Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: p1Fl0CBDCbm6rqKQqJlyD3iB2H7pV+1NzXSFeghS46w=
Subject key identifier: 26:B7:BF:09:25:B0:48:77:FF:BC:AC:D3:25:F8:D9:28:80:8B:CE:DD
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019FAA19F792FE1548BC95D0C66A69F033B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0AAF
Signing time: Tue 28 Jul 2026 19:00:56 +0000
Manifest this update: Tue 28 Jul 2026 19:00:56 +0000
Manifest next update: Wed 29 Jul 2026 19:00:56 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: gcqicF2N3g1mJ8Nx9RVTidPp1LigbP89qmNtlYvgIkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:f7:92:fe:15:48:bc:95:d0:c6:6a:69:f0:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Jul 28 19:00:56 2026 GMT
Not After : Jul 29 19:00:56 2026 GMT
Subject: CN=26b7bf0925b04877ffbcacd325f8d928808bcedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:26:3c:ca:6e:5d:62:51:53:b9:df:2b:67:
f9:f0:43:1b:51:f7:89:1e:2d:68:f3:8f:df:6d:3e:
d4:02:d8:a0:6f:63:1b:88:fc:d7:da:ad:4b:2e:9c:
63:d2:31:54:21:31:5b:34:4f:af:58:31:fc:c1:bf:
63:71:94:09:4c:e8:60:17:09:b2:d0:25:ee:ed:60:
ed:68:01:44:a2:3d:e5:02:ae:14:cb:6c:42:77:d1:
d2:dd:48:9d:ed:0b:e6:5d:f4:52:ce:5e:e7:9f:50:
24:28:12:c2:b5:df:fa:cf:df:2f:5e:98:5f:4c:1e:
7c:de:93:a9:f8:ad:65:5c:d3:02:44:56:e8:f3:d8:
13:74:a0:6e:07:cc:b8:bc:41:5e:28:59:b2:2e:d0:
ea:42:7c:69:a2:11:11:5b:10:0d:93:83:41:c2:03:
6e:fd:a7:d2:e2:57:6a:bf:89:a0:73:05:00:79:26:
5f:bc:9c:85:02:4d:44:96:5b:79:df:72:dc:4a:90:
02:03:7f:58:fd:22:e5:d6:ed:d7:4b:b2:88:6c:dc:
33:2d:84:13:3a:aa:4d:0f:ab:7c:e1:d6:dc:ff:09:
21:ff:02:a6:71:7c:20:bf:ee:46:15:09:20:99:f4:
1c:e6:98:17:b0:a4:1b:63:a1:16:7b:3b:10:2c:79:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:BF:09:25:B0:48:77:FF:BC:AC:D3:25:F8:D9:28:80:8B:CE:DD
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:94:2b:01:88:00:c8:86:bb:d4:7f:e7:92:a7:62:27:f9:73:
4f:51:ec:00:61:64:90:9c:ee:cb:76:fa:76:01:f2:9c:28:54:
9f:8e:57:a7:d2:38:cc:c0:8f:b8:e3:b7:b1:90:65:9d:bf:08:
1b:e4:cc:e2:1b:c8:5b:37:ba:8c:6f:31:c3:42:6d:25:fe:39:
e1:42:f4:f8:cc:83:c2:cc:ff:a7:a9:4c:f9:a5:aa:1f:1c:1b:
85:59:c2:9e:7c:5a:ce:5f:8e:83:a4:ca:bb:ee:83:49:11:ad:
b9:00:27:46:f7:02:0a:4a:32:a3:fb:4f:14:2f:72:45:0b:b4:
b3:fc:37:53:3a:de:00:0c:7a:76:98:7e:30:c3:b7:23:d5:12:
85:48:23:ac:58:df:c3:6e:d3:0e:79:4b:dd:44:94:b7:45:2d:
be:ab:89:61:6b:17:77:ab:f3:74:6c:93:6f:c7:e7:46:5e:c2:
ef:64:dd:b5:2b:4b:fe:2f:86:f2:92:17:78:0c:9a:90:81:65:
0f:99:b9:52:c1:00:05:f6:0c:7e:7e:04:60:e9:3e:9f:9c:75:
df:87:dd:c0:40:ea:80:84:a0:e9:42:27:dc:2f:d8:a8:3a:64:
a7:70:bb:5e:f3:34:18:a4:63:d8:a9:0b:e1:89:17:48:94:d2:
83:b2:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:56 2026 by rpki-client