Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: rrB4Nbih5Ec/irXfZRWN/MtlB3lO6QMxtrr+7+j0qnM=
Subject key identifier: A4:4E:D0:4A:A7:43:46:0A:23:ED:99:6B:61:0F:D1:67:EF:EB:FC:DA
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019D2771B8D117017C9B8B26BEA75E4D6C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 06D4
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: /Mv0hAlQ/Tf37uDVswTKw5gw59hIIyUCVq015F6xKzM=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b8:d1:17:01:7c:9b:8b:26:be:a7:5e:4d:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=a44ed04aa743460a23ed996b610fd167efebfcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:47:43:de:6e:27:40:97:a4:b5:06:1e:4f:
75:39:76:d5:aa:15:96:96:eb:db:71:c2:2d:9e:7c:
74:6d:63:0a:02:67:e3:e8:9d:df:1f:7b:07:26:52:
53:e3:bc:28:ab:d8:00:9b:e2:83:ba:43:a1:cc:24:
13:83:e9:cf:8b:aa:e1:84:9b:13:fd:b6:2a:25:00:
af:4a:fc:f3:58:ec:f6:5a:c8:1f:89:d9:77:0e:53:
50:91:e3:a6:4c:52:8b:6e:86:d2:1c:d8:91:cb:85:
c4:40:4e:e5:be:0a:a3:2d:27:58:02:4e:16:a7:75:
51:c4:bf:a3:fa:5f:8e:d2:8b:fc:b3:ce:ef:1d:55:
c9:14:4e:d4:d8:17:9a:63:8f:4f:1f:e5:d9:ba:e2:
7d:64:6b:37:15:7a:78:4a:b0:df:de:c3:bd:23:eb:
5e:78:f7:bb:49:88:5c:a3:ca:1a:13:d0:7d:27:a7:
de:80:9d:3b:ef:ed:af:42:97:24:3f:d5:ea:6f:db:
bd:38:9d:6e:db:71:a7:64:37:0c:bd:8d:c4:e2:ba:
cf:73:a7:63:2f:ab:df:e4:87:a0:55:3e:71:1a:77:
4c:f7:c9:d2:50:01:a3:23:91:7a:3b:e1:5a:54:d0:
74:c4:00:50:7d:8c:2b:69:24:17:32:86:1b:52:66:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4E:D0:4A:A7:43:46:0A:23:ED:99:6B:61:0F:D1:67:EF:EB:FC:DA
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:44:ff:9c:86:d5:df:fc:b3:ac:af:bb:94:3e:31:72:8c:
58:d7:8b:8d:1a:ef:ac:07:a0:71:66:51:8f:a2:40:ac:e3:0f:
d5:68:10:cd:64:84:ff:4f:70:3b:63:88:04:81:50:7c:e2:df:
17:22:87:24:38:c0:13:b3:20:05:b2:0c:b9:ed:11:2b:05:b1:
d9:48:62:74:cd:e0:e5:3b:cf:eb:53:b5:26:79:5d:24:c2:ac:
e7:5c:1b:23:c0:71:20:34:01:57:4f:00:5e:24:66:ca:fe:e6:
3b:d4:5d:01:6b:5a:d6:80:08:56:cf:d5:fd:4c:ce:ed:2f:0a:
db:b4:b6:30:7a:87:39:cb:f9:d2:c7:68:ad:84:58:ca:c0:ce:
82:fe:f0:db:42:4e:5a:f2:b1:64:67:be:0f:96:63:fe:6e:b3:
98:22:4a:14:3b:47:9f:b8:4e:be:a7:2c:fb:72:98:85:3f:a1:
32:73:94:be:08:70:59:2e:d8:a7:78:5c:14:7d:e8:6a:42:d4:
0e:3e:50:53:72:f7:49:38:97:73:43:cd:de:a9:13:7b:fa:0e:
8e:1a:bf:ef:4b:44:2b:f1:95:d6:7b:fa:aa:d6:29:da:f9:33:
08:f2:98:2e:61:f1:a8:56:12:0c:ce:bc:d5:b8:b6:47:24:ec:
d3:6d:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:17 2026 by rpki-client