Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: TT83F5FXFoVBtUUdZivsNIoLqELpApJid8+Bt3kXP/M=
Subject key identifier: 9C:60:49:CD:CD:0B:8D:58:19:A9:E1:1C:38:39:D9:F6:47:A4:56:59
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019D265F6083649026AEE2652F53B03ECA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: UbA5ktpDXwlLZAdqooDgF9fzX9jYlDxGzKvmTZ/IkXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:60:83:64:90:26:ae:e2:65:2f:53:b0:3e:ca:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=9c6049cdcd0b8d5819a9e11c3839d9f647a45659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:05:d0:1b:12:ba:30:9d:1e:77:0c:98:fb:
6d:ba:cc:ed:67:dd:86:d2:e1:7f:fa:f2:b4:57:c5:
0e:8c:85:67:ee:76:33:d4:65:a6:92:b0:6a:f8:5c:
87:62:07:02:21:bf:a7:7b:76:94:4f:7f:11:50:a1:
95:1e:c1:5e:b1:eb:0d:a8:43:01:18:cc:b0:33:47:
08:e2:7d:0e:70:8b:f9:bc:87:c9:5c:e2:18:8f:4e:
07:16:0d:b4:15:d1:9a:3b:b7:0d:c7:2d:7f:64:15:
7f:c8:e9:d4:45:86:16:67:f0:e3:ad:7a:3a:9c:28:
bd:2c:c6:61:74:cc:41:4c:4b:31:92:c3:c5:1e:3b:
f0:86:6b:16:8b:4c:6c:3f:2a:5f:74:17:5a:b2:57:
6d:76:70:1e:1e:2b:0b:8f:1f:e8:5e:a0:fa:ca:db:
dc:04:a1:65:45:86:ce:2c:10:1a:0b:e6:10:cf:7a:
28:ff:01:cb:10:55:9a:e4:93:13:40:3b:be:18:c3:
9a:58:fe:b7:d8:b0:ce:29:76:87:db:66:bb:83:be:
56:17:f2:e2:be:b0:ec:db:e5:6a:eb:f5:e2:73:d7:
79:99:45:bb:1a:12:30:8e:96:f9:31:d1:ba:60:86:
97:4f:4e:1a:44:45:a3:e6:d9:3e:fb:6d:37:55:2b:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:49:CD:CD:0B:8D:58:19:A9:E1:1C:38:39:D9:F6:47:A4:56:59
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:e7:a8:a7:00:26:bd:48:78:46:4d:d5:2d:2c:13:ff:4b:
53:98:6d:f3:75:1b:08:09:c8:f0:16:6d:19:06:5a:eb:83:2f:
6e:fe:20:a2:e1:d0:2c:75:7f:67:5a:d7:1a:be:95:e1:c7:4e:
60:36:69:21:38:9b:94:46:80:29:17:ff:90:ef:64:c2:b8:c1:
e8:88:23:4d:42:6d:18:da:0c:86:bb:7f:c0:b8:69:55:8e:64:
f3:29:68:7c:f1:fa:38:c2:ba:c3:80:aa:c1:6c:c2:97:87:0a:
48:01:06:e4:91:0b:f0:2d:65:ef:8a:63:fb:c2:69:a9:2b:12:
5d:77:0b:b6:98:19:7c:a4:13:bc:c2:6a:4c:24:fe:a1:5a:6f:
86:d1:0c:c0:0d:07:c9:1f:8e:a4:15:1b:56:0e:4b:13:f0:01:
7f:38:f9:33:63:0d:99:b2:d7:54:ad:8f:97:a1:f9:29:43:c5:
88:a9:da:55:2f:74:c6:5b:84:aa:9d:ac:1e:ac:09:3c:4c:73:
45:82:77:db:0e:1a:bd:8c:82:d6:28:70:ae:ac:92:25:f1:2c:
40:ff:2d:5d:97:77:72:bf:09:e6:b4:f7:3c:4d:5d:7b:d6:94:
48:5b:fc:d3:a0:80:59:f5:d6:d9:8a:4c:bf:c4:c2:e9:53:af:
ed:d8:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:48 2026 by rpki-client