Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: DSSRrEFR9mOEtPjuC76vJgn7i7q2MmxqjJT9PmMeNCA=
Subject key identifier: 70:61:6D:AD:91:9A:D2:59:9E:F2:DD:5A:34:69:F6:2C:CC:21:2D:5E
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019E31BB9D3079BD53F334F2901F3FFD5FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 078E
Signing time: Sat 16 May 2026 17:00:39 +0000
Manifest this update: Sat 16 May 2026 17:00:39 +0000
Manifest next update: Sun 17 May 2026 17:00:39 +0000
Files and hashes: 1: 6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (hash: 5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=)
2: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: uooHRsztJ9gTqsumDJZRTDfXpP2uXhok3crGlCAJyOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:9d:30:79:bd:53:f3:34:f2:90:1f:3f:fd:5f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: May 16 17:00:39 2026 GMT
Not After : May 17 17:00:39 2026 GMT
Subject: CN=70616dad919ad2599ef2dd5a3469f62ccc212d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:40:1c:7e:e2:0d:c9:7f:3f:c4:a9:85:35:
33:84:f3:72:a3:b9:62:a5:fd:f5:9b:d8:ab:18:d0:
7a:9a:72:8a:89:ea:f6:46:fc:d9:94:0b:ce:8f:8c:
95:7a:3f:f5:07:3d:d5:65:0f:5a:82:99:3d:e2:4c:
19:3c:c4:15:1f:6f:ef:d7:1d:68:d9:ed:55:5c:4e:
47:24:33:67:32:22:d9:4b:a3:f2:d8:c9:b5:09:be:
e4:31:f8:51:4d:00:c0:ca:20:67:32:46:31:e6:26:
71:e8:50:9c:0b:f3:25:59:89:bc:d0:06:51:be:c0:
69:af:5d:c1:32:de:a2:88:91:13:4c:14:b1:6d:3c:
97:71:15:14:b1:b8:0d:c8:d1:f5:e6:43:bc:1c:46:
fe:7b:a7:95:99:0f:3a:ab:2e:99:50:61:65:bf:e0:
91:3c:b9:d2:43:4c:eb:80:a8:7e:14:ee:62:e0:5d:
99:63:5e:2b:44:b4:5d:82:e0:d8:1d:68:f9:19:f1:
ce:92:49:23:71:fe:1e:1e:08:00:22:85:f0:89:20:
bc:e8:09:7e:a4:27:28:a2:27:6f:45:86:9d:af:c9:
b8:b8:64:c1:09:a1:d8:ca:3e:f6:0b:fa:1c:f5:5f:
f0:c5:19:43:29:9e:ca:6a:fb:f1:77:44:bd:c2:1e:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:6D:AD:91:9A:D2:59:9E:F2:DD:5A:34:69:F6:2C:CC:21:2D:5E
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:48:3b:01:bc:f2:40:ca:eb:4d:f1:98:08:74:6e:22:18:
ad:87:fd:5c:08:a4:9a:7c:29:92:99:de:2d:cc:85:72:97:3a:
7f:50:6b:ed:db:ef:0b:7d:ce:b2:2d:f5:f7:80:55:2d:4a:de:
fa:fd:0c:1e:56:df:f1:dc:cb:10:a5:99:c6:8f:8e:3a:ea:29:
ca:df:80:8c:09:63:1e:57:22:5e:b6:23:77:fc:87:6e:98:1b:
91:7e:11:94:e2:22:76:3b:ed:f8:27:d8:7b:12:6e:fe:60:03:
4f:f7:9f:0b:1f:c6:91:8c:e3:c4:34:40:73:ca:04:b9:a5:75:
3f:0a:58:fd:16:71:7f:47:99:ce:6e:8b:75:a3:c2:ce:fd:4e:
16:18:2e:3c:21:a4:ce:95:1d:11:27:ad:6e:15:ce:af:67:ee:
4c:df:b8:6c:4e:76:54:65:f8:4c:c3:24:3a:2d:7e:5c:96:99:
07:1d:17:b6:0b:2b:16:b8:e5:e3:72:b4:4d:6e:3d:c5:12:5e:
8a:ae:0e:15:5d:f1:e9:5e:c3:1c:ac:ab:35:68:53:5f:c2:8b:
46:0b:28:6e:c8:7f:2c:17:72:35:a4:e5:46:9e:94:86:f6:e7:
ab:8a:61:04:fa:00:e1:5e:52:1f:3a:fc:0c:a4:42:57:ce:2a:
09:96:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:54 2026 by rpki-client