Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: vedTIGfZCS3j41y8s9tYCYVlsX1fLt5gyrAAJsVT2kM=
Subject key identifier: 2C:95:AC:D0:99:57:0A:70:8F:F3:99:05:E9:07:56:87:83:69:99:50
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 01A0D8DF23FB85F95F36323B0C3A67E5E182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 02F2
Signing time: Fri 25 Sep 2026 14:01:37 +0000
Manifest this update: Fri 25 Sep 2026 14:01:37 +0000
Manifest next update: Sat 26 Sep 2026 14:01:37 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: xlE6VrYpsiSixPpI1/+qKTT2SMaibR2P8qGRiYSFJJI=)
2: tSbeP8_EOpw6AyTRFTldETaK43c.asa (hash: KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:23:fb:85:f9:5f:36:32:3b:0c:3a:67:e5:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Sep 25 14:01:37 2026 GMT
Not After : Sep 26 14:01:37 2026 GMT
Subject: CN=2c95acd099570a708ff39905e907568783699950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:34:c5:ac:da:3a:78:80:bf:55:2c:d6:a5:
5f:dc:24:92:98:d5:6e:23:68:35:16:fc:d4:6c:18:
a9:be:34:e0:a9:1a:ee:5f:fe:31:57:dd:b4:dc:7b:
d6:e4:15:18:c2:d2:85:89:d3:43:28:4d:e0:77:9d:
22:45:61:c8:6f:21:1d:eb:f5:91:2e:19:9b:55:cc:
62:d3:13:ef:f5:1f:dd:c5:a9:a5:10:e3:cb:49:8a:
d8:c8:22:89:8b:ad:3f:46:89:60:ed:6e:17:78:67:
23:72:04:8e:1e:bf:9f:b9:cf:41:a5:48:04:34:44:
38:14:8f:fc:30:b1:96:0f:d4:46:0d:a3:f1:a6:b8:
0f:7b:78:f6:17:13:72:a7:ec:d8:75:2e:40:e1:a9:
0a:a8:4b:3c:80:c5:cf:1f:a1:6e:cc:4e:99:31:39:
6d:4b:70:91:7b:21:a9:78:fd:74:ec:f1:7d:50:5b:
8b:0f:2f:dd:28:24:8f:ef:a8:be:26:e5:78:a8:52:
6d:48:7a:5f:ff:c6:26:76:e3:5f:c1:e5:13:bd:c0:
8a:4a:6e:d4:09:24:7f:6b:02:04:c4:ef:96:53:6b:
b0:6f:f6:00:31:d1:61:e4:cf:82:6e:0c:88:00:6f:
93:77:a5:ce:74:cb:5d:1c:83:82:49:12:33:03:23:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:AC:D0:99:57:0A:70:8F:F3:99:05:E9:07:56:87:83:69:99:50
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b0:9c:af:96:21:26:0e:6f:6c:b0:d1:02:e6:57:87:eb:98:
46:ba:48:cf:72:b9:9c:68:49:ad:42:0b:fb:63:b9:35:0b:88:
00:f5:ab:eb:c3:cf:a5:8e:69:ac:c0:6f:ff:01:a7:ee:0a:29:
b0:c5:89:f2:a1:c9:a6:c6:eb:d1:76:be:19:2d:8a:99:48:5d:
3c:ef:bf:e4:4c:ab:6b:89:58:bf:57:13:d5:3c:b2:b8:e2:78:
ad:52:13:03:d9:ed:89:7b:aa:0d:0d:d6:b2:39:e3:07:98:4b:
76:9a:56:63:73:a7:3a:fd:d9:8e:fe:72:93:fd:0d:b8:8b:76:
a8:08:48:3f:29:d8:f6:61:07:62:7f:6a:97:41:02:dd:2c:d7:
01:24:0d:b4:72:0f:28:3b:a1:7d:ce:db:37:52:af:85:f1:10:
70:11:54:52:b5:9d:43:e0:50:e9:28:8e:78:c6:45:a8:5d:35:
01:bd:7a:e5:80:8b:19:de:db:14:07:03:16:bc:54:d0:3c:33:
13:94:c9:96:4f:4b:55:7c:31:7d:ba:f6:5e:dd:dd:a1:c3:7c:
8c:e7:86:25:55:bb:f3:73:60:ba:4f:25:47:8d:86:1f:f2:93:
b5:0f:54:5d:bc:13:55:c2:31:c0:83:8f:d3:04:0f:5d:f6:4d:
5d:9e:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:01:45 2026 by rpki-client