:9c:22:27:b1:57:f0:
e5:77:d1:3c:ca:e4:75:86:24:1e:4b:1e:38:ac:29:93:f2:31:
d4:06:00:50:ff:3e:4a:cd:f3:17:97:0e:09:be:b4:2c:1a:9a:
46:f1:c9:91:19:f6:c4:23:8b:0c:8f:68:0c:67:78:fd:14:97:
84:8f:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:34 2026 by rpki-client