Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: 38ThldEALJ2+12nm84qN5nYFlBLn7VMhWPTVpXEqMz8=
Subject key identifier: 68:36:94:94:07:4E:7F:E3:88:2B:D6:8C:9A:82:85:51:32:3E:15:72
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019D26CD70C635F0E2746CD8CF2B497DFA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 06AC
Signing time: Wed 25 Mar 2026 21:01:31 +0000
Manifest this update: Wed 25 Mar 2026 21:01:31 +0000
Manifest next update: Thu 26 Mar 2026 21:01:31 +0000
Files and hashes: 1: 2cBhd1gBV9HgikgWzune9EFx0jU.roa (hash: My4ngSBmWV0M6j/mqZZ0DTBHeDv9BoOmJfdYEK9/Zhk=)
2: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: SeqcRiYU7QyS6pdZZDoqtZ7/03/L1L+knaYOvTVvTF0=)
3: mTR_FQUFiwj28AGA7DdUZPrk4mg.roa (hash: IMEuNfRSk0lPejwxVIZPhzr8XOYTN8KFqMei/AaOik8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:70:c6:35:f0:e2:74:6c:d8:cf:2b:49:7d:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Mar 25 21:01:31 2026 GMT
Not After : Mar 26 21:01:31 2026 GMT
Subject: CN=68369494074e7fe3882bd68c9a828551323e1572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:55:05:2f:e6:a3:6b:52:25:98:55:42:50:
91:11:84:43:1c:8f:5a:28:19:5a:6b:3e:61:ef:0f:
0b:1f:5c:c9:f0:60:67:e1:5e:24:53:d9:2e:e2:61:
51:07:f9:c8:30:04:ee:ea:9e:22:97:27:90:da:98:
ec:18:a6:b8:5a:97:f5:9f:42:db:c7:0a:0a:13:f4:
01:13:5f:de:41:5a:84:0a:ee:a4:f0:f6:38:56:71:
68:41:e4:62:fe:b7:4a:e0:89:57:a0:7e:ce:82:68:
30:b7:15:b5:d0:05:93:66:48:be:10:5a:99:56:fc:
e4:69:9e:99:e7:83:f7:a9:a8:e5:81:ae:74:c2:86:
3a:a5:d1:cd:d1:48:1c:53:b9:1d:59:b3:73:e8:7e:
45:b7:02:c7:2b:a4:f6:d2:c0:5b:dd:a7:df:f0:7b:
6b:d9:55:e1:80:48:d0:d7:a2:94:50:64:1c:57:71:
b8:ff:6a:62:c6:17:63:81:7d:81:cf:e1:1d:6f:37:
f4:b1:f9:65:f7:18:a3:d9:41:07:e3:0e:be:c2:ca:
fd:8e:8b:0d:27:60:8f:54:aa:92:c8:fe:e7:7a:b5:
99:a6:4f:39:29:70:ed:f2:bf:75:9d:8c:20:0a:7a:
0b:85:4c:af:03:0c:a2:ac:04:55:22:cd:78:92:f6:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:94:94:07:4E:7F:E3:88:2B:D6:8C:9A:82:85:51:32:3E:15:72
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:97:27:24:ec:89:ec:e6:bc:05:f0:7b:81:11:80:2e:1e:
ae:b9:73:f3:51:56:47:6e:7f:09:75:21:cc:54:8e:7c:c5:99:
61:33:40:be:d2:03:49:69:2e:9c:1c:a8:94:65:d2:b9:27:c5:
d1:d6:c1:9a:c3:12:cc:be:96:7e:8a:14:1b:c7:84:30:a9:ca:
52:75:04:c5:03:46:b2:04:9f:1f:7d:78:8b:f5:d7:29:e8:a8:
38:4d:c0:40:8f:fc:ba:7d:8b:23:54:a6:6d:8f:c1:7f:4a:b7:
66:6f:8a:f2:e2:55:e1:69:9b:99:1e:55:26:6e:92:cb:52:f7:
82:1f:d2:af:fc:d3:48:f5:8c:7b:fe:1a:54:0b:89:ab:d1:65:
f7:0b:aa:0b:8e:e9:24:c8:05:4e:1c:d0:ea:f9:0d:ea:b9:a4:
d1:2f:7f:9e:c5:53:25:06:f0:88:31:94:63:b3:9a:1b:88:45:
d9:d2:db:c1:be:d0:47:2f:dc:01:04:b5:7e:7a:46:99:30:05:
48:29:70:06:cb:49:6c:c8:a6:29:3f:63:62:8c:0c:3f:35:21:
70:63:b4:32:bb:f2:7e:4c:61:f6:9a:b1:7d:09:82:45:a5:b5:
8c:b1:88:f6:cc:ba:cd:c3:0c:e7:3f:a5:57:ca:4e:fb:82:37:
34:7e:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:56 2026 by rpki-client