Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: bV/WPsWk5BDkNUzZTisSXZhGm4fJMz4+R7A6cnXlvrw=
Subject key identifier: A3:0D:73:E4:18:C9:95:B0:68:61:47:04:A9:DB:7D:EB:1B:33:36:92
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 01A0CD10F3D70E5974519A8BFFA56DA29C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 07:00:35 +0000
Manifest this update: Wed 23 Sep 2026 07:00:35 +0000
Manifest next update: Thu 24 Sep 2026 07:00:35 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: u4DgA0hqqWeDL+Y/fDmvvk1AXTpLu+Qhh5vGGzEIEFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:f3:d7:0e:59:74:51:9a:8b:ff:a5:6d:a2:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Sep 23 07:00:35 2026 GMT
Not After : Sep 24 07:00:35 2026 GMT
Subject: CN=a30d73e418c995b068614704a9db7deb1b333692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:58:9c:4a:54:82:23:8b:ae:6b:fe:b9:d2:
b4:a2:f4:10:72:18:6a:4b:2b:25:e0:70:11:8c:4d:
76:fa:b8:34:64:2b:da:72:84:b3:ed:94:46:3e:43:
a3:dc:2e:48:dd:b2:a8:0b:98:93:ec:8f:77:f7:ba:
a9:f7:01:f8:15:28:c1:f9:2d:c1:26:15:4e:e7:ab:
4a:5e:33:11:9e:6e:1d:2f:08:f4:a2:63:cd:09:1c:
0c:88:33:eb:6f:0a:25:d0:e0:4f:9e:7c:cf:25:5a:
06:03:b9:1f:95:d0:eb:79:39:a9:19:f1:82:0a:d8:
1e:2e:8f:7c:5c:3f:0f:7e:0f:a3:b7:21:f5:55:ce:
39:83:31:36:22:6c:fc:13:20:b4:2d:87:ee:6e:22:
38:0d:63:5b:dc:b2:24:3a:13:ac:e1:df:19:0a:8e:
ad:28:6b:31:22:a6:1a:41:6b:5f:e0:8f:ee:b7:0a:
89:15:8a:9c:03:21:ac:2b:f2:6a:da:aa:80:85:bb:
b7:b3:0f:f1:87:ec:6d:e5:8e:cf:f5:12:1d:2b:1c:
aa:d5:97:cd:ab:d7:9a:cb:06:03:26:19:d5:a5:50:
cd:77:3a:cf:3a:8f:64:e0:c7:ac:43:7c:13:f7:ff:
dd:70:d4:ff:fb:1a:b5:70:e6:60:fd:73:55:cf:c0:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:73:E4:18:C9:95:B0:68:61:47:04:A9:DB:7D:EB:1B:33:36:92
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:df:b5:77:89:56:79:de:cf:a9:99:9e:f1:ff:d3:71:8b:
e6:b9:3e:1f:61:97:61:e7:82:f3:e9:a3:c7:e0:43:c6:a1:c3:
8d:ed:ef:52:a0:12:dd:37:c3:e5:55:a2:00:7f:fb:24:30:15:
7a:1b:23:ab:cc:d9:db:79:ef:34:76:af:63:8d:95:1d:bb:0e:
d2:85:34:56:32:e6:9f:e9:90:eb:10:57:5f:b7:7d:46:65:d0:
30:57:af:54:2a:b1:8d:35:72:e1:c4:cb:2e:bc:e3:b5:7e:78:
47:b0:b6:3b:a5:83:16:b0:52:10:21:56:de:c5:b3:0e:ae:e6:
41:b7:ce:4f:06:81:bd:86:ea:61:3d:fe:26:92:c1:c7:37:69:
e8:98:10:bc:2f:af:59:7e:a7:20:05:83:34:95:e1:6d:e7:e1:
70:5d:f4:f4:5d:bf:60:17:c9:0b:cb:d3:8e:a3:1b:86:39:03:
02:88:ea:02:75:44:dd:1b:b5:e7:b4:47:21:6a:00:f1:29:8e:
5d:a4:33:10:bb:9b:d4:12:18:61:1d:40:7c:ea:a6:f7:b8:9f:
11:a3:9c:4f:8d:4c:0e:dd:62:3f:38:86:b2:b5:47:ed:fe:b7:
43:7e:19:11:ed:32:00:1c:0a:e7:53:06:9d:fc:29:2f:21:ae:
b8:df:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:55:17 2026 by rpki-client