Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: z7e7ke6kTFlckgrwphpsu7WsEuo6+YkVkMir/mJ8GoY=
Subject key identifier: 57:CF:31:00:CE:2A:AA:ED:1A:41:E3:58:44:BC:60:D9:43:48:AB:10
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01A0D8728946D6CA0AD7A57C5E0C9B273CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 08BF
Signing time: Fri 25 Sep 2026 12:02:59 +0000
Manifest this update: Fri 25 Sep 2026 12:02:59 +0000
Manifest next update: Sat 26 Sep 2026 12:02:59 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: 6AjMBmIEEs6AbBbBHvCU+6hNjBdYrSm7bVRwP2orlhw=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:89:46:d6:ca:0a:d7:a5:7c:5e:0c:9b:27:3c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Sep 25 12:02:59 2026 GMT
Not After : Sep 26 12:02:59 2026 GMT
Subject: CN=57cf3100ce2aaaed1a41e35844bc60d94348ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:2b:ce:8c:d0:7d:15:3d:da:89:2a:ff:15:
0d:f6:26:74:4e:78:4d:79:e4:cb:ee:91:f4:29:55:
db:2e:fe:06:30:e0:63:60:1c:4b:ac:f3:a7:a4:e8:
a4:38:4b:3d:0e:af:29:bf:55:cd:71:fc:48:bf:67:
14:dd:25:72:ac:53:59:5e:1e:9b:96:db:4b:35:c1:
f2:34:04:9a:b3:30:72:c5:8e:b4:c6:99:98:be:03:
03:39:ca:8e:a6:ed:c7:f3:d8:b3:3f:33:99:8f:b3:
a5:89:c6:62:16:0d:c9:08:5a:aa:60:54:ab:7f:1a:
a8:73:6e:9d:25:d5:8b:24:81:59:00:56:64:46:eb:
50:d2:c7:7a:d8:30:23:81:cf:c7:7d:5a:1f:5e:0e:
60:0c:5c:e2:2b:4d:b2:e3:4e:76:c1:fd:45:2f:57:
26:dc:1b:86:4a:e9:a8:cd:14:24:7d:7f:a1:74:b7:
7a:75:7f:31:b2:42:b1:c0:b7:61:d7:f8:5e:8b:1a:
96:ee:27:dd:7b:18:b6:da:07:da:54:a8:28:12:8b:
53:a1:4c:b2:2a:ba:cb:34:1e:b8:3e:8a:d6:61:34:
de:77:ba:00:16:0c:d1:c1:a8:74:29:ab:63:ef:f4:
99:88:9c:2c:68:cc:44:9d:7d:6a:5a:1a:b4:55:85:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:31:00:CE:2A:AA:ED:1A:41:E3:58:44:BC:60:D9:43:48:AB:10
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:67:fc:dd:78:1d:7a:71:b2:83:b6:d2:d1:35:57:89:a7:e9:
6f:84:24:33:db:2a:77:5a:d7:72:92:68:03:98:bb:c4:0a:42:
ee:8d:4b:dd:61:b9:83:f2:d8:6d:2e:95:4d:b5:78:9a:57:cd:
f1:f5:9e:82:2a:de:b0:1f:a1:66:99:f3:09:e6:89:d3:e9:91:
59:3e:b3:b5:9b:83:a1:5d:0e:4e:e4:9a:f4:01:35:3c:87:f7:
84:0f:73:f2:f8:0a:53:88:59:cd:51:b7:5a:53:e3:84:9d:3b:
14:48:28:d4:a7:3d:c6:86:b7:d3:45:59:38:a1:da:7b:de:66:
e6:5e:fc:91:db:51:b8:46:de:70:f2:9c:43:0a:49:c8:74:b5:
f4:5d:5f:ed:70:09:90:de:28:1c:55:c7:d6:fb:7a:9b:fc:9f:
35:0a:e0:04:cf:98:20:12:ba:fa:02:01:a1:41:e0:c8:8f:ee:
d1:af:21:1e:f8:50:44:4f:38:d1:bc:4f:c4:5c:b0:cf:d6:84:
32:1d:d7:62:9e:7e:cd:1a:34:ce:5e:5e:84:f9:53:4e:98:97:
77:98:23:97:d0:df:65:6a:fa:98:55:57:ae:8c:63:af:4e:6e:
48:65:39:16:a3:93:07:a5:e3:5d:07:ec:16:d1:11:43:c5:4b:
fd:bd:77:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcolG1soK16V8XgybJzynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw
MWUwNTkwHhcNMjYwOTI1MTIwMjU5WhcNMjYwOTI2MTIwMjU5WjAzMTEwLwYDVQQD
Eyg1N2NmMzEwMGNlMmFhYWVkMWE0MWUzNTg0NGJjNjBkOTQzNDhhYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24YrzozQfRU92okq/xUN9iZ0TnhN
eeTL7pH0KVXbLv4GMOBjYBxLrPOnpOikOEs9Dq8pv1XNcfxIv2cU3SVyrFNZXh6b
lttLNcHyNASaszByxY60xpmYvgMDOcqOpu3H89izPzOZj7OlicZiFg3JCFqqYFSr
fxqoc26dJdWLJIFZAFZkRutQ0sd62DAjgc/HfVofXg5gDFziK02y4052wf1FL1cm
3BuGSumozRQkfX+hdLd6dX8xskKxwLdh1/heixqW7ifdexi22gfaVKgoEotToUyy
KrrLNB64PorWYTTed7oAFgzRwah0Katj7/SZiJwsaMxEnX1qWhq0VYVA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfPMQDOKqrtGkHjWES8YNlDSKsQMB8GA1UdIwQY
MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt
NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw
LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWf83Xgd
enGyg7bS0TVXiafpb4QkM9sqd1rXcpJoA5i7xApC7o1L3WG5g/LYbS6VTbV4mlfN
8fWegiresB+hZpnzCeaJ0+mRWT6ztZuDoV0OTuSa9AE1PIf3hA9z8vgKU4hZzVG3
WlPjhJ07FEgo1Kc9xoa300VZOKHae95m5l78kdtRuEbecPKcQwpJyHS19F1f7XAJ
kN4oHFXH1vt6m/yfNQrgBM+YIBK6+gIBoUHgyI/u0a8hHvhQRE840bxPxFywz9aE
Mh3XYp5+zRo0zl5ehPlTTpiXd5gjl9DfZWr6mFVXroxjr05uSGU5FqOTB6XjXQfs
FtERQ8VL/b13rQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:00:35 2026 by rpki-client