Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: yArN4ZZSpX+qC9Tw3zXbCb3x86NtkDRDOpdDJi8ax6c=
Subject key identifier: 26:53:93:B6:EC:7B:C9:C7:C6:96:3F:88:9B:C0:89:2B:83:82:70:94
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019FAD1A8616A2F6124A51C3628137726949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 0824
Signing time: Wed 29 Jul 2026 09:00:24 +0000
Manifest this update: Wed 29 Jul 2026 09:00:24 +0000
Manifest next update: Thu 30 Jul 2026 09:00:24 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: qVqtShS80aH0lNEivIIE1Jrqsove0mORqi6hfeW4yFc=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:86:16:a2:f6:12:4a:51:c3:62:81:37:72:69:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jul 29 09:00:24 2026 GMT
Not After : Jul 30 09:00:24 2026 GMT
Subject: CN=265393b6ec7bc9c7c6963f889bc0892b83827094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:1f:24:c2:a0:3c:0a:de:00:99:11:be:9a:
38:bf:b1:53:9f:64:3b:4a:da:69:15:11:6a:a3:be:
41:af:f0:19:3b:70:d7:80:02:64:36:18:da:ec:66:
30:4c:fa:36:37:3a:f9:79:0a:b3:b6:dd:f9:a5:e2:
fb:96:d7:d9:46:a7:01:b0:4e:de:e4:cc:1a:e4:f0:
43:bc:43:2d:9c:1b:be:1d:71:41:e7:4f:7e:21:85:
e3:91:8a:4d:2d:0f:85:4e:5c:83:fa:d4:45:06:41:
d4:9a:5a:0c:91:a2:10:36:9d:d6:f3:2d:26:aa:2e:
06:5f:ba:6f:ec:2e:47:db:f4:c6:77:79:f1:f2:06:
70:a4:2f:11:f2:aa:95:b6:f2:dc:7a:75:e2:b1:e6:
e8:0a:14:b1:aa:de:69:50:63:a8:e9:9b:2a:45:74:
0e:cb:84:cd:81:97:05:31:46:18:3e:a1:78:f2:59:
83:06:91:f3:93:e0:3e:c9:3d:72:9f:14:15:47:5e:
d3:de:8e:97:42:ca:8d:33:da:ea:7e:ec:f6:65:84:
4f:f2:ee:23:03:a5:b7:bc:44:66:41:d5:6b:ff:b6:
d2:7c:39:f0:d2:49:17:0a:7e:c8:13:eb:2b:7c:49:
a9:16:4d:22:2f:68:2b:aa:53:97:c6:7b:5a:67:88:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:93:B6:EC:7B:C9:C7:C6:96:3F:88:9B:C0:89:2B:83:82:70:94
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:54:67:e1:f0:79:72:1f:91:2d:63:59:63:0a:73:2d:41:88:
47:4d:ff:ce:62:3d:8c:f9:da:f2:9d:14:b3:8d:db:7a:66:ac:
b7:13:0b:c9:3b:5b:6b:20:40:45:68:02:e2:e0:80:6c:a9:8f:
67:82:97:7c:2f:77:cc:37:cc:b5:70:a4:ae:b9:45:fc:07:33:
9f:94:5f:ae:11:29:9f:6c:ae:2a:8d:17:43:b5:12:26:04:0b:
ba:99:5d:25:a5:6a:36:a3:d1:c0:de:67:4e:f5:3b:a7:11:90:
09:56:27:86:5f:3f:83:bc:bb:4d:dc:de:84:b5:70:8d:67:05:
73:09:29:75:da:05:af:b2:11:9d:b0:29:2b:ca:b4:5a:e4:f8:
61:c0:9b:35:25:4a:27:ea:13:7c:7b:17:f9:44:4a:3e:a6:e2:
6b:f9:80:69:23:e8:78:b7:8a:bd:67:96:1f:4b:f9:86:da:c4:
72:d3:cc:3e:e7:f2:d8:9b:57:3e:4e:c8:59:51:6a:04:c2:be:
41:b5:a2:e3:12:00:45:d6:24:4f:33:fe:13:8b:51:0c:1f:fb:
3d:3a:4f:af:b8:1c:25:55:05:5d:3a:3d:13:58:3a:c4:94:0b:
04:9d:ab:e3:75:5b:2f:54:ce:6e:cc:9c:0d:07:6b:88:10:eb:
99:f9:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:40:47 2026 by rpki-client