Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: LLUfneXAhwxZoO0r596MtAeL90khgmQUo1ZerWNm/YY=
Subject key identifier: 31:9A:D6:15:53:EE:20:BF:8E:45:AE:65:53:26:EC:75:A2:5A:6D:BB
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019E1C0FE5145CAB5E9511EDB03CF5392401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 072B
Signing time: Tue 12 May 2026 12:01:04 +0000
Manifest this update: Tue 12 May 2026 12:01:04 +0000
Manifest next update: Wed 13 May 2026 12:01:04 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: JakbmBI3a9ruHEhFhRei1fM2t3s4Ybs1ItOdolQZTKs=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:e5:14:5c:ab:5e:95:11:ed:b0:3c:f5:39:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: May 12 12:01:04 2026 GMT
Not After : May 13 12:01:04 2026 GMT
Subject: CN=319ad61553ee20bf8e45ae655326ec75a25a6dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:bb:c4:64:ee:fa:b1:68:e0:a6:1d:83:f2:
b8:e6:cc:e4:be:5a:15:37:ca:3b:03:0c:07:c5:ad:
e8:0d:0c:7a:16:f9:6c:52:11:12:0e:83:f0:c3:2e:
92:c9:93:f1:15:72:54:b3:97:2e:fe:d1:8a:e2:a9:
e9:04:0d:85:50:f9:58:90:7d:85:f0:52:61:09:93:
db:b7:61:41:b9:d5:53:be:a8:10:b3:52:88:1e:62:
75:13:40:39:74:7a:65:9f:ab:5d:bb:16:e6:c7:39:
a4:d1:b0:76:98:37:f2:4e:22:a9:ac:8f:da:b9:4a:
eb:c1:2e:00:33:87:b8:4b:6d:82:4e:8e:37:39:b2:
2e:bd:42:fa:c3:66:76:d3:13:c8:70:0a:b8:94:8d:
a0:ec:84:5a:03:38:95:a9:ce:c1:22:0b:8f:ff:6f:
a8:0f:cf:bf:df:73:ca:b6:62:c7:3e:72:b4:54:a1:
e3:35:06:3d:7e:9d:25:43:51:c5:19:35:98:71:14:
ac:ad:aa:7d:32:30:b5:c9:df:29:3f:84:f3:41:50:
12:9d:94:93:de:be:d9:d9:e7:d9:36:fb:ad:32:67:
63:f6:0f:56:b0:2f:b8:20:57:4e:4d:62:eb:32:b1:
16:4c:76:d6:00:1a:6e:86:75:10:70:00:da:eb:b9:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:D6:15:53:EE:20:BF:8E:45:AE:65:53:26:EC:75:A2:5A:6D:BB
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:71:44:ef:e0:4c:71:4e:b3:9d:27:51:8a:cd:fc:c1:c0:4a:
18:31:bd:48:f0:47:f2:5e:94:26:0c:f2:26:2a:9c:6a:fd:1d:
c0:ae:e5:2c:14:8e:7a:b3:4c:bc:4e:19:a8:ae:6e:d5:02:09:
14:95:f9:85:cd:fa:89:98:48:eb:0b:ce:08:23:53:6c:7f:b0:
5e:be:3c:bd:83:28:02:85:c6:93:dc:fd:fe:da:62:b5:90:3f:
8f:ba:07:d6:45:08:5d:d0:a0:9c:61:8a:b5:57:ff:7c:00:ec:
a6:80:dc:84:a0:87:ec:be:3e:de:df:50:4c:bf:1d:d0:b0:b2:
a8:27:ce:92:24:69:ce:66:18:fb:99:f9:06:94:89:c8:40:a6:
b7:c6:b2:6a:95:4e:61:f1:99:d8:5a:8e:82:af:94:3e:5c:95:
b0:31:e1:8a:63:87:84:b1:4a:9c:26:b9:f7:53:5f:b5:41:be:
e3:70:fc:82:37:8e:be:e6:41:b3:4f:93:d7:ff:f5:61:38:7f:
1c:19:da:ab:d6:a3:8a:54:a6:c4:f1:08:af:b7:e8:17:31:be:
16:27:4c:84:0f:37:82:0b:8d:75:b9:de:39:94:a8:1f:58:fb:
26:ac:fc:37:25:3e:34:73:80:9a:8c:65:fd:d4:34:bf:6a:f6:
95:50:a9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD+UUXKtelRHtsDz1OSQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjYwNTEyMTIwMTA0WhcNMjYwNTEzMTIwMTA0WjAzMTEwLwYDVQQD
EygzMTlhZDYxNTUzZWUyMGJmOGU0NWFlNjU1MzI2ZWM3NWEyNWE2ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJG7xGTu+rFo4KYdg/K45szkvloV
N8o7AwwHxa3oDQx6FvlsUhESDoPwwy6SyZPxFXJUs5cu/tGK4qnpBA2FUPlYkH2F
8FJhCZPbt2FBudVTvqgQs1KIHmJ1E0A5dHpln6tduxbmxzmk0bB2mDfyTiKprI/a
uUrrwS4AM4e4S22CTo43ObIuvUL6w2Z20xPIcAq4lI2g7IRaAziVqc7BIguP/2+o
D8+/33PKtmLHPnK0VKHjNQY9fp0lQ1HFGTWYcRSsrap9MjC1yd8pP4TzQVASnZST
3r7Z2efZNvutMmdj9g9WsC+4IFdOTWLrMrEWTHbWABpuhnUQcADa67kzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGa1hVT7iC/jkWuZVMm7HWiWm27MB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnFE7+BM
cU6znSdRis38wcBKGDG9SPBH8l6UJgzyJiqcav0dwK7lLBSOerNMvE4ZqK5u1QIJ
FJX5hc36iZhI6wvOCCNTbH+wXr48vYMoAoXGk9z9/tpitZA/j7oH1kUIXdCgnGGK
tVf/fADspoDchKCH7L4+3t9QTL8d0LCyqCfOkiRpzmYY+5n5BpSJyECmt8ayapVO
YfGZ2FqOgq+UPlyVsDHhimOHhLFKnCa591NftUG+43D8gjeOvuZBs0+T1//1YTh/
HBnaq9ajilSmxPEIr7foFzG+FidMhA83gguNdbneOZSoH1j7Jqz8NyU+NHOAmoxl
/dQ0v2r2lVCp0Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:26 2026 by rpki-client