
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: /pzDlt8zzjnE8wJbcC2NCfaxFsCS2oXS7h39YFVmHko=
Subject key identifier: BA:A9:AA:C3:81:65:67:BC:B6:3C:B1:99:6E:EF:CB:D7:C8:DB:D2:69
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019DDE0C8DB936B0A56A8688DFEE08978E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 0166
Signing time: Thu 30 Apr 2026 11:00:57 +0000
Manifest this update: Thu 30 Apr 2026 11:00:57 +0000
Manifest next update: Fri 01 May 2026 11:00:57 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: uHo4PmoKQQNJwAhDBpdwR2ztGsAoScmzLFtXXNnEu9w=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:8d:b9:36:b0:a5:6a:86:88:df:ee:08:97:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Apr 30 11:00:57 2026 GMT
Not After : May 1 11:00:57 2026 GMT
Subject: CN=baa9aac3816567bcb63cb1996eefcbd7c8dbd269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:9b:d8:8e:a7:ad:2b:5a:be:18:19:d4:17:
b3:d4:85:a6:4f:34:39:fc:d4:77:11:7b:85:95:9c:
28:90:84:99:25:3f:d8:35:b8:e9:4e:3a:f2:2f:c6:
02:a3:c8:c8:59:f9:81:da:15:10:b9:de:cc:31:61:
80:8a:83:b0:77:0c:bb:8a:20:27:c3:42:b4:11:3f:
fa:8d:b9:f8:92:7e:a0:ca:e9:7e:6b:e4:d2:c1:a9:
c2:23:ab:c5:e2:5b:05:48:e7:ba:e5:e8:b6:74:57:
3c:e9:e6:78:d9:e6:06:12:5f:ac:ab:4a:c3:f0:65:
94:13:e6:08:12:97:76:5a:1b:e1:87:ec:9d:be:6a:
47:94:62:42:6f:d4:13:92:07:21:d1:2e:3e:6a:93:
83:9a:8e:67:43:ef:4e:02:3b:82:b3:61:6e:20:d3:
cc:14:5b:39:f5:a2:49:a0:9a:8b:32:43:c2:41:ad:
5a:e8:78:72:53:7b:8a:cf:f2:7d:d6:d8:32:b1:e5:
d9:18:b7:8e:bc:6d:22:bd:b3:7b:f3:e1:de:c3:e9:
2e:a5:4f:f6:b6:6c:10:eb:e1:92:bc:4c:e0:cf:50:
bf:37:e6:c5:aa:b5:dd:40:3d:40:d8:ea:2b:25:16:
ab:2f:ce:5b:b9:56:ea:ec:f3:ae:87:72:b2:c6:3e:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:AA:C3:81:65:67:BC:B6:3C:B1:99:6E:EF:CB:D7:C8:DB:D2:69
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:c9:e7:87:b1:fa:18:32:86:14:bc:d0:9c:48:96:2b:4c:
83:52:e9:78:8e:e5:39:cb:09:3c:3f:6c:f9:c1:ea:39:4c:ca:
23:4d:c2:20:c1:19:f8:fc:01:e8:ca:3a:4f:41:e0:96:96:91:
6d:0b:ee:bb:ff:5c:83:d2:bd:51:b4:4a:21:3b:5a:8f:b7:9b:
00:38:56:98:d9:ef:27:58:60:9d:75:ea:ed:d1:46:59:e9:67:
ec:a4:c7:2f:32:0e:8f:58:9a:39:21:fe:03:ff:4d:39:8d:9a:
1e:fd:4b:c4:ff:b8:15:64:0b:61:7c:a4:9c:82:dc:f3:05:d1:
e9:d7:78:ac:a7:d2:37:3a:74:9f:cc:f3:f9:89:ca:36:48:7d:
b2:3c:da:55:34:ea:83:83:98:c3:a1:34:65:8c:e3:17:20:f4:
0e:e1:5a:e3:60:96:da:8b:de:0d:3f:4c:93:d6:9e:40:ab:38:
df:2d:7a:19:e3:43:d8:13:4c:0e:42:d0:49:a3:28:fd:58:0f:
c7:b9:43:2e:e9:83:e9:4f:de:6c:60:3b:64:5c:71:d7:a1:63:
fd:2d:00:31:af:d1:cf:1d:77:e3:4b:d1:61:5d:bb:07:00:fa:
c7:90:07:f7:20:b0:d1:f1:fa:f3:f7:95:ae:de:1d:ed:2d:1e:
e6:50:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:05:34 2026 by rpki-client