Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: +4SeJ75KnOGCeIEWq6kFxysRoruG7YRGbIUaI8msnk0=
Subject key identifier: C0:F0:F9:0C:A7:92:63:B3:93:36:19:86:CC:50:C6:57:52:8E:BC:03
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019D254CDF2C6735A5A4CC76D1E1E7D1744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 0703
Signing time: Wed 25 Mar 2026 14:01:27 +0000
Manifest this update: Wed 25 Mar 2026 14:01:27 +0000
Manifest next update: Thu 26 Mar 2026 14:01:27 +0000
Files and hashes: 1: 6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (hash: 5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=)
2: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: jF0l9lE0uD05ipb+HFA842mXGS4UjdJJDNWIl6pbRIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:df:2c:67:35:a5:a4:cc:76:d1:e1:e7:d1:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Mar 25 14:01:27 2026 GMT
Not After : Mar 26 14:01:27 2026 GMT
Subject: CN=c0f0f90ca79263b393361986cc50c657528ebc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:20:ec:87:e6:55:52:1d:6c:3b:41:a9:e0:
5a:de:ed:e1:f2:7e:2a:33:e0:be:71:15:a7:19:f2:
61:2a:30:b1:10:dc:7e:b0:8f:d6:0a:1e:e6:d6:2d:
16:6b:98:95:79:ce:3d:c1:f3:a2:b0:43:78:30:5f:
fb:16:c3:c8:90:23:01:83:f9:f1:d4:22:ac:e8:eb:
8e:59:b9:3c:98:9c:6c:73:b1:d4:75:e9:be:4c:df:
2a:67:8d:ca:e7:25:12:75:ec:a0:7e:fa:1e:ac:eb:
db:8f:74:83:f1:d1:b2:3a:e2:f1:18:a9:84:cf:bf:
94:27:a9:01:01:eb:5a:88:fd:3a:3e:48:e4:a6:24:
31:4d:05:e1:8b:71:de:62:79:5f:b4:35:8c:0a:a6:
ff:60:bf:d5:fd:c1:c8:67:35:8b:a0:64:02:e7:ce:
6b:6f:62:2e:55:ad:2d:24:1e:53:06:47:a2:e2:e5:
5c:60:2d:57:e3:e0:b7:24:ec:87:e0:c9:c1:e8:92:
9d:cd:fe:a4:05:3f:a2:06:b9:05:01:13:6d:94:94:
f0:64:13:f7:a9:c4:4f:e0:63:fa:77:07:4b:a8:e7:
75:b3:ae:ca:fc:62:b3:c3:97:da:7c:2e:d9:6a:63:
b6:7c:da:4d:e4:34:82:f4:fe:37:e3:47:b9:5e:61:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F0:F9:0C:A7:92:63:B3:93:36:19:86:CC:50:C6:57:52:8E:BC:03
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d3:19:d2:24:d2:01:84:aa:6f:4c:78:b1:bc:83:62:60:cb:
7b:8d:1d:3c:79:5b:b1:9f:ad:96:a5:dc:37:89:a9:b6:e9:e6:
f7:db:36:95:84:38:03:59:8f:8a:04:6e:98:2c:e9:a3:83:3e:
be:7c:f0:21:1f:4f:00:0b:c9:4f:e6:a2:f7:13:66:b1:be:31:
17:ed:82:f4:5e:da:c0:1b:ba:91:15:4c:75:6b:5a:66:98:17:
b5:f4:18:1c:3b:da:25:81:dd:c7:07:1c:67:e9:06:67:50:bf:
8f:ed:63:cb:f1:7b:17:85:dd:7d:1e:21:8e:cf:7e:1b:da:5d:
95:51:ee:f0:60:7e:7e:f3:7f:2d:3d:18:c1:59:8e:65:c6:c6:
67:17:a3:1c:da:bc:9a:17:46:55:66:b1:b3:e1:e1:16:1c:18:
13:4e:92:14:ea:af:a6:93:62:9d:a8:0c:a8:1c:30:5a:12:62:
c5:be:25:f2:2a:3c:00:61:72:0f:70:d8:69:f0:0c:b3:d8:26:
23:12:46:d9:75:3b:8d:f1:96:87:e1:40:67:72:be:3f:55:80:
f0:2a:13:e2:93:c2:47:c2:1a:9e:c9:89:6b:71:81:e8:01:7f:
2a:a0:b1:51:f9:97:5d:cc:59:3b:4f:b3:a2:0d:12:68:2e:f0:
cf:0b:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:26 2026 by rpki-client