Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: 4U6DouHDl5nzkFXRBPJG0ixrOGI6tF2/0uLjXotP/HM=
Subject key identifier: AD:F5:FA:10:96:D8:E5:9C:1D:30:20:4F:37:0A:2C:A4:EA:8D:8F:16
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01A14872B998B6EFF1E45DEDFD20D2521375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 08F9
Signing time: Sat 17 Oct 2026 06:00:40 +0000
Manifest this update: Sat 17 Oct 2026 06:00:40 +0000
Manifest next update: Sun 18 Oct 2026 06:00:40 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: CuPIHpNdsjTcTUqfKjDmKYqcSecoS2ftYEknvLiY7uA=)
2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
3: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (hash: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:72:b9:98:b6:ef:f1:e4:5d:ed:fd:20:d2:52:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Oct 17 06:00:40 2026 GMT
Not After : Oct 18 06:00:40 2026 GMT
Subject: CN=adf5fa1096d8e59c1d30204f370a2ca4ea8d8f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:41:1d:b2:d6:72:23:bf:c9:1f:ad:04:ca:
92:de:d4:00:26:d4:f8:1f:5d:99:94:41:88:4b:8e:
55:4c:f1:01:d0:c1:cc:ad:2e:76:3f:b2:e2:9a:e2:
68:61:35:4f:0d:2f:d0:a7:cf:42:86:a3:2a:a6:c1:
e5:f4:d0:ed:e0:0e:f0:eb:2f:92:88:5a:33:c6:9a:
91:23:44:32:fb:03:80:ce:e8:69:84:d2:99:51:45:
f8:75:25:2e:54:98:b4:dc:7c:e9:09:9e:0b:dc:42:
b9:07:ce:d5:f1:cf:97:3f:50:8e:19:67:53:00:68:
81:84:85:d3:70:db:e6:fa:48:e5:38:47:bc:bf:6a:
e5:87:bb:63:25:36:86:8e:e4:ca:a5:2c:51:83:84:
15:48:70:c0:33:bc:da:fc:14:e3:48:f0:75:5c:ec:
74:09:bd:72:d4:61:5e:ae:d0:3e:83:29:6d:6a:b9:
ef:78:3c:b7:7e:c0:59:3b:dc:ea:3c:5a:da:d6:3f:
de:9a:94:9b:1b:5b:6c:09:9c:97:61:ab:dd:5f:40:
35:cc:39:87:de:86:a2:5f:ed:c2:3d:9f:bc:61:04:
62:f6:6d:1e:dc:8a:7b:21:19:bf:7b:c6:94:97:8a:
7f:82:5c:9f:51:30:b5:d9:4a:8a:2d:75:19:55:30:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F5:FA:10:96:D8:E5:9C:1D:30:20:4F:37:0A:2C:A4:EA:8D:8F:16
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5a:d8:0e:5d:d8:87:42:ad:fa:f9:fd:34:64:d4:ed:c3:9e:
2d:0e:45:c1:d3:72:07:e3:f2:f1:ba:56:42:a4:9d:39:c4:7f:
d9:a8:05:a0:1b:f6:1c:cd:89:43:96:6e:d7:19:76:77:d8:24:
82:25:42:64:bd:4b:7d:72:c3:0a:8b:6e:00:8a:c0:24:6b:6d:
29:f4:4c:1e:21:03:b1:d1:79:db:3f:fb:3d:b7:52:47:6b:ba:
11:d5:be:05:1e:8b:a6:f9:b3:50:32:61:92:de:50:a8:57:7f:
b0:fa:a3:8f:5f:6f:32:da:65:6c:4e:17:f2:73:8e:2f:0b:27:
b4:5a:a9:46:6d:15:d6:de:a7:8a:ad:63:14:dd:8a:9d:a6:2d:
eb:b4:8d:9a:01:99:fa:07:69:bb:3c:94:51:bc:fa:91:d7:86:
92:97:a4:fa:6e:19:79:9d:59:68:27:88:98:db:12:46:a3:b8:
4c:41:bd:a0:2d:49:1e:29:72:c5:c1:8b:d7:51:cf:cf:bf:ea:
85:7b:20:9c:59:71:a6:26:20:31:14:cc:12:95:58:5c:71:ab:
4f:67:20:96:d9:48:46:57:e0:fb:ae:79:e0:a2:81:e4:c6:5b:
10:cc:7b:ca:2e:9c:b1:00:12:9e:3a:6d:45:c4:ba:ec:f0:a5:
3c:9a:b0:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIcrmYtu/x5F3t/SDSUhN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw
MWUwNTkwHhcNMjYxMDE3MDYwMDQwWhcNMjYxMDE4MDYwMDQwWjAzMTEwLwYDVQQD
EyhhZGY1ZmExMDk2ZDhlNTljMWQzMDIwNGYzNzBhMmNhNGVhOGQ4ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxlBHbLWciO/yR+tBMqS3tQAJtT4
H12ZlEGIS45VTPEB0MHMrS52P7LimuJoYTVPDS/Qp89ChqMqpsHl9NDt4A7w6y+S
iFozxpqRI0Qy+wOAzuhphNKZUUX4dSUuVJi03HzpCZ4L3EK5B87V8c+XP1COGWdT
AGiBhIXTcNvm+kjlOEe8v2rlh7tjJTaGjuTKpSxRg4QVSHDAM7za/BTjSPB1XOx0
Cb1y1GFertA+gyltarnveDy3fsBZO9zqPFra1j/empSbG1tsCZyXYavdX0A1zDmH
3oaiX+3CPZ+8YQRi9m0e3Ip7IRm/e8aUl4p/glyfUTC12UqKLXUZVTAujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK31+hCW2OWcHTAgTzcKLKTqjY8WMB8GA1UdIwQY
MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt
NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw
LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFrYDl3Y
h0Kt+vn9NGTU7cOeLQ5FwdNyB+Py8bpWQqSdOcR/2agFoBv2HM2JQ5Zu1xl2d9gk
giVCZL1LfXLDCotuAIrAJGttKfRMHiEDsdF52z/7PbdSR2u6EdW+BR6LpvmzUDJh
kt5QqFd/sPqjj19vMtplbE4X8nOOLwsntFqpRm0V1t6niq1jFN2KnaYt67SNmgGZ
+gdpuzyUUbz6kdeGkpek+m4ZeZ1ZaCeImNsSRqO4TEG9oC1JHilyxcGL11HPz7/q
hXsgnFlxpiYgMRTMEpVYXHGrT2cgltlIRlfg+6554KKB5MZbEMx7yi6csQASnjpt
RcS67PClPJqwbw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:28:08 2026 by rpki-client