Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: gF2J0Iv3mxqnsD2sIa5p3+XaI6BHzmpoDeJhNNXOd6E=
Subject key identifier: 79:A2:8D:F5:EA:BA:79:E7:5A:E8:B9:E7:3D:9C:AE:88:DD:75:DC:27
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019D9C635EC4DE135F449906F7A4EAF10E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 0144
Signing time: Fri 17 Apr 2026 17:00:51 +0000
Manifest this update: Fri 17 Apr 2026 17:00:51 +0000
Manifest next update: Sat 18 Apr 2026 17:00:51 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: Bsq2YXdZKwLDI2lkuCCq+G4ZWHz0ISkpajkvKHqv9VI=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:5e:c4:de:13:5f:44:99:06:f7:a4:ea:f1:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Apr 17 17:00:51 2026 GMT
Not After : Apr 18 17:00:51 2026 GMT
Subject: CN=79a28df5eaba79e75ae8b9e73d9cae88dd75dc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:0f:35:6e:e7:d7:90:5c:2f:b6:70:d7:78:
10:20:74:aa:67:83:38:6c:69:7a:bb:e8:8b:4c:9e:
3e:db:f1:fb:3b:a8:6d:02:bf:22:a9:46:df:24:c8:
cc:4d:20:c0:1f:ec:21:36:1d:ef:7e:61:eb:ba:4c:
eb:4b:0d:ac:42:e8:1b:d7:10:16:27:ed:21:1c:b7:
48:58:24:b8:76:eb:96:ff:33:71:49:df:52:06:07:
d4:69:9c:86:8a:77:63:a0:fe:55:cd:16:e6:f3:47:
d4:58:82:ef:56:dd:c4:ca:76:6d:87:42:ce:35:d4:
b2:85:04:04:ec:b4:91:3f:b1:f3:18:52:88:12:55:
43:1f:77:cd:76:34:ba:a3:9f:5a:3b:17:ce:b9:45:
d5:62:14:4a:5b:48:16:03:2c:20:90:b1:39:4d:c2:
01:ef:c3:1e:47:dd:4a:a7:bb:19:f2:37:ff:d3:b5:
10:b2:76:99:4f:ba:50:62:b1:03:73:51:75:f0:69:
7e:6b:3f:0d:7f:cf:9b:28:26:bd:6a:18:6e:a4:98:
ea:d4:db:b8:1b:0c:9f:53:43:a9:c1:d7:5e:eb:f1:
b6:06:fb:17:3a:2f:f3:cc:1f:21:de:6b:09:55:2d:
d8:26:b7:87:91:e5:a8:41:dd:b1:65:9f:a6:5e:f0:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:8D:F5:EA:BA:79:E7:5A:E8:B9:E7:3D:9C:AE:88:DD:75:DC:27
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:67:b3:99:49:2f:5e:75:ed:cd:ca:aa:c3:a7:3c:d4:f7:0f:
fd:11:88:98:64:b8:e4:51:e4:5c:96:b2:18:25:a4:0c:dd:ef:
5c:ca:c3:63:72:cc:ad:39:5a:f6:32:e2:9c:4b:c7:d9:37:ac:
e2:e5:f1:35:a8:b5:59:10:c8:74:62:44:62:5d:68:b8:64:63:
27:46:5e:98:23:c5:7a:3b:14:5f:9c:90:6e:c2:e6:15:b2:b4:
1d:fc:f6:b1:42:ba:d8:b1:54:e8:4a:c3:29:e6:16:4f:c3:26:
46:27:75:92:c3:62:65:bb:13:7a:4c:fd:be:d3:7a:8f:17:6c:
57:36:c8:0f:b6:06:f9:36:22:ea:ef:a2:9d:b6:65:45:ad:e6:
7a:17:8f:81:7a:fb:77:b0:10:88:db:ad:c1:08:ba:3e:e9:12:
05:db:d7:05:87:a7:b8:31:a8:c1:8d:f1:1d:77:35:93:05:99:
47:19:ba:7d:0a:e1:1f:62:19:78:21:1c:f6:f1:d3:6d:63:95:
30:95:be:49:71:63:4e:59:6e:a1:39:49:3a:28:d4:8a:ce:d5:
fc:e0:ca:b5:2b:38:0b:75:a1:9c:8d:fc:aa:30:e4:81:df:65:
72:10:e8:ac:e5:c0:14:dc:bf:bc:fb:7f:e1:ea:45:08:58:14:
ab:06:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:03 2026 by rpki-client