Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: eyLl4SOM0H6ghv4YXwRciNeyqHT+OfE+v9+BSG5J3fY=
Subject key identifier: DB:32:76:7E:2C:24:28:C1:2B:0C:87:E9:DB:64:E5:06:E7:F8:C8:7A
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019F37F23A1835376323200E6E66676E817A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 07BE
Signing time: Mon 06 Jul 2026 15:00:49 +0000
Manifest this update: Mon 06 Jul 2026 15:00:49 +0000
Manifest next update: Tue 07 Jul 2026 15:00:49 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: BrOtH0ZmkTH0CRJi4IRwgJsjFdI6ZROiqMBhAPbsAyA=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:3a:18:35:37:63:23:20:0e:6e:66:67:6e:81:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jul 6 15:00:49 2026 GMT
Not After : Jul 7 15:00:49 2026 GMT
Subject: CN=db32767e2c2428c12b0c87e9db64e506e7f8c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:57:0d:2e:65:cd:64:00:72:9b:a2:52:8c:
55:a2:7a:40:06:c9:e2:16:8a:56:cf:a3:04:5c:d6:
72:46:83:14:b2:17:82:b8:77:ba:f6:83:59:fe:3a:
99:68:74:13:6d:0d:89:fe:62:a2:38:8b:4c:0d:30:
0f:ca:d8:d4:bd:1c:e6:3b:10:d9:6f:24:8a:d3:3e:
39:fa:ff:04:36:cb:d0:1d:13:25:d3:4a:30:a5:cc:
c2:a9:f4:59:eb:2f:71:bd:18:a7:84:17:e0:a9:c4:
56:a8:9c:e0:60:20:4c:de:31:d8:9f:bf:f6:5b:c0:
3b:d4:29:34:2d:25:28:b0:17:47:79:ce:cf:71:77:
4b:b8:c5:96:32:67:93:1f:c9:79:db:14:68:06:b3:
fc:e8:0d:e3:89:15:ed:18:06:2a:d3:0b:58:03:80:
a1:8b:71:a4:88:13:61:26:e2:47:39:87:9e:92:52:
cf:0e:04:50:17:35:15:41:80:a6:19:6c:b0:5f:2d:
5d:4b:38:4b:33:6c:d9:f6:07:2f:d8:0f:d9:7a:43:
ba:06:73:19:f4:5f:90:d3:10:ae:32:3d:0c:c5:06:
ae:13:a8:7c:15:ea:03:47:4b:3e:18:54:ba:72:4a:
7b:a5:d3:90:a6:22:d0:af:3e:f6:bb:82:76:73:67:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:32:76:7E:2C:24:28:C1:2B:0C:87:E9:DB:64:E5:06:E7:F8:C8:7A
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6d:c7:fb:ea:75:10:ba:4a:01:91:59:b7:5d:bb:5b:aa:3d:
87:31:1c:46:5c:8b:2f:34:0c:8e:e5:0d:52:33:8d:96:62:e6:
87:af:a3:7a:22:54:5b:ce:ad:dd:db:25:ef:9c:49:33:17:40:
f7:2c:2b:fc:6c:4e:40:26:56:1e:6a:ef:a8:10:41:52:35:5c:
cf:0c:3b:75:56:d5:79:11:fc:59:a7:0e:05:69:04:11:9b:10:
b7:ff:9b:92:97:65:f0:a7:3f:f1:33:bb:ef:d4:7b:70:b6:f9:
10:4e:bd:a7:5f:f9:59:d9:6d:9e:e2:29:c3:c1:64:4a:bc:5b:
4b:40:a3:48:7f:be:f8:7a:be:88:ee:9c:94:4d:ca:7c:fc:f7:
8f:83:f2:93:98:43:d8:5a:28:ec:e5:4d:8a:c8:32:26:46:9c:
c0:0b:06:58:6d:4f:3e:a5:61:3f:9e:9e:3e:43:30:47:7b:82:
7a:73:62:61:57:77:d3:bc:74:c4:7a:23:10:5c:55:a8:92:f1:
87:e9:b3:a7:44:77:b5:3b:9a:fb:77:df:7e:29:6d:88:7c:b5:
d6:05:1f:0c:04:70:8e:d5:46:f9:81:30:8c:c4:31:9c:6b:9b:
a9:a3:9d:c0:1f:ef:72:07:33:03:7f:1d:ba:30:50:26:3d:c6:
bd:7e:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:55 2026 by rpki-client