Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: jidHHXf/05DcjpbBikUChNcGTu8nbmbjOrVb1AuVNHA=
Subject key identifier: D2:AE:AA:67:74:CD:9A:62:FF:51:5B:64:C3:24:14:52:87:11:C1:7E
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019FA0A913F405DC811D7B82640ED1CA5496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 084C
Signing time: Sun 26 Jul 2026 23:01:02 +0000
Manifest this update: Sun 26 Jul 2026 23:01:02 +0000
Manifest next update: Mon 27 Jul 2026 23:01:02 +0000
Files and hashes: 1: 6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (hash: 5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=)
2: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: yY20u67dQhw2k867lAShoDqTvUgQHpKZ64YejoPZgw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:13:f4:05:dc:81:1d:7b:82:64:0e:d1:ca:54:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Jul 26 23:01:02 2026 GMT
Not After : Jul 27 23:01:02 2026 GMT
Subject: CN=d2aeaa6774cd9a62ff515b64c32414528711c17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:bd:36:b2:9d:c8:bb:7a:cc:b6:7e:44:cf:
b3:44:46:e9:a2:45:fa:3d:5d:06:9f:79:38:13:e0:
92:a2:3c:ac:60:d0:56:23:ad:88:fd:d8:df:9f:3a:
42:82:fc:45:4b:fb:5b:46:f6:ff:29:c4:bc:5b:ca:
d7:80:8f:e1:8a:4d:a0:3c:92:d0:8c:11:64:97:9f:
76:25:6e:67:98:b6:d5:a1:ad:69:ff:3b:e9:f9:fa:
83:2a:75:76:37:4c:77:5a:66:1e:e4:73:2c:d8:ec:
58:6e:7a:a1:15:7d:8d:52:b5:f3:b8:f1:4a:4e:cf:
95:88:91:a8:e2:08:c1:66:9f:4c:d1:e8:ca:0f:6b:
b9:57:73:8b:6f:f9:ed:c5:80:7f:55:de:c4:7b:0f:
ed:5b:cf:87:fd:56:2b:37:ba:aa:e6:5d:51:93:4d:
d4:a1:c7:e6:d5:1f:5c:a0:82:03:34:df:22:5b:7a:
8e:13:b2:e3:4f:cc:a4:e8:07:32:be:73:e1:f6:93:
91:96:eb:75:6b:bb:4c:53:32:af:1e:c7:d9:ab:30:
a0:04:64:5a:c4:99:93:e2:10:62:3d:48:d2:b7:e8:
5c:63:37:b0:47:4e:a9:cf:9c:8a:01:f2:bf:e1:f3:
9c:ea:69:12:a0:6e:b0:af:75:bf:56:73:b9:1c:fa:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:AA:67:74:CD:9A:62:FF:51:5B:64:C3:24:14:52:87:11:C1:7E
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:1b:72:87:5d:ef:30:f4:de:ab:7b:51:76:a9:48:e3:67:
20:5b:3c:fe:02:c7:e0:83:bf:36:e2:ab:4d:50:c5:bb:1a:d2:
c3:b5:36:0d:3f:e0:09:41:b0:4e:9a:86:19:ba:de:bf:8d:71:
03:7f:99:c2:d3:1a:83:d2:1a:f4:aa:11:39:ea:0f:70:28:7b:
7c:8c:29:80:2d:a6:10:67:83:3b:f9:c1:87:2a:88:fd:d2:e1:
a1:ff:eb:4c:de:fd:01:a7:93:2e:8d:4e:54:f9:21:5a:48:d5:
da:75:f1:9f:c3:44:3a:67:79:0d:9e:97:ab:36:72:89:b2:5f:
35:f3:dd:85:0a:94:c2:70:9d:df:de:c0:cd:8c:ee:1d:3a:b7:
89:fb:77:41:56:bd:5b:6a:52:96:43:7a:ad:fb:bc:cd:9c:a3:
38:62:58:0b:37:66:72:61:f2:2b:a8:f2:f3:a0:7b:36:c8:71:
60:be:47:ef:73:b2:65:a0:fc:52:d3:fe:1c:48:a6:26:67:60:
fe:70:c6:a0:4e:af:68:98:f4:0c:bc:c0:9e:e5:d3:59:53:54:
4c:53:f0:51:db:71:da:b9:11:dc:49:e2:e8:74:db:e3:f4:3e:
fd:05:04:c7:f5:9a:e9:c2:c8:2d:ca:fa:69:73:ba:a5:e7:40:
c1:54:57:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqRP0BdyBHXuCZA7RylSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjJhZDYwOTcyOWY4ZWYxMTEyYWRiYzE1OGY1MTEyMTVi
MGYzOWUwHhcNMjYwNzI2MjMwMTAyWhcNMjYwNzI3MjMwMTAyWjAzMTEwLwYDVQQD
EyhkMmFlYWE2Nzc0Y2Q5YTYyZmY1MTViNjRjMzI0MTQ1Mjg3MTFjMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwq9NrKdyLt6zLZ+RM+zREbpokX6
PV0Gn3k4E+CSojysYNBWI62I/djfnzpCgvxFS/tbRvb/KcS8W8rXgI/hik2gPJLQ
jBFkl592JW5nmLbVoa1p/zvp+fqDKnV2N0x3WmYe5HMs2OxYbnqhFX2NUrXzuPFK
Ts+ViJGo4gjBZp9M0ejKD2u5V3OLb/ntxYB/Vd7Eew/tW8+H/VYrN7qq5l1Rk03U
ocfm1R9coIIDNN8iW3qOE7LjT8yk6AcyvnPh9pORlut1a7tMUzKvHsfZqzCgBGRa
xJmT4hBiPUjSt+hcYzewR06pz5yKAfK/4fOc6mkSoG6wr3W/VnO5HPo/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKuqmd0zZpi/1FbZMMkFFKHEcF+MB8GA1UdIwQY
MBaAFAoirWCXKfjvERKtvBWPURIVsPOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEt
ZTVkOWE2ZTQ4NzQ2LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEtZTVkOWE2ZTQ4NzQ2
LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbIbcodd
7zD03qt7UXapSONnIFs8/gLH4IO/NuKrTVDFuxrSw7U2DT/gCUGwTpqGGbrev41x
A3+ZwtMag9Ia9KoROeoPcCh7fIwpgC2mEGeDO/nBhyqI/dLhof/rTN79AaeTLo1O
VPkhWkjV2nXxn8NEOmd5DZ6XqzZyibJfNfPdhQqUwnCd397AzYzuHTq3ift3QVa9
W2pSlkN6rfu8zZyjOGJYCzdmcmHyK6jy86B7NshxYL5H73OyZaD8UtP+HEimJmdg
/nDGoE6vaJj0DLzAnuXTWVNUTFPwUdtx2rkR3Eni6HTb4/Q+/QUEx/Wa6cLILcr6
aXO6pedAwVRXkQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:31 2026 by rpki-client