Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: ueEqZZBXtsyu13z0SyvOce24VcrUystfER19kqomrtc=
Subject key identifier: 1A:C9:EE:F2:E0:36:61:3C:D9:B5:96:EA:91:E1:3C:E8:D5:8B:D5:40
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01A00213DBFCE20E9FF78C4D4431BEB8D614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 0850
Signing time: Fri 14 Aug 2026 21:00:50 +0000
Manifest this update: Fri 14 Aug 2026 21:00:50 +0000
Manifest next update: Sat 15 Aug 2026 21:00:50 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: OQIcgtAL5KtiYD0M/kQyKpCXgc3igvCFHSd6RWBPkXM=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:db:fc:e2:0e:9f:f7:8c:4d:44:31:be:b8:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Aug 14 21:00:50 2026 GMT
Not After : Aug 15 21:00:50 2026 GMT
Subject: CN=1ac9eef2e036613cd9b596ea91e13ce8d58bd540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:f2:4e:54:39:c3:b6:18:3a:1d:2b:ed:f7:
12:47:05:51:99:ac:80:cf:20:84:43:8d:4a:56:e5:
47:08:a0:e2:fe:68:fb:02:e1:af:ec:8c:43:48:11:
d3:2f:55:85:5a:7f:f5:85:2c:eb:8e:27:74:28:47:
28:5a:be:4f:62:ab:62:95:9d:94:d2:12:6e:4c:67:
65:da:ed:9e:dc:ce:b8:46:eb:33:66:69:76:78:4f:
92:3e:a6:56:63:6b:94:e8:aa:3d:c2:84:72:c1:25:
87:0e:d2:f8:f8:e4:61:c7:53:8b:de:c4:64:75:3b:
0c:a0:0d:0c:25:88:29:0c:ba:03:5a:70:0d:bc:5f:
ce:17:7a:c9:82:22:c0:08:28:36:a6:21:16:a2:7e:
27:f9:18:05:e9:7f:4a:a5:af:2f:ea:73:2d:a8:6d:
da:77:24:0c:ed:4f:d3:f1:a1:43:ce:47:be:4a:a4:
b9:63:a5:d3:59:33:b8:f1:b5:bb:dc:a4:93:10:da:
ae:59:1a:fd:4d:43:a3:63:73:d4:09:e5:cf:41:26:
f3:33:74:05:03:fb:cd:cb:8e:fe:6c:87:9d:be:d8:
83:21:81:0c:2c:a1:f8:94:14:5b:1c:18:9f:2b:4e:
4f:96:0e:4f:cc:d4:4e:76:f3:cc:e9:b7:9c:83:85:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:EE:F2:E0:36:61:3C:D9:B5:96:EA:91:E1:3C:E8:D5:8B:D5:40
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c4:d6:bb:e5:ab:ba:18:51:6f:7e:b2:65:5a:1f:9d:34:4c:
9e:2a:7a:36:c0:f3:5e:ba:41:ac:09:cb:97:87:ee:e5:61:87:
65:11:c2:9c:62:6c:31:33:b5:32:e3:66:72:83:d0:34:b4:7e:
ed:d9:46:7b:c3:bc:43:93:29:57:4d:44:ab:61:5b:b2:6a:b3:
a6:c8:f9:30:6f:2a:dc:ef:bf:5c:a8:cd:4a:52:78:b6:fd:4a:
fc:b7:e0:1e:58:30:9b:22:97:83:8f:91:eb:fd:fc:28:6d:46:
14:9e:b3:e1:ce:76:69:eb:f3:c1:cb:6b:45:ca:f0:e9:f2:6b:
f8:75:7b:26:00:75:e9:c0:bf:ed:86:da:14:94:74:de:bf:5e:
c9:29:34:db:6b:4f:17:64:a9:58:23:7a:3c:12:20:4b:28:aa:
03:2e:09:04:11:24:ec:87:37:6f:21:b9:08:5b:30:e6:9a:d1:
5a:58:ed:15:a3:aa:f3:db:09:ac:ef:c0:0a:70:5d:2c:56:55:
08:82:8e:ff:bb:a3:69:10:55:4c:45:ea:a1:b2:3d:5a:80:d4:
c3:2a:12:d8:45:ae:d6:9d:2b:a7:3c:e0:4d:80:fa:36:78:d9:
41:d0:22:17:56:f9:89:e5:b4:e7:19:5d:f3:11:db:1e:e9:f2:
de:8e:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:57 2026 by rpki-client