Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: Bs8qQR4tX0cfuVHooT09DY4yZIDO9/R04SvFCvio06A=
Subject key identifier: 0B:EE:C3:5A:A7:06:19:45:6D:6C:6F:7E:D2:29:D0:12:2B:5F:C4:13
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01A140B9973A8E954D0A8B15CAB5FDF93EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 08F5
Signing time: Thu 15 Oct 2026 18:01:06 +0000
Manifest this update: Thu 15 Oct 2026 18:01:06 +0000
Manifest next update: Fri 16 Oct 2026 18:01:06 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: 4awM/TeQBRkqUbYCbyd7wMGhgM+1ArWDnNpW6kFEp/k=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:97:3a:8e:95:4d:0a:8b:15:ca:b5:fd:f9:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Oct 15 18:01:06 2026 GMT
Not After : Oct 16 18:01:06 2026 GMT
Subject: CN=0beec35aa70619456d6c6f7ed229d0122b5fc413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:04:a3:8e:5b:8c:ac:3a:05:39:9c:4d:d8:
79:45:0e:10:40:bc:31:a6:f9:26:1a:4f:b3:0b:c7:
c4:b7:89:45:81:d1:77:f3:ee:fe:e7:38:ae:c0:d7:
fd:dd:bf:9d:47:e4:f4:d8:0e:85:29:6b:66:e9:20:
e8:ea:bc:5b:89:0f:78:3c:45:05:1e:3c:bd:0a:7f:
31:d6:7d:8f:98:6a:a4:7d:96:7e:26:9d:e7:02:88:
ce:7d:32:48:40:58:ee:65:ad:01:62:16:78:1f:22:
17:9a:74:b5:06:1d:3d:ab:e7:37:7d:81:8b:de:7f:
b5:d2:06:e1:6b:35:a0:5a:30:5b:a0:a8:e7:43:1f:
da:73:ec:26:80:a5:00:84:85:30:72:f8:79:54:3c:
49:f4:77:67:53:c0:e2:bf:6d:ee:03:06:5c:b6:86:
20:77:6e:87:e8:1a:cd:bf:c4:76:7d:b8:f4:ca:88:
68:b9:5c:f6:11:88:a0:4a:71:df:3e:0b:8a:6d:6d:
0d:c3:92:8e:9b:83:19:d4:e5:00:c7:94:f5:6c:d8:
bc:74:5c:17:0d:d8:c9:4d:81:1c:81:bb:40:30:48:
b4:b6:e1:ef:94:64:52:81:d8:8e:14:d2:28:26:55:
5b:ce:72:f0:09:73:ab:90:3b:00:79:bc:d9:7a:9a:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:C3:5A:A7:06:19:45:6D:6C:6F:7E:D2:29:D0:12:2B:5F:C4:13
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ca:e0:b6:9e:a2:34:6b:9c:6b:a9:ff:dc:07:64:03:a8:16:
03:91:66:f2:02:b3:84:92:d1:5f:ea:bf:c7:0f:e5:ae:05:b5:
1c:49:0a:97:aa:3b:45:ba:79:e7:37:d1:2e:a3:8c:9b:49:4d:
7f:e6:52:a7:4e:d1:7e:bf:c3:6f:95:bd:1b:ce:79:0f:b7:72:
ee:01:40:64:5e:dd:34:63:97:f9:5a:ee:ae:12:ba:a0:11:1c:
e3:8e:1a:f7:f3:8e:7b:25:fe:a3:1f:35:19:9d:d1:4a:e0:1d:
d1:dd:a9:e3:6a:f9:6c:06:db:bd:d6:5d:81:04:c5:9d:07:a0:
11:d7:d8:f2:57:ce:d2:62:78:08:f3:e1:31:e6:ec:dd:2f:7c:
7a:86:88:81:91:05:80:bf:8a:f8:4a:d0:14:3f:ba:d9:ce:7d:
1e:d3:3f:2e:09:09:c2:95:b4:4a:f1:74:b9:64:15:38:40:df:
40:67:70:8b:df:b0:11:20:0a:93:87:1a:05:ab:22:0d:bf:ce:
81:87:17:c3:2a:76:00:6b:fd:51:db:d5:42:6d:e5:aa:e0:d7:
e4:17:a1:6b:f7:da:31:36:24:42:4c:bf:97:98:a2:2d:04:0e:
c9:94:18:c6:c8:b2:0f:97:18:f9:d2:31:f1:f7:f6:52:da:36:
6d:3d:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:53 2026 by rpki-client