Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: /gJyxEEkBuGd8gdbH5/ude+Uc8JugEtRCIdFOXNjnIg=
Subject key identifier: CD:1E:D6:77:30:B6:02:2D:AF:A5:BB:93:1C:97:B8:88:EC:6A:E5:BE
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019D39AEE988F3B742D21965974377E97591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: G7WlU1DaqexHq73vksuAPmKSGKPiid8XbLAr9piBEJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e9:88:f3:b7:42:d2:19:65:97:43:77:e9:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=cd1ed67730b6022dafa5bb931c97b888ec6ae5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:0a:ee:0c:d3:07:79:4e:7f:e5:04:51:b3:
1c:2a:87:16:4e:8b:90:34:40:5c:2a:b5:93:0b:c9:
84:b3:be:ee:d6:6d:b3:7e:7a:3f:42:8f:a4:fc:3b:
e1:14:79:09:d9:b1:49:98:5e:9b:d4:42:1a:20:98:
a1:db:ab:5e:77:c4:6a:ab:a2:6c:a4:d0:48:ae:90:
89:f1:63:a3:67:6d:42:12:8b:33:c4:69:6c:93:b7:
31:03:b5:88:c9:56:d6:bf:74:de:4d:a8:d3:4d:09:
c5:43:59:5a:e1:c5:93:52:02:f2:36:53:0b:1e:c5:
b6:0a:a1:ba:09:2d:dd:fb:ad:f3:e0:4e:74:80:e0:
3a:cc:9f:dc:5b:f0:0f:99:6f:fb:b7:68:67:e3:3b:
d8:f3:2f:fd:7f:b8:0f:9d:9b:f0:3f:1e:f5:89:a5:
de:8d:d2:4a:dd:c3:95:a5:4d:51:d9:52:83:4e:7f:
90:9e:11:70:f4:33:6f:cd:2a:e2:54:b5:8f:ee:71:
40:4c:d4:fb:0d:96:6c:54:5e:fb:1f:3e:a4:08:ab:
ff:72:52:91:04:25:43:e4:70:26:b2:b7:02:1f:e5:
1e:19:1d:1d:01:11:af:75:c0:62:1b:32:c3:b2:f8:
87:5c:83:24:a2:7d:36:aa:ab:cd:52:61:19:df:25:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:D6:77:30:B6:02:2D:AF:A5:BB:93:1C:97:B8:88:EC:6A:E5:BE
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:87:c7:f3:d1:61:99:8f:d0:1e:74:c0:be:c4:71:b9:e1:
2c:57:d7:1a:28:f0:79:f5:8c:ce:24:4c:fe:16:13:41:e7:83:
95:bc:93:85:6b:53:d6:61:69:1b:51:4a:24:ae:9e:6b:0e:74:
b1:4a:10:5d:e4:88:18:cd:7d:34:f1:ad:65:11:b1:9b:28:9a:
61:2b:4e:1e:32:91:38:cc:01:7d:34:14:ed:14:b1:65:11:8d:
bb:5a:90:32:a9:0a:90:7c:0f:0a:e3:0e:3c:b9:be:b3:1f:ff:
5f:64:06:63:eb:9f:49:5c:e9:da:cc:aa:79:7e:10:76:d2:89:
15:48:23:4b:15:d3:23:b9:74:ea:a0:30:16:dd:11:f7:b7:f6:
b2:1e:ed:87:6d:80:bc:97:92:ae:f9:e6:dd:c3:94:98:1b:2c:
34:20:8f:5a:7d:a8:1a:59:a3:51:8c:26:a7:49:99:73:c5:fe:
6e:0b:29:9a:85:35:1e:bb:cf:f9:f3:6d:af:be:7a:b4:12:6b:
af:8a:8f:2f:ae:d7:ee:a8:16:c1:9f:3a:fd:f0:87:ee:cc:e4:
48:00:10:02:c9:47:84:78:06:88:3f:3c:2a:d7:82:ac:bd:43:
f7:9a:af:45:52:27:c0:2e:ab:62:b9:04:b7:4c:08:ba:cd:67:
fd:e6:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:58 2026 by rpki-client