Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: NQV87qQtObcUVu/v9TauxcTjgKCT6DOjFNwoBcm1Szk=
Subject key identifier: 29:22:9B:49:16:93:28:02:9E:48:FC:E2:1C:C1:BB:4A:DF:9F:F7:11
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 01A0C557718D7F3E68C079B48C65CC77E2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 19:00:37 +0000
Manifest this update: Mon 21 Sep 2026 19:00:37 +0000
Manifest next update: Tue 22 Sep 2026 19:00:37 +0000
Files and hashes: 1: 7KSK4_uUUkie444_ujxg5grYOeQ.roa (hash: S7IvYGWbzxrCMZpkDf1xh4qQXV8wpzsty3IYgqUVqHc=)
2: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: uMx5HZKxeSQht6sCKXRtldDD3raNLiLRY2xzUjJxVIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:71:8d:7f:3e:68:c0:79:b4:8c:65:cc:77:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Sep 21 19:00:37 2026 GMT
Not After : Sep 22 19:00:37 2026 GMT
Subject: CN=29229b49169328029e48fce21cc1bb4adf9ff711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:c4:91:41:31:95:a9:64:d6:61:35:67:69:
37:fd:ff:d1:12:5c:e8:b8:45:ea:92:fa:51:16:12:
6a:b8:f4:f1:0c:d4:0d:b4:60:24:b6:1b:c4:2b:dc:
7d:f4:c3:ff:9e:06:18:d3:c4:50:0e:44:e2:9d:5b:
02:c8:a0:4c:20:a4:42:8c:8f:68:0f:bc:03:f5:85:
06:9c:4e:0d:54:0f:f1:0c:42:1e:df:56:57:8d:ca:
01:9a:7b:3a:cf:f6:18:42:56:75:1a:a2:90:b7:d5:
d8:ea:8d:da:b1:e8:e6:64:91:47:71:9e:43:32:67:
5b:39:cf:43:49:3e:7a:a9:17:47:1c:b2:8f:b1:bf:
2c:db:4e:89:d0:ec:16:57:7c:f1:0d:88:8f:d8:d5:
b0:3c:6a:6a:41:69:cd:b3:55:75:b2:72:d9:10:24:
73:12:82:26:18:d4:9c:15:70:c0:af:45:cf:79:3d:
d6:78:ab:6f:1f:87:02:17:11:ae:d1:4f:c7:0b:34:
77:74:6b:a9:0e:a3:04:b8:d8:87:15:05:55:0b:c7:
21:de:d6:87:71:cb:d4:c7:46:e9:fc:16:e8:69:c1:
a7:a9:b1:b6:15:37:22:b3:c8:fa:d5:13:5e:41:4e:
f4:5b:28:4d:37:dc:5d:0f:a9:35:38:32:f0:e7:11:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:9B:49:16:93:28:02:9E:48:FC:E2:1C:C1:BB:4A:DF:9F:F7:11
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:51:78:00:23:29:3a:41:6f:fb:8e:b3:f1:d0:04:96:ae:
9f:69:34:ff:9c:b4:83:3c:51:f6:a1:5b:7e:22:a9:de:7e:8d:
bf:65:74:52:8c:1c:d4:66:2c:fa:f9:ae:7d:72:6f:55:03:b1:
a5:01:fb:a4:c8:7b:81:ff:7b:bc:64:1e:76:a9:ea:1b:f7:d4:
90:d1:d1:aa:2a:a0:df:7f:d4:69:12:73:6f:4b:e2:3b:3b:c4:
c6:5b:57:ef:84:e9:68:8c:45:a2:ae:dc:b7:9c:37:1b:52:dd:
d2:99:f7:db:45:50:2f:ba:ca:d1:92:00:67:54:6c:e7:cd:93:
c7:e6:71:41:7e:a0:d1:d8:7e:dc:54:f5:f1:e6:00:fa:26:c4:
1c:91:10:37:9b:88:71:65:9a:00:15:64:81:77:c7:12:e6:25:
19:a5:68:96:09:82:f5:84:d2:1d:56:13:64:86:bc:9f:02:af:
57:3e:1b:f8:e1:82:8d:cd:97:cc:68:e5:d3:b9:a0:ba:d5:72:
c0:25:5e:23:e5:c0:37:ce:d7:d9:61:1f:e8:95:2f:33:3e:ee:
3f:b9:5a:25:dd:c0:a7:44:52:62:ed:1d:0f:bd:af:dc:6e:ae:
63:5d:4c:51:12:a1:d1:8a:5b:c7:ce:c4:e2:31:19:f3:22:7b:
0b:87:cc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV3GNfz5owHm0jGXMd+LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjYwOTIxMTkwMDM3WhcNMjYwOTIyMTkwMDM3WjAzMTEwLwYDVQQD
EygyOTIyOWI0OTE2OTMyODAyOWU0OGZjZTIxY2MxYmI0YWRmOWZmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDnEkUExlalk1mE1Z2k3/f/RElzo
uEXqkvpRFhJquPTxDNQNtGAkthvEK9x99MP/ngYY08RQDkTinVsCyKBMIKRCjI9o
D7wD9YUGnE4NVA/xDEIe31ZXjcoBmns6z/YYQlZ1GqKQt9XY6o3asejmZJFHcZ5D
MmdbOc9DST56qRdHHLKPsb8s206J0OwWV3zxDYiP2NWwPGpqQWnNs1V1snLZECRz
EoImGNScFXDAr0XPeT3WeKtvH4cCFxGu0U/HCzR3dGupDqMEuNiHFQVVC8ch3taH
ccvUx0bp/BboacGnqbG2FTcis8j61RNeQU70WyhNN9xdD6k1ODLw5xGeKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkim0kWkygCnkj84hzBu0rfn/cRMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJARReAAj
KTpBb/uOs/HQBJaun2k0/5y0gzxR9qFbfiKp3n6Nv2V0Uowc1GYs+vmufXJvVQOx
pQH7pMh7gf97vGQedqnqG/fUkNHRqiqg33/UaRJzb0viOzvExltX74TpaIxFoq7c
t5w3G1Ld0pn320VQL7rK0ZIAZ1Rs582Tx+ZxQX6g0dh+3FT18eYA+ibEHJEQN5uI
cWWaABVkgXfHEuYlGaVolgmC9YTSHVYTZIa8nwKvVz4b+OGCjc2XzGjl07mgutVy
wCVeI+XAN87X2WEf6JUvMz7uP7laJd3Ap0RSYu0dD72v3G6uY11MURKh0Ypbx87E
4jEZ8yJ7C4fMSg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:53:40 2026 by rpki-client