Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: Mlsw7dvP0LUeGspMTUPcHGw3jrsOxYqglZdYwYUnY24=
Subject key identifier: 6B:8C:82:D7:E8:30:6C:5B:99:56:7C:23:04:8B:B4:5A:AA:EF:A4:97
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01A0DEE0D3C8FBCA52C14CC2FAFF9CE8EBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0899
Signing time: Sat 26 Sep 2026 18:01:11 +0000
Manifest this update: Sat 26 Sep 2026 18:01:11 +0000
Manifest next update: Sun 27 Sep 2026 18:01:11 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: jKIOYyBH9c4/6xs63woSkBkPkroCKhKQFSl8ozfTM5U=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:d3:c8:fb:ca:52:c1:4c:c2:fa:ff:9c:e8:eb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Sep 26 18:01:11 2026 GMT
Not After : Sep 27 18:01:11 2026 GMT
Subject: CN=6b8c82d7e8306c5b99567c23048bb45aaaefa497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:a9:75:b2:d7:7f:a6:73:f0:a3:03:00:cf:
97:dc:36:4c:55:10:9d:e8:8e:75:d5:f1:4e:9e:d1:
4c:08:94:31:49:a0:eb:93:c2:1a:77:aa:53:cc:1c:
95:03:0c:05:67:1e:ba:6a:64:58:66:57:46:24:30:
d7:fb:ef:63:95:0c:f3:1a:72:4d:b3:ea:f0:4b:d6:
3b:2e:ec:0f:6f:8d:87:7d:9b:16:66:29:8a:dc:68:
e6:a4:c5:7f:eb:fb:87:9d:1f:bc:b8:57:5d:30:73:
54:5a:bb:88:3d:79:93:34:e0:04:87:6a:80:f1:37:
4d:11:66:b9:6c:f9:04:5b:74:f7:9c:db:ab:a8:9b:
30:a2:2e:de:46:cb:38:f0:ed:24:a4:fe:93:a9:ab:
49:9f:fb:58:e7:b6:37:ca:16:f9:1a:38:71:13:05:
3c:f2:d3:09:cf:41:d6:a7:2f:9c:0e:2b:02:77:cf:
f5:fa:d9:bb:a8:7a:94:d7:9e:d3:a8:8f:d7:9b:18:
1f:5f:08:cb:9b:d6:0a:75:d1:53:b6:1b:89:8f:7d:
22:fe:06:93:b9:93:27:de:b4:24:44:dd:a9:04:5b:
fc:33:7f:6e:1f:b2:78:e9:a9:9e:ce:29:19:92:d1:
e5:19:d6:48:8c:97:8d:05:3f:47:64:4d:c4:e7:94:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:82:D7:E8:30:6C:5B:99:56:7C:23:04:8B:B4:5A:AA:EF:A4:97
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3f:f3:04:f9:ca:26:df:d9:a9:30:ec:65:7f:da:9c:f2:78:
60:f7:c8:0a:6c:71:73:2d:08:ac:e4:b6:03:91:47:4d:a1:a6:
a7:f2:bb:5b:ef:a8:ff:98:d2:b4:81:d8:5f:34:a9:74:76:04:
e6:9a:e1:15:1e:27:52:cf:4d:b1:34:de:fb:06:4a:4d:95:27:
e9:00:93:76:f6:74:71:31:b5:15:b6:8c:e5:c0:3e:c0:93:ee:
6e:c8:5d:f0:43:40:1c:19:21:1c:22:3b:8e:11:37:d5:a1:37:
e8:1a:f7:49:e7:0e:cc:b0:08:9b:a2:c9:5d:6b:0b:37:1b:d2:
a0:b3:d6:63:60:63:02:68:4f:6e:6b:b3:a9:b0:8b:f2:7d:7f:
20:4d:3d:d4:00:5d:13:d3:dc:45:8c:0e:da:b7:ae:26:3c:1e:
d7:92:2a:30:5c:18:38:42:6e:73:5c:65:0c:dd:bb:4a:95:61:
3f:a9:ed:fa:99:9b:a8:ea:08:78:95:cf:8e:bd:79:e5:56:43:
5f:69:65:05:7b:2d:e1:d8:c5:58:fd:7e:42:97:90:2f:ff:44:
38:9c:6e:56:70:36:c3:7a:c1:73:6f:f3:5b:ab:3f:19:f0:c0:
ea:8b:53:57:cc:fd:68:b6:d6:71:3d:ff:06:56:be:08:71:96:
0b:ef:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:08:53 2026 by rpki-client