Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: gWTKON3cOu66ibQBofGZpD31TAkzl4UST+uM3pHuo48=
Subject key identifier: D4:3B:25:61:A8:40:C5:32:21:4A:7B:FA:01:D9:BD:2F:6E:EA:B1:EA
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019D36E555FC99C844F93CD569C67CCC4212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 06DC
Signing time: Sun 29 Mar 2026 00:01:32 +0000
Manifest this update: Sun 29 Mar 2026 00:01:32 +0000
Manifest next update: Mon 30 Mar 2026 00:01:32 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: HZ2ZM2LjvIFD2dGX8ygrVlzyzQB9Pul6JOHhwOHuA9A=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:55:fc:99:c8:44:f9:3c:d5:69:c6:7c:cc:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Mar 29 00:01:32 2026 GMT
Not After : Mar 30 00:01:32 2026 GMT
Subject: CN=d43b2561a840c532214a7bfa01d9bd2f6eeab1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:ae:2e:0b:dc:1e:0f:9c:f1:e7:33:76:a7:
fb:bf:4d:4f:9d:79:47:5c:d7:ab:e9:cc:26:c7:60:
3d:9c:30:22:8c:6e:58:e3:5b:46:02:c6:54:06:2f:
4a:b8:b4:ed:80:a1:06:31:ff:6a:8e:f1:b0:70:a8:
22:e5:1c:14:68:16:cb:30:67:4a:78:24:99:f8:0b:
7b:9b:63:91:f2:e1:4a:01:94:f5:a2:19:14:95:3e:
bb:e6:90:40:f7:f5:8c:e8:f2:8a:3d:5c:ec:24:81:
d5:a7:75:9e:f5:ed:06:79:ea:9a:c1:75:2a:86:6c:
f3:6e:d8:3d:c5:de:02:12:41:e8:bb:54:81:1b:d1:
99:ed:be:bf:14:4b:18:24:27:41:a0:20:2f:e1:f3:
3e:f1:99:66:9f:4c:0d:f9:5f:69:f9:38:73:5f:3e:
4b:fb:16:b7:4f:87:11:78:60:08:e3:85:60:4e:9a:
43:ad:dd:72:35:d0:d9:37:63:40:23:91:2d:de:07:
dd:71:27:db:64:d5:6d:a2:83:65:dc:04:89:c7:dc:
87:4c:22:d7:d3:46:0c:6e:f0:3b:f2:5f:34:4e:23:
1d:11:44:c1:6f:5e:87:f7:7f:a2:f7:c8:e6:8f:f7:
5c:32:6b:9a:b2:2a:5b:5c:8c:a7:95:e1:d5:4b:81:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:25:61:A8:40:C5:32:21:4A:7B:FA:01:D9:BD:2F:6E:EA:B1:EA
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:63:76:75:30:33:59:2e:9d:a5:be:1b:32:ae:b5:d2:1d:c1:
ec:f2:ec:21:4d:72:4c:7d:48:46:a9:61:42:58:62:fc:fe:07:
e0:0f:af:07:9d:6b:c3:68:c3:f2:0a:2b:60:7b:6a:98:10:e6:
75:09:32:6e:71:9e:a2:74:9b:7a:30:7f:45:88:7a:e8:0a:85:
fd:21:e5:b2:56:94:3a:44:f5:f4:9f:0e:62:dd:c7:93:c5:82:
1e:68:e4:16:8b:ae:d5:7d:76:a1:9c:e5:8e:61:17:e8:fa:90:
72:9d:96:db:da:19:b7:00:0e:fe:f7:41:64:94:7c:67:1c:c3:
82:99:8c:67:31:04:96:54:52:95:7e:d5:e2:f4:26:9f:c7:f2:
79:66:09:de:ce:37:cf:7b:ec:7b:e5:6d:70:1a:91:73:da:61:
37:d2:a4:34:5e:e7:77:10:1b:5c:fc:74:cb:92:ae:0d:1b:05:
9e:83:c1:09:f1:74:47:0a:c3:8a:10:92:f8:83:09:ff:52:11:
17:fd:f0:c5:73:f2:41:14:e8:f1:b2:8c:33:7e:36:2b:37:a0:
50:6f:7f:18:28:44:6d:cf:a0:a9:db:f1:4e:3e:9a:61:ed:4a:
97:bb:9a:50:df:e2:13:65:14:a9:5a:d7:4f:06:e3:30:97:c6:
f8:39:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client