Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: lt0wThPV6+wdV2b69mJGPGdJR1YXQulp14IUN48GPzo=
Subject key identifier: 63:47:70:CF:65:CC:1D:8B:90:FD:7E:A4:19:AB:FA:4A:C8:D5:F3:63
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01A0D727A4B4A19868DA39E42D893BAA8B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0895
Signing time: Fri 25 Sep 2026 06:01:34 +0000
Manifest this update: Fri 25 Sep 2026 06:01:34 +0000
Manifest next update: Sat 26 Sep 2026 06:01:34 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: zxuGGEndZNZInGMRbLahqrYcyVHhUBOZdXmzD3QhdS8=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:a4:b4:a1:98:68:da:39:e4:2d:89:3b:aa:8b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Sep 25 06:01:34 2026 GMT
Not After : Sep 26 06:01:34 2026 GMT
Subject: CN=634770cf65cc1d8b90fd7ea419abfa4ac8d5f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:f9:70:3e:45:3f:90:fc:8c:50:a8:dd:7b:
e8:6c:39:9b:46:d8:72:bc:4a:26:8c:fa:65:3b:89:
41:93:49:47:dd:6f:b5:93:2e:c0:23:da:75:1d:b8:
b8:6c:c7:44:25:49:1c:82:31:5c:a7:08:96:f5:9d:
fd:ba:76:87:89:a4:ea:63:14:15:5e:57:2a:5f:73:
e7:7d:38:0d:74:70:a8:63:51:49:14:87:07:90:6f:
5c:73:ad:92:7a:72:b8:f1:44:32:b7:a9:ed:c1:a2:
11:85:1b:2b:1c:06:db:6a:40:b7:fb:80:9c:78:28:
d4:99:60:c7:60:ee:19:25:55:df:ce:96:2d:07:ed:
a4:76:23:af:fa:f3:b0:76:69:1e:b6:25:15:4e:a6:
8a:84:eb:92:c6:6a:2d:55:c9:93:47:7b:c4:5e:0f:
6f:33:05:39:25:99:5a:59:19:20:e5:52:1c:c0:81:
56:ea:4c:1a:cf:e6:8d:f3:a9:de:a0:93:9b:09:2b:
c6:1d:ca:02:e9:82:8e:b1:84:b1:c5:3e:20:94:59:
48:e0:d9:e8:be:4e:9b:84:4e:57:9f:ca:b2:e6:36:
0a:0c:87:34:74:4a:86:95:87:6c:06:4a:49:80:4c:
a0:90:51:9d:3d:1a:31:23:2b:ab:70:d9:66:5f:68:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:70:CF:65:CC:1D:8B:90:FD:7E:A4:19:AB:FA:4A:C8:D5:F3:63
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:11:11:c9:5f:74:ad:18:d6:fc:cd:5c:a9:b0:6f:81:9e:
84:54:7c:24:1b:da:46:9e:f3:5a:b1:4e:c3:0f:c9:1c:c4:8c:
12:6b:2b:02:9a:73:0f:d1:ef:56:20:44:90:4e:3a:d8:8f:87:
a5:ff:5e:df:d6:38:0f:1f:ad:5b:0b:97:a4:bf:7a:cd:b3:2f:
4a:04:4f:f2:91:04:68:97:52:40:79:74:57:62:bd:e2:a3:52:
af:0a:db:37:c8:0d:40:10:58:ac:b6:1a:e4:69:f7:bf:e9:97:
a8:d0:bf:c4:49:6f:b1:fd:0d:b3:58:dd:4f:e5:32:ef:4b:23:
06:71:16:35:63:15:c8:17:be:4f:e1:37:dc:23:b3:67:43:6a:
7b:25:2b:04:da:82:22:16:21:4e:02:45:e3:85:8a:55:3f:54:
02:57:da:f6:3f:d5:90:d5:e1:ff:58:83:02:02:47:e3:80:2a:
fe:d4:da:bc:f3:4e:ed:38:29:0a:54:c1:e9:03:81:14:f2:e7:
e1:c3:1a:7e:c8:00:a3:0f:c8:27:6e:56:c4:20:cf:2e:45:77:
df:67:82:ec:34:87:ea:85:d1:07:e8:6b:3c:98:d5:45:e3:d2:
cb:c3:7c:1e:de:94:cb:6d:e5:04:54:91:82:9f:ee:c6:c4:73:
d2:3a:50:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ6S0oZho2jnkLYk7qosPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjYwOTI1MDYwMTM0WhcNMjYwOTI2MDYwMTM0WjAzMTEwLwYDVQQD
Eyg2MzQ3NzBjZjY1Y2MxZDhiOTBmZDdlYTQxOWFiZmE0YWM4ZDVmMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNP5cD5FP5D8jFCo3XvobDmbRthy
vEomjPplO4lBk0lH3W+1ky7AI9p1Hbi4bMdEJUkcgjFcpwiW9Z39unaHiaTqYxQV
XlcqX3PnfTgNdHCoY1FJFIcHkG9cc62SenK48UQyt6ntwaIRhRsrHAbbakC3+4Cc
eCjUmWDHYO4ZJVXfzpYtB+2kdiOv+vOwdmketiUVTqaKhOuSxmotVcmTR3vEXg9v
MwU5JZlaWRkg5VIcwIFW6kwaz+aN86neoJObCSvGHcoC6YKOsYSxxT4glFlI4Nno
vk6bhE5Xn8qy5jYKDIc0dEqGlYdsBkpJgEygkFGdPRoxIyurcNlmX2g5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNHcM9lzB2LkP1+pBmr+krI1fNjMB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPEREclf
dK0Y1vzNXKmwb4GehFR8JBvaRp7zWrFOww/JHMSMEmsrAppzD9HvViBEkE462I+H
pf9e39Y4Dx+tWwuXpL96zbMvSgRP8pEEaJdSQHl0V2K94qNSrwrbN8gNQBBYrLYa
5Gn3v+mXqNC/xElvsf0Ns1jdT+Uy70sjBnEWNWMVyBe+T+E33COzZ0NqeyUrBNqC
IhYhTgJF44WKVT9UAlfa9j/VkNXh/1iDAgJH44Aq/tTavPNO7TgpClTB6QOBFPLn
4cMafsgAow/IJ25WxCDPLkV332eC7DSH6oXRB+hrPJjVRePSy8N8Ht6Uy23lBFSR
gp/uxsRz0jpQaA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:16:34 2026 by rpki-client