Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: OehpzeCDO63PKNAG+Om47zfKdhpSQZb7KbPZMT48FDY=
Subject key identifier: 75:C4:8E:21:CA:AF:8F:41:38:C2:94:4E:4F:54:02:13:E3:4D:FB:01
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019FA7BD4DEF01FFEAD459B828941D9212AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 0254
Signing time: Tue 28 Jul 2026 08:00:29 +0000
Manifest this update: Tue 28 Jul 2026 08:00:29 +0000
Manifest next update: Wed 29 Jul 2026 08:00:29 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: /r8x20SOGxkvu81pYTUc1kIAG43t1wjMMDdqN+OTzOU=)
2: tSbeP8_EOpw6AyTRFTldETaK43c.asa (hash: KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:4d:ef:01:ff:ea:d4:59:b8:28:94:1d:92:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Jul 28 08:00:29 2026 GMT
Not After : Jul 29 08:00:29 2026 GMT
Subject: CN=75c48e21caaf8f4138c2944e4f540213e34dfb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:0a:dd:e4:1a:75:29:d6:c3:d8:8e:f6:f7:
af:2b:3d:81:d9:97:dc:c1:53:e7:59:25:bd:a8:5c:
12:e3:e4:d2:20:09:03:95:6e:b4:8c:7c:91:86:9a:
df:66:57:7b:b1:30:71:4a:7d:be:b3:72:cd:cd:19:
60:ad:3a:45:2e:77:4c:6b:5d:a8:cb:1a:2d:69:1a:
ad:c3:d5:ed:56:5f:15:a4:66:70:5a:9c:d8:af:ab:
2f:95:59:db:41:29:35:fb:4b:b0:53:6a:ed:3f:23:
8d:15:f8:27:93:96:cf:bc:d1:a7:41:00:c4:b3:ac:
35:90:04:46:31:23:40:08:c7:5f:62:4d:f5:66:e3:
a0:d0:5d:71:fe:bc:ce:39:0c:be:22:95:4c:bd:e7:
7c:7a:74:7b:8f:65:fc:f1:3c:7d:93:28:44:45:c3:
b9:c7:52:06:e5:b6:c1:a4:c3:45:7d:72:04:be:04:
c0:bb:09:c6:79:fe:92:6f:0a:fc:b7:bb:4c:18:bd:
a7:a7:fc:00:63:77:7b:94:37:b7:c1:d2:b9:24:2b:
74:6e:dd:f2:68:2d:21:25:63:e8:4f:71:1b:3c:44:
39:30:99:29:10:67:c6:84:98:f9:1d:a2:60:07:58:
79:dd:44:0f:4c:70:af:e3:f6:f4:99:7e:45:8e:0c:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C4:8E:21:CA:AF:8F:41:38:C2:94:4E:4F:54:02:13:E3:4D:FB:01
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e8:e8:38:81:c7:f1:4e:18:cd:ab:94:98:51:d1:b9:41:1d:
53:24:0e:74:85:6a:72:4e:b1:11:ef:c5:96:64:51:35:a2:f7:
18:73:f8:ac:17:99:7e:fa:33:c6:db:38:f6:d7:53:23:7b:e4:
ab:eb:41:28:ad:b8:66:af:fc:b5:3e:dd:75:cf:cc:e0:0a:6a:
db:c0:51:86:8e:88:a7:6e:f0:68:b2:a2:aa:20:18:16:a5:9c:
15:c5:11:11:d0:26:8d:c9:b3:15:2f:a8:e0:f8:87:40:47:50:
3b:b9:38:c3:9d:92:bb:4a:8d:de:b2:88:15:af:e5:71:b8:fa:
e9:61:89:aa:08:6c:54:52:53:7b:31:d9:f6:26:28:07:c1:37:
a7:3d:2d:e0:29:65:0c:6b:43:07:5e:4b:51:24:6f:70:e1:d7:
ee:35:3c:5f:f8:27:ea:d7:de:b9:82:13:fe:fe:d1:90:0e:d9:
19:d4:f6:61:2e:e1:98:87:48:40:e7:4b:8f:32:26:64:d3:15:
38:f6:89:94:0f:21:e2:da:05:20:f3:b3:7d:a6:f5:ba:ae:59:
fd:75:d2:44:87:89:07:6d:73:2d:22:4d:00:6c:1c:ae:ed:8c:
74:aa:bc:98:93:3e:35:f0:75:27:07:32:ed:f9:07:d4:84:7c:
79:10:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:15 2026 by rpki-client