Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: aT+h4lsfrg/PT8rJWQHW3uw8iy06iYxi3Oftk+kQ+rM=
Subject key identifier: AC:64:86:5C:A5:5B:45:41:9B:FE:83:08:3B:A3:80:0C:6A:0C:D7:27
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019CAAFD4CD2846581C757EAB0FC02D2406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: C7
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: ZLWZbYjuXb4PuZPJzJ7taVSmzGS7POFEbUq/+mL5IB4=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4c:d2:84:65:81:c7:57:ea:b0:fc:02:d2:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=ac64865ca55b45419bfe83083ba3800c6a0cd727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:7d:8f:cc:e9:04:bf:d9:6e:45:d1:e8:18:
f3:a8:a5:ee:1a:cd:d1:76:81:c1:37:72:80:51:1e:
20:39:6f:e0:42:01:d1:89:66:ca:d3:28:9f:3e:d2:
6d:23:0c:39:c3:10:f3:3b:49:55:e9:a2:45:51:dd:
bd:c7:f5:35:ab:cc:88:b8:78:ae:a3:85:16:b8:23:
32:f0:c5:86:6e:9a:99:27:c7:a6:3e:e2:28:5c:8f:
27:6c:59:d8:f9:53:80:0a:a6:72:eb:36:fc:02:7b:
69:ab:3d:a9:23:fb:93:67:f1:6b:7d:ee:2e:47:f3:
a3:28:17:35:ff:3b:16:4f:6b:18:58:43:99:2a:03:
1c:a7:a9:48:b0:5e:58:44:2f:53:48:82:c5:be:d1:
a8:9d:3c:ef:3f:8e:a7:0e:f7:6d:8c:ea:c4:f0:47:
a7:fd:9a:39:70:34:be:21:ba:c9:02:27:d5:33:e2:
29:db:69:c2:f7:04:fa:39:47:3f:e7:43:13:46:18:
15:a8:74:1b:ac:cf:d1:1d:0e:4b:ba:ce:87:b6:8f:
45:3b:d0:a9:98:99:8c:6c:c6:80:b2:26:86:31:76:
de:ee:54:e1:19:bf:a9:d1:3a:c9:2f:f3:f6:36:08:
23:18:ff:ba:df:1b:70:05:5b:cc:0e:58:31:7f:f8:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:86:5C:A5:5B:45:41:9B:FE:83:08:3B:A3:80:0C:6A:0C:D7:27
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:20:06:c2:7a:c9:8f:35:6f:e0:7e:05:39:9b:e1:c3:c2:c1:
52:1f:c3:fd:99:d0:99:f5:4b:ba:53:5b:9d:c9:64:7c:1e:26:
0f:29:32:1d:4b:da:0a:a5:09:b3:15:61:25:f4:0c:b4:c9:20:
b1:44:33:15:9f:7e:5b:96:d6:b4:40:79:d6:4d:40:57:b1:e1:
71:80:93:a2:56:52:ce:54:8f:0b:18:08:73:8b:ab:7a:c6:71:
45:93:30:42:d5:22:31:4d:94:c4:e7:36:8f:cc:8f:ad:21:48:
68:fb:45:f8:70:29:2a:d4:2d:f9:74:88:85:95:f2:40:21:89:
0b:01:05:7c:25:80:ef:39:01:ed:b0:4c:68:e9:41:44:f0:0f:
6c:e2:60:66:7c:92:c1:40:ff:e1:97:ea:c3:3f:59:09:d6:67:
45:3d:3b:69:49:92:de:0e:55:be:05:16:c0:6d:6b:93:52:e7:
bd:ec:ef:a3:29:66:c4:03:69:dd:6e:45:3b:68:33:55:1f:5b:
8f:e1:b0:d0:16:92:c1:98:a1:cd:f8:a3:09:4f:d2:1b:c8:98:
c0:fc:38:e1:de:01:3a:8c:e7:d3:cd:ad:43:af:1e:03:f9:ad:
4b:bf:34:00:df:e1:42:f1:06:7b:b8:40:32:c5:54:6e:6b:e7:
16:d1:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:12 2026 by rpki-client