Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: j1WprlWklliBY+ICATHIXCT51Q5ofQ9R1PB6C2CnZ04=
Subject key identifier: 32:91:7C:34:34:E0:7D:EF:0D:D6:41:ED:6C:54:A5:88:6A:30:F7:66
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019EBDD99ED091D3005EDFC2C665F6E572B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 22:00:15 +0000
Manifest this update: Fri 12 Jun 2026 22:00:15 +0000
Manifest next update: Sat 13 Jun 2026 22:00:15 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: XEB3r6Em5yj3L8FJynfqqSLVgvi1BgMFWiwYjumbb7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:9e:d0:91:d3:00:5e:df:c2:c6:65:f6:e5:72:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Jun 12 22:00:15 2026 GMT
Not After : Jun 13 22:00:15 2026 GMT
Subject: CN=32917c3434e07def0dd641ed6c54a5886a30f766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:ad:5a:5f:b5:c7:01:e4:53:f2:79:4c:b6:
9e:28:6a:ef:41:68:43:4f:1f:15:2e:d0:0d:39:b5:
41:49:72:68:d2:2c:50:65:ad:17:98:78:22:9f:21:
c8:1e:5b:c4:bf:4a:3b:a7:80:55:f1:0c:e0:1d:6b:
5f:f7:ee:33:ca:95:c7:81:cc:84:5f:1b:e7:85:38:
94:7d:bc:c3:82:a7:5d:17:18:b1:1b:13:ce:48:a0:
be:68:ed:6f:fe:84:2c:a5:9b:2a:2e:9e:51:b9:5f:
48:12:52:50:1c:b4:5e:5e:81:cf:09:db:ed:fe:32:
e7:a3:11:02:81:9c:e3:81:84:7a:34:65:b8:42:82:
5e:87:c5:5e:c8:a4:bf:3f:28:06:e5:7f:d0:93:1c:
78:cd:96:96:93:ca:75:89:fb:e7:04:f6:43:c1:42:
2a:8c:30:ab:00:ae:6b:50:fc:b2:75:c3:9c:52:5f:
f0:73:c0:c8:48:12:c7:db:bb:43:e5:64:35:7a:cc:
2f:8b:8d:6d:5c:85:82:26:68:ca:f4:ba:9a:ec:8c:
12:a8:a1:43:39:ef:72:cb:33:e6:38:d8:9e:21:e2:
ae:df:88:f2:06:49:93:62:de:f8:b2:6d:a2:2d:3f:
c5:3e:3b:74:a5:6f:35:9c:36:a4:36:04:92:b4:6e:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:91:7C:34:34:E0:7D:EF:0D:D6:41:ED:6C:54:A5:88:6A:30:F7:66
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:e9:fe:cd:63:e8:c5:4e:60:3d:7c:2d:a7:bb:6e:f4:89:
e8:ad:11:fd:4f:79:64:cc:da:ea:e6:67:4b:16:99:df:6a:03:
60:2c:22:9a:eb:f4:45:a0:6d:85:97:c2:c1:67:f1:70:d4:15:
78:e7:8c:6b:21:66:a4:45:86:6c:f0:ad:f4:22:6f:e2:ce:b4:
f8:66:5c:cc:84:c2:2e:56:95:5a:9f:0f:c2:ba:af:c3:3a:88:
00:4f:1a:81:1b:2e:dc:53:c1:6d:4e:4d:84:e0:cf:65:8d:2f:
85:e8:74:7c:90:8a:3a:28:81:2f:a8:69:a3:81:b3:5e:40:d9:
de:77:ff:ea:16:db:c3:84:59:79:62:61:73:96:eb:6e:5e:d7:
2a:33:cd:b9:d1:a3:79:bb:28:db:f7:8e:82:81:a7:9d:b1:02:
c5:19:1e:5d:b7:57:bc:a1:8c:01:db:05:4c:cf:96:61:00:2c:
82:fd:6a:30:2b:e1:15:b8:54:38:56:8d:0b:6b:a7:91:3f:b5:
38:97:ce:d2:f1:50:1e:2e:0b:c5:6e:7c:ef:02:fb:6e:87:fb:
1e:c5:bb:01:d9:57:27:b6:c9:67:e1:c9:58:be:80:d7:aa:53:
be:81:1e:96:fd:26:0c:2a:18:2e:20:4f:26:57:d9:b7:11:24:
b6:9c:92:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692Z7QkdMAXt/CxmX25XK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjYwNjEyMjIwMDE1WhcNMjYwNjEzMjIwMDE1WjAzMTEwLwYDVQQD
EygzMjkxN2MzNDM0ZTA3ZGVmMGRkNjQxZWQ2YzU0YTU4ODZhMzBmNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqWtWl+1xwHkU/J5TLaeKGrvQWhD
Tx8VLtANObVBSXJo0ixQZa0XmHginyHIHlvEv0o7p4BV8QzgHWtf9+4zypXHgcyE
XxvnhTiUfbzDgqddFxixGxPOSKC+aO1v/oQspZsqLp5RuV9IElJQHLReXoHPCdvt
/jLnoxECgZzjgYR6NGW4QoJeh8VeyKS/PygG5X/Qkxx4zZaWk8p1ifvnBPZDwUIq
jDCrAK5rUPyydcOcUl/wc8DISBLH27tD5WQ1eswvi41tXIWCJmjK9Lqa7IwSqKFD
Oe9yyzPmONieIeKu34jyBkmTYt74sm2iLT/FPjt0pW81nDakNgSStG7iOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKRfDQ04H3vDdZB7WxUpYhqMPdmMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVXp/s1j
6MVOYD18Lae7bvSJ6K0R/U95ZMza6uZnSxaZ32oDYCwimuv0RaBthZfCwWfxcNQV
eOeMayFmpEWGbPCt9CJv4s60+GZczITCLlaVWp8PwrqvwzqIAE8agRsu3FPBbU5N
hODPZY0vheh0fJCKOiiBL6hpo4GzXkDZ3nf/6hbbw4RZeWJhc5brbl7XKjPNudGj
ebso2/eOgoGnnbECxRkeXbdXvKGMAdsFTM+WYQAsgv1qMCvhFbhUOFaNC2unkT+1
OJfO0vFQHi4LxW587wL7bof7HsW7AdlXJ7bJZ+HJWL6A16pTvoEelv0mDCoYLiBP
JlfZtxEktpySYA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:34 2026 by rpki-client