Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: yEJ2thuMX4TnMGtIbVuLAojWpF3vQkYNbhqtES7dNLo=
Subject key identifier: E6:29:9F:C4:AF:AF:26:BE:14:F8:B9:D7:A1:F2:3B:41:C1:45:49:64
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019D3A8B18C8C30166676EDC06171B41ACA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 070E
Signing time: Sun 29 Mar 2026 17:01:27 +0000
Manifest this update: Sun 29 Mar 2026 17:01:27 +0000
Manifest next update: Mon 30 Mar 2026 17:01:27 +0000
Files and hashes: 1: 6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (hash: 5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=)
2: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: nG0/xYsmly7MQCJDaIhkP0i8Vxk6bVwOLPtW0ydSTMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:18:c8:c3:01:66:67:6e:dc:06:17:1b:41:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Mar 29 17:01:27 2026 GMT
Not After : Mar 30 17:01:27 2026 GMT
Subject: CN=e6299fc4afaf26be14f8b9d7a1f23b41c1454964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:4e:80:5e:3b:2c:9e:6c:8d:fa:10:99:60:
c7:2b:d3:ea:66:9f:42:11:13:a3:46:91:e7:49:b1:
a1:0b:eb:db:36:6b:70:a8:5a:08:9e:0b:ed:8f:c3:
88:ca:56:79:67:b1:66:7c:77:e2:7a:2b:4c:03:ec:
5b:e4:44:1f:62:95:66:95:85:4b:82:4f:d5:01:d9:
06:60:57:01:0e:97:13:f5:df:28:f5:3e:df:7c:5c:
15:9d:38:39:07:c7:a9:a9:f8:db:0b:b0:60:e9:89:
82:f9:a2:f6:44:2b:d9:b4:61:41:5c:fa:dc:d7:96:
f2:94:63:ca:df:c0:6a:18:ef:2d:96:c9:6d:cb:da:
c6:c0:25:5c:36:56:d8:ce:e5:e4:9d:c2:32:bb:6d:
6f:63:55:a1:e5:80:b4:33:ed:9d:4a:43:1c:d0:65:
c3:c8:96:ce:35:4d:cf:02:c9:94:09:c3:5d:ff:55:
9e:f1:ce:6e:2f:d8:6a:11:cd:ff:30:5a:16:b6:26:
09:99:7b:85:82:29:9b:4b:7d:14:fa:65:57:b8:3e:
f7:e7:e3:a4:5a:bb:c1:44:06:45:81:80:1a:ce:09:
2d:00:04:99:c2:20:93:da:f9:63:6a:ca:9a:26:cf:
7f:f6:12:02:63:33:e8:9e:5b:63:df:6b:b2:a2:18:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:9F:C4:AF:AF:26:BE:14:F8:B9:D7:A1:F2:3B:41:C1:45:49:64
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:cc:24:e2:2e:d6:64:0c:e9:13:19:ef:fd:82:37:ba:a5:
f7:25:d2:37:3d:be:15:a3:67:f6:7f:0e:a1:c0:a7:ec:2a:ad:
fb:d4:37:3b:c3:49:1b:86:89:28:73:85:ad:42:90:44:4d:c0:
64:c8:f5:95:4c:06:65:ce:51:db:cf:7b:4e:ae:3a:07:2d:81:
21:12:1c:a2:e9:f7:f4:14:6c:a1:f0:f6:5a:88:95:6c:04:1c:
e5:fa:20:24:53:4b:bc:e7:5b:a9:11:06:18:88:4a:09:22:d3:
8d:58:1d:dc:c9:f6:d7:38:8e:66:24:4c:64:2c:92:4d:21:e1:
76:9e:74:e4:f2:e3:d8:29:97:ed:fe:1e:86:93:be:f6:cc:b9:
08:ed:51:ca:30:b9:9b:19:08:f3:70:00:86:40:3b:29:4e:cf:
70:a7:5e:d0:d0:2f:f2:7d:91:92:d4:61:7d:fc:31:6d:f5:70:
0d:ac:6d:01:9e:90:7b:ae:5d:e0:cd:86:a0:82:0d:79:63:c0:
6d:aa:c2:cf:11:84:0f:2c:62:da:c6:33:a2:b9:e0:6e:66:22:
19:d7:64:4c:df:cc:f8:20:22:84:b9:f5:8e:a0:86:bc:17:7b:
f3:8c:b3:6c:ff:c1:1b:c7:41:31:1d:bc:ee:83:94:94:02:fb:
fd:03:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:00 2026 by rpki-client