Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: IMcM2hMqaIDuHZlTAk+o5MaCQyaVhHD/Iyfyb2E0vuE=
Subject key identifier: E2:7B:26:07:51:6B:40:4A:99:66:67:2F:9A:09:4C:9B:F8:78:FC:8F
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01A0E4076B342CB99E2D025B034C5B88289E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 08C5
Signing time: Sun 27 Sep 2026 18:01:26 +0000
Manifest this update: Sun 27 Sep 2026 18:01:26 +0000
Manifest next update: Mon 28 Sep 2026 18:01:26 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: oHnm5fjlpCa30CMduECMgY0wsQX/EOgXCvMrFyJNQh0=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:6b:34:2c:b9:9e:2d:02:5b:03:4c:5b:88:28:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Sep 27 18:01:26 2026 GMT
Not After : Sep 28 18:01:26 2026 GMT
Subject: CN=e27b2607516b404a9966672f9a094c9bf878fc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:99:80:3f:21:34:44:a1:3f:18:46:19:88:
4d:b3:ea:3b:ef:84:94:44:ad:26:83:e9:cd:31:f0:
3c:7a:63:b8:59:59:d6:93:3d:95:3e:52:8c:dd:5b:
f1:38:59:52:7b:4b:c0:33:48:19:45:40:83:fb:d0:
bf:a8:8d:53:95:bd:ed:f3:a9:72:be:37:51:05:76:
d3:a0:ce:df:6c:93:d0:e9:5f:ad:c5:c8:58:0f:c5:
28:e7:ec:b6:25:ea:db:66:c4:e6:0f:0d:00:10:b1:
b3:97:5f:46:3c:e3:52:dd:cf:39:a8:b7:88:fc:fb:
a3:68:04:49:fa:4e:7b:9e:ed:a3:46:d1:ce:ef:cd:
9d:33:fa:50:be:57:f2:57:12:6a:25:c5:34:ae:75:
99:b6:56:7c:9a:eb:ce:49:72:e3:e4:85:4b:d9:54:
e0:fc:29:75:ba:7f:cc:6b:4e:f7:9f:dc:ab:17:b8:
e3:f7:ca:bb:88:d8:0d:b8:e3:86:02:88:67:74:fb:
6c:46:cb:45:4b:2e:b4:9c:ff:71:b0:44:13:4c:bf:
83:d6:98:5c:a2:d1:a3:5d:78:21:be:a7:0a:55:d0:
21:63:3d:ea:f0:75:58:28:35:f1:51:62:52:cc:d6:
a7:cf:dd:7b:cb:6b:4e:7f:53:26:f0:92:b2:2b:99:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:26:07:51:6B:40:4A:99:66:67:2F:9A:09:4C:9B:F8:78:FC:8F
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:62:9c:71:b5:a3:b6:41:77:7f:b3:ff:4d:95:62:65:47:e4:
58:d3:41:15:12:f4:66:a2:ea:a5:f1:1e:05:7e:06:96:ad:8f:
3a:14:ed:42:45:ec:fe:8d:44:01:34:8c:3a:a6:7c:fe:01:ee:
cd:d1:87:85:eb:2c:de:3e:e6:b0:4a:f0:e4:2a:bd:8b:cb:3e:
c7:1a:57:07:98:11:0a:95:d8:34:69:67:15:ff:7f:33:62:bf:
92:89:22:c1:63:b1:b5:4c:49:ff:82:96:75:a2:70:6f:46:d6:
b2:dc:9a:a1:d2:5c:e4:79:cb:b7:7c:c2:35:10:ed:56:4d:ce:
e9:d8:09:ff:49:46:da:75:70:cc:30:ff:cb:f6:55:da:36:50:
71:6a:2e:2a:47:b3:5e:de:5f:4b:00:f3:df:ba:cd:08:14:af:
71:0a:89:84:ee:9c:86:ca:24:c2:69:4f:f8:b5:bf:06:14:3d:
46:e2:4d:83:f0:c8:e0:d5:94:c5:5f:88:d1:90:cb:74:f2:52:
75:b9:16:0a:1d:1d:2a:41:95:df:d1:eb:20:30:e3:82:d8:ae:
bf:95:0a:3f:d8:c2:ce:85:e9:e2:3f:67:fc:b1:ea:02:a1:a4:
9b:32:8f:ea:38:a5:e4:0d:c2:b0:a6:cb:80:58:47:5f:ed:43:
99:e8:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:36:12 2026 by rpki-client