Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: opWQwSNUXyv7uMwFsMcXt/txFWClMb/aeLrkr0KN5MU=
Subject key identifier: 2A:66:46:6B:C4:A1:A7:24:8C:0B:7E:AD:00:30:55:7A:FD:A7:97:56
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 01A0C40DD38BC54530EF63F8542D8DCD765D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0B41
Signing time: Mon 21 Sep 2026 13:00:35 +0000
Manifest this update: Mon 21 Sep 2026 13:00:35 +0000
Manifest next update: Tue 22 Sep 2026 13:00:35 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: bbhJaYaapjtxuT7kDckE+/3VFRuD4o9cXbQmA9KlIPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:d3:8b:c5:45:30:ef:63:f8:54:2d:8d:cd:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Sep 21 13:00:35 2026 GMT
Not After : Sep 22 13:00:35 2026 GMT
Subject: CN=2a66466bc4a1a7248c0b7ead0030557afda79756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:cc:9b:42:dd:29:af:5b:f1:bc:87:22:3a:
30:95:ce:54:78:2e:de:3c:39:e5:dc:d1:2b:e2:17:
35:97:0b:b5:06:94:63:4b:c7:39:f3:41:a9:f4:5b:
4b:0a:35:0b:1a:30:42:eb:5a:1c:94:c8:61:b3:e5:
f9:aa:da:2d:b6:04:1c:47:7a:f1:8a:7f:d8:bd:04:
32:f6:db:6b:f5:50:de:08:1c:ea:7d:9c:27:b0:7f:
71:14:75:73:01:a1:e2:e5:4a:ae:4b:91:49:69:33:
a5:15:2c:4e:41:e3:4a:64:48:78:d0:c0:25:27:83:
2d:e7:56:d7:87:8b:25:87:45:09:3d:b4:51:93:ea:
d8:29:c6:92:f1:da:78:18:b7:7f:9f:06:18:c4:f6:
76:7a:db:df:0c:49:24:3c:03:83:d4:88:18:7b:71:
99:66:ff:e2:2e:8b:7d:7d:d7:08:54:99:a2:79:87:
fc:a2:6e:2c:62:e3:16:ed:55:65:b0:2e:2f:f3:b2:
af:79:d0:8b:b5:cb:ec:1f:e9:e0:58:a6:76:0b:ee:
e4:04:ea:37:40:dd:29:85:3b:e4:a1:40:c9:a3:42:
21:52:68:5f:26:12:94:0b:49:11:49:d9:24:bc:72:
59:27:6d:38:e1:c4:3c:9e:19:fe:dd:06:77:fb:6a:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:66:46:6B:C4:A1:A7:24:8C:0B:7E:AD:00:30:55:7A:FD:A7:97:56
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4d:dc:78:e5:c0:22:1a:c3:5b:85:64:46:ca:ec:0c:9a:2d:
9c:e8:d9:d4:3b:c6:4f:fb:43:1d:3e:8a:22:57:94:92:d8:39:
4c:6c:e0:a0:d8:65:38:0e:d9:a7:f8:83:f0:a7:cf:bc:7d:d5:
3a:9a:74:00:a0:68:84:fc:53:5a:28:8b:0c:f5:44:1d:79:e0:
23:ac:22:58:1b:8e:bd:f5:85:6b:ae:35:c1:ce:de:ea:e4:a8:
e3:65:83:b3:69:39:a7:f3:d3:e2:00:6f:84:4b:51:29:cf:75:
a8:fa:fd:5f:75:ea:15:3b:cf:7c:5e:95:06:7c:ff:3b:c4:7b:
03:50:5d:dc:0e:3c:89:49:e6:59:a1:54:75:22:0b:55:37:34:
89:90:a5:6d:17:b3:3b:bc:97:58:ab:84:4b:77:25:64:cc:6e:
fa:56:c8:0e:a4:d8:9b:97:41:80:37:44:51:ef:bd:a1:ce:17:
fe:45:94:a1:3a:45:6e:41:11:1c:e4:3e:b7:48:96:7a:c5:85:
85:9b:87:96:ca:0f:43:af:ee:18:a6:e8:48:29:d8:ac:ed:c8:
d6:59:31:f3:ae:bc:2f:56:7e:02:76:e9:61:a0:7b:10:1b:03:
b3:ca:90:57:60:7c:34:9e:70:d1:4a:de:1c:91:ac:1e:3a:ff:
6f:51:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:53:26 2026 by rpki-client