Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: adAPk4VwDbwQo1miH20iAgTLnuNXd9KXR+ZIUQjAjq4=
Subject key identifier: 2A:B9:15:50:9A:B9:95:65:C6:45:1F:4F:C1:F1:C2:54:80:4D:DD:88
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019E1D90EDB63C4D212E77933E796D520416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: PhD8oGghv/gT55HqiPDO/CLx9txXGP2zMTEpyLYRb/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ed:b6:3c:4d:21:2e:77:93:3e:79:6d:52:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=2ab915509ab99565c6451f4fc1f1c254804ddd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:08:fb:b6:b9:40:c4:bd:6e:71:c0:db:89:
44:7b:d1:a3:68:a3:02:e5:14:55:68:02:fc:09:7a:
7b:1e:97:12:49:25:d3:7c:6c:94:19:99:0c:a1:50:
37:69:07:9f:e1:89:82:c6:0b:ec:78:8f:24:b2:72:
9f:10:48:e1:7c:d4:c1:62:3e:ab:91:c0:ca:fb:f5:
f9:31:37:95:d6:ec:a0:97:25:d7:48:99:10:8f:5a:
f7:c9:96:2b:d8:87:0c:d7:73:b4:61:ba:cb:38:49:
11:be:c1:16:86:60:a8:50:3a:77:7a:e9:f1:63:8f:
ab:21:2d:e6:21:43:7c:06:18:3c:8d:14:ee:b0:4c:
c3:d9:82:c8:6f:97:d6:a6:31:a0:ec:4c:2d:01:dd:
57:cc:b5:f1:fb:b0:35:b9:ff:79:2f:df:cb:d1:ba:
0a:d3:90:67:ea:05:f5:0e:1e:81:dc:f4:92:88:0d:
18:c6:f3:1b:b4:35:35:24:66:d8:47:3c:5e:a1:e3:
f0:70:5a:9e:cb:ae:14:a2:cf:4e:39:97:64:41:f2:
d3:68:c2:78:99:1c:81:8b:5c:51:c0:d5:85:0c:c4:
65:34:38:82:43:d1:39:f5:96:f2:4f:e8:d4:37:a4:
9c:1c:bb:0d:53:5f:ac:04:d4:5a:67:ff:a2:a0:b0:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:15:50:9A:B9:95:65:C6:45:1F:4F:C1:F1:C2:54:80:4D:DD:88
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:58:5a:45:fa:5a:47:d2:6d:f8:99:cd:ce:96:4f:38:49:96:
a1:57:ed:96:59:68:8d:1d:41:d2:b7:25:93:42:7e:44:a3:ea:
78:98:e4:da:c2:29:73:b3:19:7b:44:83:ee:01:ca:73:ee:4f:
e5:46:62:14:c3:5a:02:d9:b6:09:57:38:7a:cd:a3:e0:70:8e:
0e:2f:ab:37:a0:90:97:bc:b9:36:53:5a:79:49:a4:73:d8:d6:
76:3d:85:cc:ae:0a:f0:c7:ae:b6:f4:26:c5:e0:23:2b:d1:1e:
e4:69:bd:4d:41:21:3e:e8:4b:69:49:05:f4:9b:a7:18:33:2c:
64:4e:60:78:63:b3:ff:04:2e:0d:82:5d:c9:06:9a:28:04:9f:
f5:93:24:b6:e0:d0:f8:2f:f8:53:23:33:07:6f:08:d3:36:f1:
f8:0d:e6:ff:dd:e1:77:c2:99:d8:e8:90:4b:1c:44:f1:5c:a2:
5f:01:72:5b:59:f4:32:71:eb:7e:71:41:4e:da:e0:dd:c8:59:
54:a5:3d:ba:7e:30:7d:1d:cd:f2:a1:e0:7f:28:14:41:e6:c4:
1b:ed:e6:47:11:f1:f2:67:9c:3a:f0:b8:9e:eb:91:d6:66:75:
a7:09:01:a2:0d:fb:b6:e5:4a:29:8e:f6:99:f8:c8:12:f8:b9:
db:c3:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:56:06 2026 by rpki-client