
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: C4fCG8cTamSEz8cKclkdFpvxPkgWN+hZsxFlhUu6Y2Y=
Subject key identifier: B2:BF:65:E3:34:6C:8B:5F:44:F8:0C:7D:FE:F9:6E:CD:5A:D7:24:D2
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 01A1C1410C1AEC6505C19F4616260E1411BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1AE7
Signing time: Mon 09 Nov 2026 17:00:27 +0000
Manifest this update: Mon 09 Nov 2026 17:00:27 +0000
Manifest next update: Tue 10 Nov 2026 17:00:27 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: kqI96PS73IQT/AVzI4iXhtsEXJYsQrnVmx15abnlVLo=)
2: LFzzjFaSz6K_Ln1iImOi0GEvjl4.roa (hash: CQgt++gkgy+WEbrupETBLg1kBxLwM/XThjq4nhpIKss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:0c:1a:ec:65:05:c1:9f:46:16:26:0e:14:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Nov 9 17:00:27 2026 GMT
Not After : Nov 10 17:00:27 2026 GMT
Subject: CN=b2bf65e3346c8b5f44f80c7dfef96ecd5ad724d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:18:e3:0a:26:d8:25:a5:c9:7a:fd:9c:3e:
36:7e:69:55:71:36:23:fd:68:06:b1:5a:70:74:82:
26:c4:63:74:6d:0c:33:e6:42:eb:46:cc:fb:c2:42:
0e:f2:59:16:6b:2f:e4:8a:7d:5f:c4:35:fc:6e:63:
e1:c5:f9:f8:34:57:49:92:00:c2:60:f6:d8:09:bb:
0e:24:ae:55:52:b2:a0:06:a7:38:78:61:16:80:df:
06:c3:fc:10:a7:05:35:e3:53:b5:f8:2d:32:c9:53:
55:de:47:8e:f5:0f:0b:78:78:85:17:d8:84:59:77:
8d:2d:d0:6f:78:da:2c:10:1a:fd:9b:d7:e3:49:ee:
de:02:80:9a:56:d3:39:61:ff:af:1e:c2:ec:c5:59:
2e:f7:58:26:bb:f0:2b:45:cd:86:17:f0:8a:83:ca:
90:8d:91:65:b5:41:a1:73:d4:65:4c:e0:2e:c5:a9:
4a:ee:51:fe:17:4d:47:3f:1f:47:46:77:b0:28:37:
cd:14:e0:f1:6c:79:b3:c9:9c:44:53:fd:ca:a0:41:
da:be:b2:b4:b2:cf:e8:5f:ea:51:85:35:0a:3e:87:
28:f6:3f:15:ac:8c:a8:e9:f9:0d:ba:a4:e6:6e:58:
3b:47:72:f1:7f:78:40:57:79:be:e4:b9:05:d2:e3:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:65:E3:34:6C:8B:5F:44:F8:0C:7D:FE:F9:6E:CD:5A:D7:24:D2
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ac:4d:5e:89:a2:85:08:2e:20:b4:ce:17:87:3a:00:aa:f5:
16:97:47:d7:c7:a4:87:3c:fd:6e:27:e8:b6:77:ae:f8:bc:56:
a7:37:14:39:32:ab:55:19:4a:cb:a3:e3:f5:75:b2:7e:38:60:
32:91:56:0f:f6:4a:e1:ad:2a:a1:0e:0a:cc:bd:82:5b:64:91:
19:cb:c5:5d:71:07:57:ee:85:ad:e1:99:b7:60:a0:1a:12:f1:
11:d2:2d:97:2a:d6:7f:ab:c8:d4:f2:01:0a:16:b5:2a:65:8c:
14:97:9b:29:13:a1:61:26:dc:17:ca:99:a4:3b:06:86:0a:89:
82:04:00:a1:0e:77:7c:e9:f9:96:b5:51:09:67:ea:95:f4:be:
cc:83:f4:ad:aa:1d:e9:5d:aa:c6:44:2e:d1:88:f7:82:41:f2:
1d:4f:d4:ce:b6:06:90:e8:c5:c1:5b:fe:f0:fb:c8:46:90:98:
55:70:af:7c:07:f4:ec:0a:1d:cc:f2:c7:40:9d:e6:d9:da:4f:
d7:6e:f9:2c:4b:d9:f6:67:b5:3b:88:92:18:c2:3a:03:16:69:
d5:b9:cb:60:79:77:c8:11:e5:00:0c:d6:00:33:f4:4c:9b:98:
18:ad:73:fd:dc:0a:2d:a9:80:00:7c:1c:61:a0:ab:48:a9:c1:
db:cd:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:33:09 2026 by rpki-client