Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: IhY4DxT8PKHL10FZhUUAkfz6cyLVo3kH3Eu1mj0bwM4=
Subject key identifier: 39:0E:8A:04:F0:FB:9E:A7:57:DB:BF:4D:09:85:C2:CE:FF:96:EA:09
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 01A0CBFE2620D53DA584F04794C68398C330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 08E7
Signing time: Wed 23 Sep 2026 02:00:25 +0000
Manifest this update: Wed 23 Sep 2026 02:00:25 +0000
Manifest next update: Thu 24 Sep 2026 02:00:25 +0000
Files and hashes: 1: 6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (hash: 5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=)
2: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: evOgmtufr72e2LAeIVXsWBTjpGkHq53UfKIvvZladQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:26:20:d5:3d:a5:84:f0:47:94:c6:83:98:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Sep 23 02:00:25 2026 GMT
Not After : Sep 24 02:00:25 2026 GMT
Subject: CN=390e8a04f0fb9ea757dbbf4d0985c2ceff96ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:0b:e0:5f:01:12:e8:87:30:a4:76:e4:71:
24:5e:3e:79:4d:86:70:de:2c:05:c1:fc:8b:e4:e9:
e1:6e:bc:2d:7d:a5:88:1c:37:25:e1:88:37:6c:f3:
a8:64:ab:e7:1e:ba:39:b7:0d:7d:4b:c8:ac:a4:d9:
73:33:fb:2c:28:af:a5:34:0f:1b:41:d5:e6:51:59:
41:2d:ba:67:f8:6e:72:69:25:b6:fa:c5:b4:4f:5d:
2f:31:2e:a7:f4:76:e2:4f:f4:01:93:c0:65:5c:2c:
a1:10:81:49:63:f0:e3:74:5c:88:fe:9f:b7:e1:67:
53:1b:af:93:d5:37:94:30:38:98:d1:6c:06:57:28:
06:de:7d:3d:e7:be:41:a6:7e:73:6b:bb:d4:5a:66:
76:3c:fa:e3:88:6b:f9:d6:ce:ff:9a:03:d8:97:e1:
4d:2a:9a:4d:3a:8f:28:20:4c:ce:e9:45:d6:fa:37:
17:8d:ff:5e:6d:c5:11:e7:98:de:b9:9a:b0:9b:59:
7d:9b:ef:cc:ed:37:cb:9b:18:95:63:90:b9:49:47:
3a:5b:cb:cc:6a:72:81:ba:7a:57:89:42:da:d3:3c:
23:36:a6:88:9e:8f:e3:2b:29:2d:b7:36:52:a5:9f:
b1:78:1f:c0:7a:02:7c:d5:79:09:5b:e1:04:24:ce:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:8A:04:F0:FB:9E:A7:57:DB:BF:4D:09:85:C2:CE:FF:96:EA:09
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:49:5a:72:8a:3d:6a:42:6e:d8:aa:7e:51:ab:7c:3e:55:
8d:50:5b:2a:01:39:77:b6:85:f7:af:74:a8:e9:f6:ed:92:0a:
16:33:47:78:d2:dd:a5:58:05:d4:4c:af:96:93:54:79:6e:12:
00:e9:bd:64:88:ae:eb:55:da:75:0d:9f:6f:1b:c3:99:bf:c2:
3e:db:ec:d3:65:4e:f6:ba:5b:01:64:a3:75:98:fc:28:3e:18:
6b:d6:a1:82:5c:ba:d9:f3:db:04:62:8a:d0:28:96:aa:83:b0:
20:fe:1a:be:d5:d8:b6:29:5f:08:2b:eb:88:00:72:2f:56:ea:
bf:dc:7e:b7:d9:21:95:a1:29:7f:27:df:b3:68:ac:cd:6e:c9:
ce:51:40:09:77:8e:37:8a:34:ec:bd:d8:1a:95:2f:21:2e:e9:
02:e1:3c:f4:bb:76:f8:c9:2f:2c:bf:50:c8:de:46:35:1e:2c:
32:c5:fd:b0:ed:fc:4b:b5:7f:02:12:5f:66:a3:6f:c8:ad:19:
6c:8d:8c:9c:9e:00:a0:b0:e0:99:e9:85:60:cd:56:89:96:2c:
73:e9:67:9b:42:e9:30:f9:6f:2d:ce:10:33:f3:d0:ff:f3:58:
fe:96:1b:35:12:13:97:8e:2d:b7:39:5a:de:91:ff:e9:73:dc:
63:fd:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:18:07 2026 by rpki-client