Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: SerrBPlBpSadcTaKXJM6E3MxS8wE+GLnoHwS1re5oAI=
Subject key identifier: 49:C0:C2:F2:A4:B7:48:3A:43:6F:EA:D0:35:D0:A3:13:88:6A:2C:ED
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019D9B5083D18C8EFDE2791F8FDEB61F5E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 0710
Signing time: Fri 17 Apr 2026 12:00:38 +0000
Manifest this update: Fri 17 Apr 2026 12:00:38 +0000
Manifest next update: Sat 18 Apr 2026 12:00:38 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: tEPZjIItJFd9WJFLEkDlrU/Hj8ANNF0dbVUy8UX735c=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:83:d1:8c:8e:fd:e2:79:1f:8f:de:b6:1f:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Apr 17 12:00:38 2026 GMT
Not After : Apr 18 12:00:38 2026 GMT
Subject: CN=49c0c2f2a4b7483a436fead035d0a313886a2ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:7c:d3:0d:e3:07:1b:46:13:93:45:69:c3:
b8:30:f6:61:d8:09:78:12:3e:3e:52:85:0a:a3:ca:
71:6f:ea:49:ba:87:f9:10:95:2d:9e:10:f5:9f:24:
8b:31:50:e3:e1:75:b7:d7:4b:1d:32:f3:11:07:bc:
6e:70:8f:d6:67:94:f5:79:f7:9f:c5:0b:69:82:18:
99:41:5f:04:28:21:45:5a:9c:58:d4:d0:3a:94:e0:
ec:0d:fa:16:af:dd:7a:76:9d:3c:d1:6d:c4:c7:c5:
ad:8c:3e:ab:70:9e:9d:72:76:b0:27:85:da:0d:dd:
65:23:5c:e4:b3:07:60:a0:da:6b:4d:9c:99:a3:05:
f2:bf:b7:42:d5:5c:4a:c4:02:0f:85:3e:60:b3:89:
ab:09:04:1f:75:86:02:10:d7:62:8c:d5:c5:3e:50:
38:3d:ad:0e:61:e0:f8:ca:c2:26:57:03:c3:37:33:
8c:a7:8b:ec:33:f1:be:ad:c5:51:24:68:29:26:96:
6e:b8:22:3b:f4:e3:ad:bf:b8:7b:5c:af:ba:a2:01:
65:af:55:99:32:10:05:ae:8c:5c:6e:1f:3f:f0:58:
ff:7c:f4:be:dc:ff:4a:a2:6e:5d:7b:a7:56:a1:1b:
56:35:61:05:22:98:24:53:e3:c5:00:16:11:45:c2:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:C2:F2:A4:B7:48:3A:43:6F:EA:D0:35:D0:A3:13:88:6A:2C:ED
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:db:08:bf:e1:c2:6e:07:64:d5:01:72:59:bf:27:d4:87:c2:
14:8a:2a:ee:6f:ba:f2:e9:3f:07:ce:a2:bd:14:60:97:06:f7:
28:52:e2:27:63:8c:39:7a:25:d1:5a:dd:0c:5b:60:53:5a:43:
4e:32:f7:f7:1f:ab:b1:8c:48:a2:a5:1b:9a:a7:04:af:d0:bd:
ea:09:f9:5f:20:07:d7:e6:f8:40:c5:98:35:66:12:f8:6b:26:
52:d5:de:39:9e:84:19:49:7f:46:42:67:c6:85:80:f5:48:81:
93:9d:e3:d9:4f:08:dc:c1:e2:73:0f:7b:eb:58:7e:9f:a4:a4:
89:7e:00:f6:bd:4e:cb:1d:a1:9a:7c:27:1f:0d:c3:bd:f6:52:
dc:6f:bd:36:30:20:09:e7:64:44:a5:2f:04:8d:06:9d:1c:6a:
d0:77:5e:15:a3:78:50:b6:ef:0c:e2:05:72:a5:5c:a6:4f:bf:
20:79:2e:e8:e2:7a:fc:9a:44:e5:3b:5a:f8:e2:59:05:08:73:
23:a1:eb:41:1d:c3:f5:34:da:92:75:29:97:d4:d2:e2:0a:d5:
5a:68:dd:68:cb:29:56:16:1a:c9:61:1e:4d:b3:27:75:6c:71:
96:08:92:9f:1a:e0:c7:bc:0e:a3:cd:5c:a2:61:19:54:70:91:
59:21:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:49 2026 by rpki-client