Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: tBEXnSvilx+CnJ9hh7jeyy8eWMEkdFcKr07Pu+0Wwp8=
Subject key identifier: 08:DE:66:97:0F:DF:98:25:07:CF:6F:E8:03:FD:6A:57:F8:50:AB:E8
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019EC224DB5A47FFBF86BCDA62470BC3E2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0781
Signing time: Sat 13 Jun 2026 18:00:55 +0000
Manifest this update: Sat 13 Jun 2026 18:00:55 +0000
Manifest next update: Sun 14 Jun 2026 18:00:55 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: y3bp0zBIgDDtx9dJqMJuroDeK4lMJj8q/bU9aYyOX0I=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:db:5a:47:ff:bf:86:bc:da:62:47:0b:c3:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jun 13 18:00:55 2026 GMT
Not After : Jun 14 18:00:55 2026 GMT
Subject: CN=08de66970fdf982507cf6fe803fd6a57f850abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:0f:3f:4c:66:0a:64:56:bd:fa:9c:d4:5f:
c9:e5:f7:f0:0d:c8:35:69:14:28:a8:2b:d5:2c:de:
fa:f4:48:19:40:f8:1a:8c:0f:26:c7:2b:d8:6d:fc:
3f:25:3d:91:62:74:33:bc:36:26:29:75:8b:68:9d:
01:19:f8:ad:ae:ef:a2:2a:d8:a1:ae:ff:78:fb:7c:
0e:a4:b0:69:67:4f:a3:e6:5f:cb:81:ed:3d:8c:84:
aa:95:6c:ad:df:af:b1:30:de:a9:b2:aa:3c:2c:a8:
28:f5:b2:55:85:bf:a0:52:06:69:c0:36:32:78:e1:
f2:c2:35:56:df:d2:0c:d0:8e:c5:e4:e7:f3:0e:81:
ba:74:dc:f5:8e:10:bf:1f:0f:27:a0:fa:9c:09:35:
42:3c:f7:d7:e0:b0:6c:17:07:a7:3d:a9:c4:68:26:
1d:27:e1:61:23:5d:0e:f4:ec:56:b1:05:20:03:c4:
24:ff:c8:17:c8:24:e5:73:d9:03:8e:40:bf:2e:0a:
28:e3:6c:0d:dc:28:74:8c:37:66:3b:28:2f:83:24:
84:bb:25:db:c0:71:22:55:d9:e4:95:b9:84:9d:bc:
24:e7:e3:e3:27:c8:8e:f9:90:36:99:b8:c8:93:4a:
94:33:a6:c1:1b:3d:f3:9c:9d:03:13:ad:24:24:34:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:66:97:0F:DF:98:25:07:CF:6F:E8:03:FD:6A:57:F8:50:AB:E8
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:46:6e:57:bb:c7:76:20:b4:c3:78:59:ca:70:8e:26:bd:00:
75:cb:48:04:77:a0:01:9c:87:1c:4a:68:bc:41:aa:ff:1a:f3:
08:5e:d3:c0:7c:f7:86:8e:19:9d:27:54:bb:b6:28:6b:b9:f3:
fa:d2:84:f6:d8:d6:1c:2d:1a:19:21:85:14:3d:69:98:01:2a:
0b:de:af:c4:d2:0a:8e:3f:52:0c:0d:3f:ca:ec:f0:5c:c4:b8:
88:08:92:3b:3a:ad:e2:73:1c:a7:25:11:1e:64:50:25:e9:82:
22:35:cf:8c:c8:5e:51:44:a1:65:63:ed:e9:90:a6:e1:75:0e:
dc:e7:f6:b3:c9:aa:09:18:f6:f3:c1:3d:e8:cc:b1:5d:fa:5b:
85:f8:a4:10:5c:fa:25:79:e3:70:46:23:ca:12:5c:68:29:e6:
b8:b8:63:c8:1b:55:bf:3c:cd:ae:ca:85:1c:eb:6c:64:2a:98:
07:7a:af:7e:d5:68:a0:db:ef:04:25:14:0e:40:c7:f9:88:52:
e7:95:27:9f:c2:01:36:fa:88:b4:f5:a7:69:6b:56:82:ca:c6:
37:25:5a:f4:e1:7b:b8:08:46:c2:14:c9:74:95:e2:59:a2:5c:
8f:00:71:d7:00:c5:c4:02:d3:3c:58:d9:ca:cd:5b:f3:56:51:
38:7d:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:53 2026 by rpki-client