Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: oK20wKbNqpAlmkK2biu1qwKFk/JbhdYXymxdO8fUkT8=
Subject key identifier: 3B:24:71:65:20:2B:2C:C6:D2:5B:51:56:75:0E:9C:8B:A8:20:30:A8
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019D98F4B53A63072147BFB699A64A898C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 099D
Signing time: Fri 17 Apr 2026 01:01:07 +0000
Manifest this update: Fri 17 Apr 2026 01:01:07 +0000
Manifest next update: Sat 18 Apr 2026 01:01:07 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: AHNPW3E6EZCI+bd5MKkW9gUHssaV1XSpcsW3ss93MEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b5:3a:63:07:21:47:bf:b6:99:a6:4a:89:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Apr 17 01:01:07 2026 GMT
Not After : Apr 18 01:01:07 2026 GMT
Subject: CN=3b247165202b2cc6d25b5156750e9c8ba82030a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:91:1e:af:81:9d:95:64:86:af:91:75:27:
33:cd:65:75:f9:c4:41:c0:49:4c:37:07:49:3c:6e:
37:51:81:b4:a5:5e:f6:ba:ec:27:4c:3c:e8:da:c5:
9e:32:54:19:87:29:9a:31:1a:1a:c2:e1:cc:c3:21:
5d:2c:ee:29:43:a9:29:cf:52:ba:7d:a0:67:85:c0:
14:7a:e3:74:4d:6b:e1:90:6f:c0:c5:ea:71:58:0a:
c0:28:4c:2d:25:4a:b5:07:e4:18:72:3a:1e:da:2e:
1f:20:44:1c:3f:ce:53:59:dc:bb:c4:04:9d:92:b3:
f9:f2:41:d6:e9:34:aa:26:cf:b9:d0:62:82:1e:75:
05:cb:08:96:cd:7a:44:1f:41:e2:52:a2:ab:96:10:
67:6f:21:31:28:6f:10:d0:1a:84:6f:04:57:31:2a:
6e:a0:6c:de:2e:95:27:49:b6:3b:28:15:f5:82:d2:
c0:73:cf:67:01:55:4f:b3:a1:db:1c:61:96:25:57:
a8:7c:ff:72:84:46:12:ef:53:37:70:9c:7a:f1:a7:
16:3f:6f:79:35:84:2e:84:d1:6b:55:d2:6e:e3:ff:
23:dc:1f:62:a7:51:42:c4:9d:14:69:1b:98:b2:6c:
ef:51:c5:e3:64:69:77:d1:47:3b:fb:72:7c:a0:36:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:71:65:20:2B:2C:C6:D2:5B:51:56:75:0E:9C:8B:A8:20:30:A8
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:0e:5e:7e:9d:da:e1:7d:1d:78:bd:3a:19:7c:11:ba:32:
52:0b:e7:b9:20:bc:1f:34:41:1b:86:3f:9e:e2:b9:d9:9b:ff:
51:fe:e8:85:2f:b2:70:4a:69:d0:41:93:2c:16:24:ca:6e:e7:
07:94:3a:f7:5c:e3:62:bc:c8:0c:3c:2a:a0:4f:25:98:f1:e0:
6f:d3:2c:fe:8f:de:48:3a:4b:c8:83:52:d1:99:5d:7f:dc:e8:
ac:22:70:5d:9d:d4:67:f0:17:15:e5:bc:b0:92:eb:fd:d3:f4:
6f:28:fd:82:11:92:ce:d2:f2:2a:50:a9:6c:a4:07:1e:0f:7e:
96:5c:f2:ac:0e:14:b4:18:11:7d:69:35:40:5d:ad:55:20:b3:
24:47:6d:dd:c4:97:21:16:21:50:44:48:d0:ce:34:d2:23:5e:
dc:71:1f:68:fd:33:8e:f6:f8:96:a2:d2:99:19:5a:61:05:06:
85:ad:c3:88:8b:60:c5:7b:1f:d0:e2:55:c7:6e:9d:61:ce:29:
2c:49:41:24:db:18:34:5c:d0:37:2f:f0:b8:a1:bd:d2:bb:3c:
28:4e:bd:1e:1e:29:11:09:58:72:b9:8c:68:1c:90:4b:4a:da:
c4:01:78:4e:c2:b3:6f:53:30:5a:d6:93:48:3e:85:be:bd:6f:
f7:c9:a5:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9LU6YwchR7+2maZKiYxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDA3Y2ZjMjhhYzQ3MDNkZjZhYjI2ZmNkMmUzOTUzY2Uz
OTA5NzkwHhcNMjYwNDE3MDEwMTA3WhcNMjYwNDE4MDEwMTA3WjAzMTEwLwYDVQQD
EygzYjI0NzE2NTIwMmIyY2M2ZDI1YjUxNTY3NTBlOWM4YmE4MjAzMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GGRHq+BnZVkhq+RdSczzWV1+cRB
wElMNwdJPG43UYG0pV72uuwnTDzo2sWeMlQZhymaMRoawuHMwyFdLO4pQ6kpz1K6
faBnhcAUeuN0TWvhkG/AxepxWArAKEwtJUq1B+QYcjoe2i4fIEQcP85TWdy7xASd
krP58kHW6TSqJs+50GKCHnUFywiWzXpEH0HiUqKrlhBnbyExKG8Q0BqEbwRXMSpu
oGzeLpUnSbY7KBX1gtLAc89nAVVPs6HbHGGWJVeofP9yhEYS71M3cJx68acWP295
NYQuhNFrVdJu4/8j3B9ip1FCxJ0UaRuYsmzvUcXjZGl30Uc7+3J8oDZ0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDskcWUgKyzG0ltRVnUOnIuoIDCoMB8GA1UdIwQY
MBaAFADQfPworEcD32qyb80uOVPOOQl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQt
ODA1NDUyMDU0NTZjLzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQtODA1NDUyMDU0NTZj
LzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/cOXn6d
2uF9HXi9Ohl8EboyUgvnuSC8HzRBG4Y/nuK52Zv/Uf7ohS+ycEpp0EGTLBYkym7n
B5Q691zjYrzIDDwqoE8lmPHgb9Ms/o/eSDpLyINS0Zldf9zorCJwXZ3UZ/AXFeW8
sJLr/dP0byj9ghGSztLyKlCpbKQHHg9+llzyrA4UtBgRfWk1QF2tVSCzJEdt3cSX
IRYhUERI0M400iNe3HEfaP0zjvb4lqLSmRlaYQUGha3DiItgxXsf0OJVx26dYc4p
LElBJNsYNFzQNy/wuKG90rs8KE69Hh4pEQlYcrmMaByQS0raxAF4TsKzb1MwWtaT
SD6Fvr1v98mlDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:25 2026 by rpki-client