Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: IG5sSEbJPBdr5ioVhWxFJt2YXFl3Chozrr/R2esRUdw=
Subject key identifier: 45:13:D7:10:8B:DF:DD:22:60:DA:1B:85:6F:4C:5D:17:21:6C:DF:7D
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019CAD22AF07358583E6F157363BEF012B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 066D
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: yHI0jE2QTS4e3voskIJ98J8zjiVH0YV2Oh1pE88h/Xw=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:af:07:35:85:83:e6:f1:57:36:3b:ef:01:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=4513d7108bdfdd2260da1b856f4c5d17216cdf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:8c:e3:33:43:62:0e:74:15:0d:d3:27:e1:
e9:71:f5:cc:78:e6:f8:a5:74:19:56:ca:c1:15:4d:
05:d9:93:33:f0:1e:e6:cd:d3:84:2e:ae:db:4c:eb:
5c:54:d0:fa:85:22:fd:fa:2d:85:5a:05:68:fd:d2:
54:e8:dd:b2:65:6a:8a:9f:07:90:e0:22:19:a4:b6:
03:8b:cb:d4:89:22:33:28:57:c7:6f:dd:51:db:18:
2e:36:9e:58:ab:7a:b1:77:35:e9:6d:e5:81:93:40:
8d:dc:57:f6:f8:77:73:70:76:ee:66:40:21:66:9a:
b7:e0:c4:cb:e8:dc:7b:aa:dd:f1:51:dc:14:1f:3c:
ac:a5:3d:c1:e3:94:f4:9a:76:14:14:78:4e:1f:02:
f0:3f:2b:16:28:1c:e0:8b:01:09:b7:c1:a5:34:07:
51:a7:7d:f1:0b:15:05:2c:31:a8:cb:4c:f6:70:f1:
76:02:c7:50:a1:43:72:43:25:c6:23:bb:7b:b7:81:
75:26:f7:0b:5d:21:8c:de:33:b3:48:9f:e5:19:32:
2a:e0:e7:0a:f7:5e:d7:c0:41:cc:56:8f:86:ee:d3:
35:d3:01:f4:fc:25:62:b3:d1:6c:19:14:c4:49:1b:
e2:b7:8f:26:eb:d1:6e:82:28:41:dc:82:14:32:aa:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:D7:10:8B:DF:DD:22:60:DA:1B:85:6F:4C:5D:17:21:6C:DF:7D
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:f6:04:05:ab:b7:aa:f7:b4:0f:0f:b0:8e:3d:e5:e4:60:
04:bd:5f:0a:88:02:c5:da:42:33:1c:70:47:ae:4c:90:3c:cd:
3d:31:0e:ce:a0:5e:1f:3c:30:07:10:ce:3e:ee:29:2b:1c:32:
2c:33:04:0e:6c:57:54:fb:7b:2e:54:18:db:77:7f:c7:21:56:
9a:15:93:95:8d:25:0f:2e:93:b2:41:4d:8c:50:7e:16:fd:4e:
33:15:c8:e8:93:3c:6b:76:fc:80:da:e4:a2:31:34:88:e3:99:
d8:e0:83:d1:b5:2e:8d:59:dd:2e:b1:f9:49:00:4d:6f:9b:55:
bb:04:71:ca:bb:b0:43:74:dc:04:87:e2:7e:f1:26:49:aa:b8:
9d:4b:28:44:94:a3:34:a8:29:35:48:81:d7:a6:55:98:eb:ca:
ee:64:63:26:d5:e9:bc:89:3e:8b:b8:20:c6:64:55:f9:90:24:
0d:f4:39:cb:4c:51:9c:e3:65:bd:76:fe:64:af:aa:92:b7:62:
3a:b0:63:2f:b6:c6:bc:14:3a:07:0e:4c:ba:2a:d0:9e:d3:73:
66:16:7b:97:6e:22:dc:7b:95:53:71:c1:1c:75:d5:c2:e3:51:
74:83:32:2d:26:8e:c6:a6:5c:5f:07:c5:5f:b3:1d:52:51:bc:
f5:c2:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:58 2026 by rpki-client