Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: XvHwXR/0FinQlsj0lmNgojuYzCfwi5rVoatBUNTPxoY=
Subject key identifier: 8C:3F:89:FE:90:2B:F9:86:89:1C:65:04:42:32:68:B8:99:83:67:3E
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019E1D905F90148457772E799DE14F9AB0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 0754
Signing time: Tue 12 May 2026 19:01:01 +0000
Manifest this update: Tue 12 May 2026 19:01:01 +0000
Manifest next update: Wed 13 May 2026 19:01:01 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: 1Nhil7vEdersOfenh4RlwwCCKj+tYQ8EP8lg55jFWZU=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: oMGIzpCIk1MpYh7JUJDeE6V61o8.roa (hash: UWABj3txYPzJG90mw1O5Kxp8Tsmo7+bGd8ThwRqlhzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5f:90:14:84:57:77:2e:79:9d:e1:4f:9a:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: May 12 19:01:01 2026 GMT
Not After : May 13 19:01:01 2026 GMT
Subject: CN=8c3f89fe902bf986891c6504423268b89983673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:4d:29:97:7b:df:c7:5b:d5:a8:44:37:12:
4f:70:9d:ed:bb:92:7e:cb:d6:ad:02:dd:ef:0d:6b:
53:a5:f1:b0:c6:98:51:20:62:78:a3:8d:83:f1:dc:
af:6c:de:da:55:6e:16:29:53:6c:a4:f2:75:cc:46:
6a:ce:92:28:6c:63:5e:07:b6:0b:0e:c2:37:36:47:
e0:dc:b1:0a:e1:da:10:1e:fb:4c:ef:48:cc:d2:c2:
b4:95:a0:bd:7c:89:11:47:31:59:4e:fe:93:14:65:
44:40:fa:31:11:fc:4f:ea:2a:f4:0d:96:b4:28:4d:
31:32:a6:9d:41:5d:33:20:f7:bc:f8:7c:3e:9b:67:
9c:64:c3:cb:e1:76:82:c9:40:76:75:fc:23:f1:16:
c9:0b:36:75:8d:5d:3e:ad:0b:4b:bb:9b:ac:59:1e:
fe:d5:5b:64:f6:95:76:b1:73:0b:a5:08:e9:f8:07:
c4:b1:95:4f:6d:33:cc:95:cf:c5:e5:8a:67:06:bf:
e7:e1:fe:87:2a:59:7e:db:dd:b0:ea:33:66:86:d5:
6d:50:cc:cb:c1:bb:b4:42:13:22:b5:8d:00:8a:d3:
01:4f:5d:79:96:87:2f:ad:8d:e3:2b:72:a0:ae:2d:
c1:13:9a:aa:33:b2:1a:2c:f3:ef:00:a3:e3:ea:18:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:89:FE:90:2B:F9:86:89:1C:65:04:42:32:68:B8:99:83:67:3E
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:82:b2:1f:38:98:30:73:3e:7e:39:50:88:ef:ba:c0:e6:ba:
2e:a2:00:60:91:5b:37:04:a4:d5:36:92:9b:b6:53:78:90:4f:
11:53:44:7c:55:25:1a:c9:5a:e8:b9:eb:c8:4e:05:b8:c8:45:
b0:26:3b:55:21:73:e5:e9:2f:c6:f6:f4:3d:24:81:9f:e6:f5:
f4:83:61:70:28:2d:f3:1d:ca:d6:fd:22:b4:7f:b4:27:ed:da:
b4:a4:2f:17:b1:12:2c:ad:63:6c:d4:78:2a:22:16:92:96:12:
65:48:0a:57:e7:9c:fe:37:67:29:ec:01:4f:89:f7:a7:c8:15:
ec:c4:13:96:bb:88:55:d7:40:45:31:b3:63:70:56:5f:11:43:
55:e2:fa:ff:92:a5:08:52:a6:ce:5a:2f:54:05:36:7d:92:d0:
1a:db:04:61:7a:2d:1e:07:58:8d:65:2f:91:13:83:51:7f:1f:
9c:35:ce:ab:19:2d:a5:9d:12:69:3a:3d:9a:cd:40:bf:7a:52:
5a:c6:31:69:3b:42:69:e2:ff:4b:26:2d:4f:29:1a:4b:1d:69:
f2:7e:57:d4:1d:be:ce:65:f9:48:37:2b:95:fe:18:c5:2c:ae:
04:7d:10:b3:4a:fe:14:d8:9b:1c:57:c3:f1:d5:7f:08:20:51:
f8:bd:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:37 2026 by rpki-client