Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: vfMZj3689qRPZsB1X1EEgGqv2dw/XUu5k42oGCjHdY8=
Subject key identifier: 95:BF:94:1E:FA:6D:38:32:A4:26:FF:7B:EE:7C:B6:9C:C9:A3:88:12
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019E1E6C64728C251320FD45406530E5B69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 0784
Signing time: Tue 12 May 2026 23:01:20 +0000
Manifest this update: Tue 12 May 2026 23:01:20 +0000
Manifest next update: Wed 13 May 2026 23:01:20 +0000
Files and hashes: 1: 6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (hash: 5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=)
2: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: 6knDblHoihXtrCp0UQlb6N1P4AJq+2lGxocVzs5aV9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:64:72:8c:25:13:20:fd:45:40:65:30:e5:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: May 12 23:01:20 2026 GMT
Not After : May 13 23:01:20 2026 GMT
Subject: CN=95bf941efa6d3832a426ff7bee7cb69cc9a38812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:a3:df:56:53:cc:c1:23:9f:c3:49:3e:88:
13:82:7b:fa:a8:4e:a3:a4:45:4e:f8:69:9f:b4:64:
58:6e:b7:f7:99:a9:f3:6e:02:b8:e2:c4:1b:3f:66:
f6:cf:a4:a5:75:fa:bf:e7:29:5f:6a:2c:89:b1:ad:
97:f1:f2:fc:bc:05:27:2c:22:71:5c:2e:98:1b:1b:
7f:b5:f5:8b:32:ac:f5:58:ae:98:d6:33:1a:30:20:
eb:d4:13:68:37:3c:42:8d:6b:19:b5:77:40:eb:3f:
30:c5:25:81:e2:6a:04:5a:0b:76:09:10:71:b1:af:
44:be:cb:4c:ce:b0:25:92:c0:e2:76:82:24:84:eb:
4a:45:7a:1f:f2:74:5f:84:90:24:81:28:97:00:36:
a4:1a:f7:58:e5:68:82:81:66:9c:33:d9:07:f8:c2:
d0:ee:e0:6f:7f:32:cf:43:d3:68:4d:6a:e3:9e:47:
55:a4:86:83:bb:3a:5d:21:2a:e1:d0:0a:fb:0a:33:
34:9e:1a:56:98:7f:1a:06:2c:be:d1:a9:92:e3:2a:
54:e2:7d:c1:ce:33:32:8b:c1:72:35:66:4c:bc:17:
80:d2:a8:4f:5d:5a:f8:84:eb:96:4d:4f:9f:97:5f:
83:67:34:42:0c:0b:92:19:cd:68:36:7e:3f:6f:58:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:94:1E:FA:6D:38:32:A4:26:FF:7B:EE:7C:B6:9C:C9:A3:88:12
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:aa:f3:e3:a1:2a:4f:62:b1:14:11:1c:c8:cd:03:f8:d6:
55:bf:3d:65:4f:f5:a2:ac:da:d1:ef:42:7b:a1:a2:d1:5d:37:
5a:2c:ca:5c:2b:cc:ea:1e:f2:fc:d3:b8:65:28:3f:8c:7f:58:
43:5a:98:21:ec:00:f2:fe:67:d6:66:f6:38:26:76:77:a4:1c:
28:ad:58:01:e7:98:cb:b7:0d:cc:ca:28:3f:0b:08:df:47:63:
21:51:5e:93:6a:c6:49:9f:c1:cd:c9:c9:a4:bd:b0:b9:03:37:
a0:e6:b4:2c:c9:81:b4:5a:a3:71:a2:08:07:10:9a:35:1e:64:
46:81:dd:40:3b:76:a6:f6:09:60:1c:bd:b0:ee:96:19:14:79:
6c:dd:94:50:24:c2:06:eb:57:ab:30:93:1a:1d:12:d0:4b:6e:
8e:6c:21:ff:9f:b8:1f:91:cb:fc:14:72:a9:2a:e1:62:6c:5c:
00:b7:73:f3:22:a1:48:3d:9a:ee:48:cb:78:1d:be:d9:53:82:
84:fe:9e:0e:1f:aa:e5:b9:19:5d:10:58:56:5f:e0:19:a8:92:
18:98:47:6b:87:63:c2:d8:db:8a:f4:fb:fb:18:f5:fb:35:05:
a8:12:e9:a7:8a:48:49:16:24:af:4e:6f:db:8c:0e:fc:d4:8f:
06:ba:6f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebGRyjCUTIP1FQGUw5baeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjJhZDYwOTcyOWY4ZWYxMTEyYWRiYzE1OGY1MTEyMTVi
MGYzOWUwHhcNMjYwNTEyMjMwMTIwWhcNMjYwNTEzMjMwMTIwWjAzMTEwLwYDVQQD
Eyg5NWJmOTQxZWZhNmQzODMyYTQyNmZmN2JlZTdjYjY5Y2M5YTM4ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pOj31ZTzMEjn8NJPogTgnv6qE6j
pEVO+GmftGRYbrf3manzbgK44sQbP2b2z6Sldfq/5ylfaiyJsa2X8fL8vAUnLCJx
XC6YGxt/tfWLMqz1WK6Y1jMaMCDr1BNoNzxCjWsZtXdA6z8wxSWB4moEWgt2CRBx
sa9EvstMzrAlksDidoIkhOtKRXof8nRfhJAkgSiXADakGvdY5WiCgWacM9kH+MLQ
7uBvfzLPQ9NoTWrjnkdVpIaDuzpdISrh0Ar7CjM0nhpWmH8aBiy+0amS4ypU4n3B
zjMyi8FyNWZMvBeA0qhPXVr4hOuWTU+fl1+DZzRCDAuSGc1oNn4/b1hbuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW/lB76bTgypCb/e+58tpzJo4gSMB8GA1UdIwQY
MBaAFAoirWCXKfjvERKtvBWPURIVsPOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEt
ZTVkOWE2ZTQ4NzQ2LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEtZTVkOWE2ZTQ4NzQ2
LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIaq8+Oh
Kk9isRQRHMjNA/jWVb89ZU/1oqza0e9Ce6Gi0V03WizKXCvM6h7y/NO4ZSg/jH9Y
Q1qYIewA8v5n1mb2OCZ2d6QcKK1YAeeYy7cNzMooPwsI30djIVFek2rGSZ/BzcnJ
pL2wuQM3oOa0LMmBtFqjcaIIBxCaNR5kRoHdQDt2pvYJYBy9sO6WGRR5bN2UUCTC
ButXqzCTGh0S0Etujmwh/5+4H5HL/BRyqSrhYmxcALdz8yKhSD2a7kjLeB2+2VOC
hP6eDh+q5bkZXRBYVl/gGaiSGJhHa4djwtjbivT7+xj1+zUFqBLpp4pISRYkr05v
24wO/NSPBrpv4A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:45:26 2026 by rpki-client