Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: VGklvW+J65VlyO0F+WgSi8rFWZPn3OrcvWu7WW9/ImQ=
Subject key identifier: 46:18:47:51:3D:9F:B6:7F:C7:AC:87:48:42:6E:54:60:56:BE:1A:2E
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019F1867978B1CF0F8201896E2B87BDD9509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 07D7
Signing time: Tue 30 Jun 2026 12:01:09 +0000
Manifest this update: Tue 30 Jun 2026 12:01:09 +0000
Manifest next update: Wed 01 Jul 2026 12:01:09 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: ZJWefmicle8STcA+2sGMa7MrOQxdg3lvf/x7o707QLQ=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:97:8b:1c:f0:f8:20:18:96:e2:b8:7b:dd:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jun 30 12:01:09 2026 GMT
Not After : Jul 1 12:01:09 2026 GMT
Subject: CN=461847513d9fb67fc7ac8748426e546056be1a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:f7:52:bf:56:58:31:9b:55:bc:76:2b:15:
df:d7:c8:04:4d:ca:56:86:33:64:b4:70:2d:ad:b2:
86:9e:87:de:fb:3a:0b:4f:d0:cf:69:09:c5:3a:13:
65:cf:8c:f7:73:d2:d5:9f:6e:52:43:8e:f4:1a:cb:
6e:7b:12:02:a7:03:e3:b4:a6:d8:ac:a3:73:38:80:
04:94:95:99:40:23:5e:13:2f:dc:f2:b6:d4:b9:59:
da:eb:5f:71:f7:e3:a7:6e:fa:40:d0:6e:52:af:ba:
0c:bc:ca:15:ea:ab:17:cc:46:97:13:23:1f:8b:41:
39:d0:9c:d3:71:f6:38:6d:29:5b:39:7a:1b:51:80:
f8:1f:22:02:13:bb:d9:66:ef:7a:97:27:2a:24:55:
c9:52:5d:4d:b7:d3:26:c7:1f:51:3e:6a:cc:1e:97:
82:83:72:59:bd:c3:b6:4a:f1:53:f3:31:26:53:f6:
45:6c:9f:00:90:41:37:bf:81:bf:bd:ea:a8:99:0e:
d3:d6:c8:c7:02:da:06:3a:9f:05:dd:e6:15:b7:79:
18:b9:50:eb:95:4c:63:2b:40:f9:99:5e:3a:69:2e:
3a:b9:25:18:83:75:84:b8:9c:57:a0:0a:6d:cf:6e:
4c:e7:c4:4b:7d:8e:fd:9f:b7:dd:3e:2d:22:49:bd:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:18:47:51:3D:9F:B6:7F:C7:AC:87:48:42:6E:54:60:56:BE:1A:2E
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:27:4b:8c:c9:cc:0f:6c:ec:20:97:7a:48:9e:29:83:5f:55:
0e:dd:47:82:29:cd:83:55:c5:2e:a8:0f:49:ed:63:a5:95:2f:
52:ca:02:30:bf:a3:48:70:e7:80:19:f4:53:c6:7f:05:11:5d:
48:99:35:d6:ca:11:7b:f6:34:24:6f:0b:fd:c7:e5:26:ae:2c:
d9:ce:46:f2:bd:1a:34:53:cf:7e:2e:bb:bc:14:c3:56:d5:b3:
38:33:d2:13:e7:f5:ea:01:f3:5f:92:25:d2:01:0f:59:01:88:
eb:13:d5:27:6d:08:0b:2d:96:48:f9:98:0d:59:e6:43:cc:13:
5c:84:20:e9:92:f5:66:8b:4a:b4:6d:a3:50:28:ed:0c:b8:2f:
13:c0:02:32:4e:b6:24:56:24:15:1f:e7:c1:7d:18:80:51:c7:
52:f3:41:c6:11:16:89:52:32:ff:94:9f:b0:52:5c:5f:31:bd:
a8:d0:04:4d:3f:a6:bf:26:c4:24:bc:bd:c4:02:e1:5f:05:f6:
87:11:86:5d:8a:79:d5:2b:ee:cc:54:5a:fa:51:94:f3:39:27:
1b:be:0f:75:65:a9:f7:d5:9a:50:ee:cc:e9:76:9c:72:d9:a5:
be:64:db:70:7b:bf:ce:97:92:52:d4:2d:84:a7:2d:b4:07:e9:
4b:69:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:35 2026 by rpki-client