Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: erHZq3nsE1nzAohyhOc7xb5U0kxYwTon/5OZLM7LVs0=
Subject key identifier: 14:13:A7:93:E5:56:10:48:C0:5E:8E:CE:15:5B:F3:8B:E8:6E:C7:72
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019E30DFED582515E438979E282DF3A8A392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 13:00:42 +0000
Manifest this update: Sat 16 May 2026 13:00:42 +0000
Manifest next update: Sun 17 May 2026 13:00:42 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: zPoxpKSNuiclcWC5ubjTdrmTVuAXxfDu3fBnNPU3wuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:ed:58:25:15:e4:38:97:9e:28:2d:f3:a8:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: May 16 13:00:42 2026 GMT
Not After : May 17 13:00:42 2026 GMT
Subject: CN=1413a793e5561048c05e8ece155bf38be86ec772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:a0:2f:89:85:8e:8c:73:56:84:76:58:4f:
f6:f2:4d:5e:de:30:ec:dc:ed:0a:10:6f:fb:b5:df:
09:43:f6:3e:d8:35:7c:b9:42:d6:25:20:1f:d1:b4:
3b:fb:07:6d:b1:28:d1:75:3d:f8:85:fd:59:a2:9b:
26:a9:41:e0:8b:05:53:b2:53:39:bb:8e:02:0f:d4:
bd:79:1d:c6:dd:54:4e:58:b9:c7:5c:d4:55:34:9a:
fc:72:8e:3c:75:8d:ef:a2:6e:b3:d5:ca:62:ca:b7:
ac:6c:88:e3:ef:cf:be:de:f9:7b:cf:4d:fa:24:c7:
66:42:ff:e2:5b:86:bb:ae:6d:1d:88:9d:d9:2b:98:
58:97:73:15:c3:f1:f1:8a:a2:fb:49:71:73:fd:15:
a1:b6:b1:27:47:6c:5d:3d:5e:cc:ca:2f:d9:31:80:
13:11:9c:7f:2f:05:f0:89:e7:68:e4:28:66:50:1a:
ac:85:7e:4b:e3:d2:26:28:85:75:a8:20:db:01:c8:
54:20:22:49:8a:05:3d:d4:27:6e:f3:9e:2a:30:19:
98:33:c9:03:d0:6c:b5:8b:29:8d:0f:7c:5f:c5:68:
8d:ee:eb:19:ad:5f:93:54:da:0a:b7:6d:f8:d4:9d:
ff:27:06:ad:5f:9f:85:f4:bb:5d:91:28:4b:57:02:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:A7:93:E5:56:10:48:C0:5E:8E:CE:15:5B:F3:8B:E8:6E:C7:72
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0d:56:d4:7c:9a:a1:33:d3:36:02:17:69:32:9b:fa:fd:69:
44:f5:20:31:66:c9:a9:e6:92:df:7c:79:e7:84:59:c8:64:f0:
df:93:81:fa:6e:0f:eb:31:b9:e7:bf:7f:f8:d5:83:e1:ff:ac:
a7:af:5f:51:da:23:15:1c:a3:e6:c4:f0:55:89:9f:c8:a0:c2:
59:8c:56:fd:53:0a:8f:9d:d1:4b:21:66:95:75:e5:77:89:9c:
ef:81:91:d1:9c:cc:4e:b8:60:13:75:fe:7a:ac:5e:f2:ef:43:
d7:ef:9b:3e:e2:ed:76:5e:3f:a9:e8:65:7e:41:95:7d:02:66:
c5:45:9e:48:e3:a0:a1:da:a5:1a:1f:b9:ea:63:72:d5:31:19:
41:15:ca:40:8e:e8:09:fa:83:cf:3a:65:d5:39:a2:c3:a2:52:
8a:f8:f7:61:e0:57:1a:0a:e8:82:8e:2d:f1:16:52:30:82:8c:
5e:1f:bd:a0:13:fe:5f:ea:a0:6f:7d:c4:56:be:d6:62:58:18:
b0:b4:83:37:0d:79:f5:ca:22:7f:f0:7f:f2:10:34:85:56:9b:
ca:d4:5e:ec:31:d1:87:90:01:ac:96:2c:0e:3e:83:af:b9:9d:
b4:4f:26:62:03:77:f3:0d:fa:4b:dd:61:b4:fd:d9:b3:5c:cf:
36:94:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:36 2026 by rpki-client