Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: NWddEpGotlt9N75qr3saoH2gQa0SIvf8KpGrRqOW9mg=
Subject key identifier: F0:29:75:46:57:40:33:32:27:33:D8:8A:87:A6:53:BC:49:E0:07:B5
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019D9AAC2F3F5BD08B6A1127D372D10D2F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 06E8
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: Fe+xyEVlrjvAyY2w2b3luJ2Yp7++qG/JbUydc5/a8hY=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2f:3f:5b:d0:8b:6a:11:27:d3:72:d1:0d:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=f0297546574033322733d88a87a653bc49e007b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:d4:5b:85:55:76:ec:c6:79:6b:9c:13:f5:
42:00:5f:90:93:8b:5e:4d:13:57:05:05:87:f8:21:
89:2f:fe:e9:b6:cf:91:21:26:30:47:52:04:62:80:
f7:d3:77:f7:3d:88:c3:e6:f1:6d:e3:21:6f:01:1f:
de:22:78:d9:74:bd:d6:17:51:bc:52:d1:3f:c2:89:
29:42:8c:6a:14:3a:b2:53:5a:be:3e:f5:01:b0:54:
62:22:81:81:d8:7a:52:aa:a2:8e:0d:2a:b8:e8:79:
2c:26:0f:63:12:b3:be:94:8a:9b:30:3f:be:e8:41:
65:99:98:01:84:e6:96:88:b7:3f:32:70:23:a2:0c:
f4:6d:e6:88:27:92:b9:45:8c:ac:05:8b:36:47:fc:
77:6e:61:ab:ad:41:3e:a0:9e:eb:1d:52:df:f3:e6:
c3:2e:c7:7e:e1:8a:af:17:5c:90:28:9e:31:03:73:
1d:9c:39:0b:81:1e:45:b1:db:ea:0b:b0:7b:ef:0b:
b0:b9:26:f3:35:46:88:73:7e:99:fc:a4:0c:07:ce:
fd:0e:7f:ba:9e:2b:04:43:9d:00:5e:24:3f:88:63:
8f:aa:e1:c9:df:14:11:ae:00:bd:3c:b6:ff:d2:44:
71:d9:22:62:47:fe:e0:d4:3a:78:df:cd:78:6c:97:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:75:46:57:40:33:32:27:33:D8:8A:87:A6:53:BC:49:E0:07:B5
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:c5:e2:b4:d2:36:c9:d1:82:9e:a4:2f:45:bf:c8:47:ab:
0e:49:a3:ee:37:54:37:f0:2e:fb:02:2d:f1:21:a4:de:20:b0:
3f:80:56:e8:5b:2c:98:2d:2a:07:76:85:bc:c2:bd:cc:43:7d:
7e:9c:e7:31:08:86:7f:1d:be:7f:d9:8c:5e:13:4d:f9:91:19:
22:f1:ad:9e:f1:d4:17:0f:06:5f:ca:92:ad:95:68:96:d9:30:
5f:b2:ac:42:6a:2c:64:c7:cb:55:46:78:c6:bf:5b:69:67:c3:
5d:99:6e:24:57:2a:4a:d7:4d:20:0d:7b:74:24:99:76:aa:44:
54:12:45:39:f7:90:f0:4b:11:cb:60:eb:76:c4:1e:86:a1:d0:
08:de:74:65:9d:bb:ba:fe:02:00:13:fe:2c:24:cf:ac:7e:81:
1e:d9:5e:fd:6f:73:9f:19:f0:21:d2:b0:5a:c9:84:10:0c:6b:
60:c2:26:b7:81:4c:83:7b:b1:84:77:62:19:ab:45:7b:7a:e2:
9c:64:28:ab:34:5b:8c:b5:38:cd:1c:a3:13:30:0a:9b:78:cf:
3f:d0:2c:f1:87:ed:6b:2e:99:61:57:0b:fa:ac:af:52:49:34:
6e:6a:77:82:fa:33:c5:ce:e2:79:a8:dc:8c:16:a3:a3:96:b8:
7c:6d:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:14 2026 by rpki-client