Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: 0dBu6/yqPssvst3r3wRKSyYrrrR5m5zvWl32x/xjYvQ=
Subject key identifier: D1:94:6E:9C:E9:A2:95:C2:D6:D2:9B:52:C3:A6:00:2E:CB:E6:B4:AF
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019EBE1125B77E68FB707C92495AF45A1666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 01DA
Signing time: Fri 12 Jun 2026 23:00:55 +0000
Manifest this update: Fri 12 Jun 2026 23:00:55 +0000
Manifest next update: Sat 13 Jun 2026 23:00:55 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: /NLjzOxHaXztmflj/q6Db39rGrl0kF0ZYHE65FeCuMs=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:25:b7:7e:68:fb:70:7c:92:49:5a:f4:5a:16:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Jun 12 23:00:55 2026 GMT
Not After : Jun 13 23:00:55 2026 GMT
Subject: CN=d1946e9ce9a295c2d6d29b52c3a6002ecbe6b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:ea:21:37:96:3b:b0:5b:f2:76:7e:56:94:
49:98:ea:f5:24:54:1c:2f:d9:65:22:df:1f:07:bd:
28:1c:5f:ef:05:a3:f6:c7:f6:9f:7e:e4:24:81:6b:
2b:53:d3:25:9d:05:38:c8:16:44:c8:e0:86:f2:fa:
01:15:7d:92:c5:45:40:aa:30:ff:5b:14:03:4e:87:
1e:77:34:8c:ee:39:3b:19:ca:c7:28:23:05:49:3f:
9b:64:06:dd:e7:01:1b:2a:6a:07:f5:62:86:fe:e4:
6d:32:92:09:e9:c6:9a:2d:c5:a6:07:88:ea:42:bd:
8e:25:e1:51:d8:64:25:73:1b:a7:fc:2e:61:a4:2c:
96:2c:73:6f:e1:07:22:59:93:ae:17:79:f2:fc:d5:
9d:0f:fc:ec:22:19:0f:10:0f:14:c3:8f:b8:08:4a:
86:e4:48:7e:b4:a1:b6:dc:57:0d:8e:b8:f0:0a:be:
f0:f0:41:51:87:d6:74:06:dc:e0:1d:34:86:f0:46:
2c:42:0f:21:81:95:8e:64:e2:52:c5:91:9c:c1:41:
5c:c8:7e:25:d4:7d:c2:40:8a:2f:f0:fc:24:b6:8e:
37:c5:9e:75:5e:4b:7a:d6:87:b4:3d:53:c6:26:ea:
b4:ba:80:14:83:73:b1:d4:2a:be:12:b5:83:d8:44:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:6E:9C:E9:A2:95:C2:D6:D2:9B:52:C3:A6:00:2E:CB:E6:B4:AF
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:68:bf:b3:84:c3:6d:4e:a9:14:0c:08:ec:8b:d4:6a:29:
b3:9d:6c:dc:bf:0b:72:0e:05:b2:fb:7e:f6:54:f1:c6:51:05:
f7:e9:19:4d:7c:5d:00:54:c6:f0:0c:97:8f:bd:4a:eb:ef:67:
ee:10:bd:8e:80:2e:9f:ff:23:a7:44:de:de:20:2b:f5:63:4a:
1a:6c:5a:59:bc:5b:86:8c:e6:ec:bd:9a:8b:83:33:59:b8:30:
62:dc:77:d5:17:33:a7:a5:3d:31:e1:2f:ea:d5:2c:dd:55:b8:
bc:c3:ee:8c:0b:88:c1:96:ca:cb:ea:09:e2:96:33:d4:8d:e3:
d7:79:84:93:b8:13:09:b7:7b:e9:c3:0d:3c:79:32:98:d5:16:
01:25:45:b2:74:37:4c:0e:38:b3:50:46:b9:95:3d:b9:4e:69:
97:1b:50:6e:a7:07:fc:a4:62:8d:4d:6e:6e:3c:c3:ef:b6:d0:
37:ac:77:95:99:78:20:3c:d7:b1:b3:19:f0:cb:50:48:fe:b7:
93:72:d6:1c:41:26:2d:3c:7c:5a:9b:6e:9c:be:66:6f:49:42:
15:f9:8d:96:c9:3b:2d:f3:6c:97:3b:86:b4:54:29:38:df:e1:
4e:b2:26:58:b3:4e:55:fb:e7:41:81:cc:59:c7:fa:e3:f0:c1:
6a:c0:95:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ESW3fmj7cHySSVr0WhZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODYxZmU0MTU0N2Q4YmZjNTU3M2ZmNTI3N2NhMDBlNDcz
YmFmZWMwHhcNMjYwNjEyMjMwMDU1WhcNMjYwNjEzMjMwMDU1WjAzMTEwLwYDVQQD
EyhkMTk0NmU5Y2U5YTI5NWMyZDZkMjliNTJjM2E2MDAyZWNiZTZiNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrqITeWO7Bb8nZ+VpRJmOr1JFQc
L9llIt8fB70oHF/vBaP2x/affuQkgWsrU9MlnQU4yBZEyOCG8voBFX2SxUVAqjD/
WxQDTocedzSM7jk7GcrHKCMFST+bZAbd5wEbKmoH9WKG/uRtMpIJ6caaLcWmB4jq
Qr2OJeFR2GQlcxun/C5hpCyWLHNv4QciWZOuF3ny/NWdD/zsIhkPEA8Uw4+4CEqG
5Eh+tKG23FcNjrjwCr7w8EFRh9Z0BtzgHTSG8EYsQg8hgZWOZOJSxZGcwUFcyH4l
1H3CQIov8Pwkto43xZ51Xkt61oe0PVPGJuq0uoAUg3Ox1Cq+ErWD2ETDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGUbpzpopXC1tKbUsOmAC7L5rSvMB8GA1UdIwQY
MBaAFAiGH+QVR9i/xVc/9Sd8oA5HO6/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgt
NTUwZGFlYjZlNjUxLzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgtNTUwZGFlYjZlNjUx
LzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXpov7OE
w21OqRQMCOyL1Gops51s3L8Lcg4Fsvt+9lTxxlEF9+kZTXxdAFTG8AyXj71K6+9n
7hC9joAun/8jp0Te3iAr9WNKGmxaWbxbhozm7L2ai4MzWbgwYtx31Rczp6U9MeEv
6tUs3VW4vMPujAuIwZbKy+oJ4pYz1I3j13mEk7gTCbd76cMNPHkymNUWASVFsnQ3
TA44s1BGuZU9uU5plxtQbqcH/KRijU1ubjzD77bQN6x3lZl4IDzXsbMZ8MtQSP63
k3LWHEEmLTx8WptunL5mb0lCFfmNlsk7LfNslzuGtFQpON/hTrImWLNOVfvnQYHM
Wcf64/DBasCVeg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:58 2026 by rpki-client