Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: xmyEVUXP14D75qrs34C5+aKDdybwU54ZgT7EpibBxSE=
Subject key identifier: F9:D0:E0:D2:EC:A4:50:C4:14:F5:D5:25:FF:D3:A4:BF:06:65:BD:EC
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019FA975CDC374221890593B31CD6AAFBB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 16:01:37 +0000
Manifest this update: Tue 28 Jul 2026 16:01:37 +0000
Manifest next update: Wed 29 Jul 2026 16:01:37 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: +ZhP0l4sFbJ40ScsbZXEvE7nUMw79blvn02H/YvhM2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:cd:c3:74:22:18:90:59:3b:31:cd:6a:af:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Jul 28 16:01:37 2026 GMT
Not After : Jul 29 16:01:37 2026 GMT
Subject: CN=f9d0e0d2eca450c414f5d525ffd3a4bf0665bdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:12:9f:9d:ee:ab:70:c7:c8:f7:95:87:6d:
f9:c5:5d:31:91:ef:92:e2:31:14:05:18:ac:bd:7b:
d7:de:b2:37:d7:72:e5:10:aa:8e:df:12:8a:87:c9:
c2:af:da:39:77:3a:77:ff:f0:3d:b2:61:76:12:9a:
6c:22:32:65:44:23:40:b7:97:17:86:0c:e3:6a:28:
bf:51:45:c8:c8:3d:df:ea:44:b9:9a:a8:2b:75:16:
85:60:1e:ef:fd:0a:e4:a4:0e:9f:15:3a:e2:fd:c0:
18:9b:78:9c:ac:bc:ef:a6:76:fb:74:ca:31:c2:51:
61:4c:f4:2e:4c:81:2d:03:90:bb:73:b4:a9:0d:df:
ba:67:87:29:b6:31:be:da:47:43:a8:67:ca:cc:89:
97:6a:45:cc:a9:21:68:c0:3f:51:b8:a0:37:ba:3f:
51:ba:44:53:6b:46:08:bc:22:1e:d5:2e:7a:92:41:
b8:e3:44:05:fe:a8:d2:8b:62:e6:0f:78:31:cc:26:
bc:cd:01:57:6e:a8:3b:5f:71:ca:79:08:e2:b0:51:
5e:ff:e1:ef:5f:a3:39:aa:e5:0c:e8:a7:c5:21:70:
e1:b4:42:4d:2e:fd:cb:05:61:9e:8a:92:84:15:7d:
af:13:a3:48:36:93:57:97:04:96:54:26:98:40:70:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:E0:D2:EC:A4:50:C4:14:F5:D5:25:FF:D3:A4:BF:06:65:BD:EC
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:59:3f:69:00:f0:8d:ae:7d:c8:1a:8f:0a:c2:6e:1b:07:66:
21:ea:ca:67:12:90:7e:1e:2e:8f:60:6d:12:11:87:76:98:bb:
2f:38:5e:42:1f:cb:77:92:74:e4:ac:f8:aa:3a:bd:7f:f2:12:
0b:72:4d:92:37:87:22:02:e6:99:77:72:7f:eb:0d:c8:e0:b1:
08:0f:cf:a2:b5:e8:07:3b:2d:7f:f8:f7:00:61:a1:1a:83:e8:
8e:da:ea:c0:1e:d8:dd:c5:5d:f7:d7:6a:7c:6e:ec:f0:d9:68:
73:43:83:c9:55:52:06:df:23:88:c3:28:d6:07:0e:be:54:29:
34:e8:47:6a:ac:0f:ce:26:7f:d5:76:30:df:09:e9:1b:ca:3c:
a3:f5:92:a6:9f:05:05:da:3f:70:bd:63:68:03:b9:d4:b7:03:
70:ee:e2:37:d9:82:df:ee:6b:15:c2:57:5c:ed:9f:82:30:9f:
d2:c0:06:44:50:80:81:01:6b:7f:60:76:a7:32:0b:6f:c6:ce:
a4:a6:8c:98:55:39:14:7b:66:66:52:07:1d:a4:81:fa:ec:02:
3d:f9:45:9a:a3:ff:99:b7:31:0d:b1:a8:16:0a:49:e9:97:23:
e6:11:6b:77:8d:ba:39:29:42:a6:86:fd:ec:2d:37:fe:e0:2e:
b3:80:4d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdc3DdCIYkFk7Mc1qr7tOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjYwNzI4MTYwMTM3WhcNMjYwNzI5MTYwMTM3WjAzMTEwLwYDVQQD
EyhmOWQwZTBkMmVjYTQ1MGM0MTRmNWQ1MjVmZmQzYTRiZjA2NjViZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXoSn53uq3DHyPeVh235xV0xke+S
4jEUBRisvXvX3rI313LlEKqO3xKKh8nCr9o5dzp3//A9smF2EppsIjJlRCNAt5cX
hgzjaii/UUXIyD3f6kS5mqgrdRaFYB7v/QrkpA6fFTri/cAYm3icrLzvpnb7dMox
wlFhTPQuTIEtA5C7c7SpDd+6Z4cptjG+2kdDqGfKzImXakXMqSFowD9RuKA3uj9R
ukRTa0YIvCIe1S56kkG440QF/qjSi2LmD3gxzCa8zQFXbqg7X3HKeQjisFFe/+Hv
X6M5quUM6KfFIXDhtEJNLv3LBWGeipKEFX2vE6NINpNXlwSWVCaYQHDylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnQ4NLspFDEFPXVJf/TpL8GZb3sMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlk/aQDw
ja59yBqPCsJuGwdmIerKZxKQfh4uj2BtEhGHdpi7LzheQh/Ld5J05Kz4qjq9f/IS
C3JNkjeHIgLmmXdyf+sNyOCxCA/PorXoBzstf/j3AGGhGoPojtrqwB7Y3cVd99dq
fG7s8Nloc0ODyVVSBt8jiMMo1gcOvlQpNOhHaqwPziZ/1XYw3wnpG8o8o/WSpp8F
Bdo/cL1jaAO51LcDcO7iN9mC3+5rFcJXXO2fgjCf0sAGRFCAgQFrf2B2pzILb8bO
pKaMmFU5FHtmZlIHHaSB+uwCPflFmqP/mbcxDbGoFgpJ6Zcj5hFrd426OSlCpob9
7C03/uAus4BNuA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:13:27 2026 by rpki-client