Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: PJgcT+B84ruxy3j5rjTyPJL4DyHiLax6avQfGEeGjlA=
Subject key identifier: 44:FA:32:1F:56:FA:23:2B:F9:C4:89:4C:92:EA:9D:24:88:42:92:03
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 01A0EE1D36738B30ABA9A603C43C18DE9C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 02FD
Signing time: Tue 29 Sep 2026 17:01:26 +0000
Manifest this update: Tue 29 Sep 2026 17:01:26 +0000
Manifest next update: Wed 30 Sep 2026 17:01:26 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: VW+nqaGgZjxUPxI0xAaHjCEjvMHbBSrHCHxh6+sMGOM=)
2: tSbeP8_EOpw6AyTRFTldETaK43c.asa (hash: KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:36:73:8b:30:ab:a9:a6:03:c4:3c:18:de:9c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Sep 29 17:01:26 2026 GMT
Not After : Sep 30 17:01:26 2026 GMT
Subject: CN=44fa321f56fa232bf9c4894c92ea9d2488429203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:d5:62:e8:1c:20:38:b6:28:e1:d4:58:f3:
9d:1f:56:cc:2b:11:06:64:79:4f:62:41:13:fe:cc:
ca:60:b8:9b:2a:5c:01:23:a8:72:4e:6e:d7:a7:f3:
8c:7c:a0:bf:aa:aa:07:ff:8d:42:7a:81:75:0d:d7:
f1:0c:07:72:ee:07:9d:e5:c8:b7:f9:54:ec:42:1e:
3c:a4:e7:2e:74:01:f8:b6:41:42:a8:a0:51:a6:32:
f4:aa:2a:3d:0f:6e:9e:aa:c2:a2:65:1f:43:52:3f:
da:15:cd:24:7f:41:12:f7:b3:20:36:68:5d:7a:84:
5e:5b:8e:36:d6:15:46:43:f3:db:cf:4f:cc:ec:9b:
97:28:a1:da:4c:ab:43:12:ad:27:0c:09:3c:f6:93:
9b:f3:ba:62:20:2f:71:ba:b4:70:9b:a0:ae:68:a8:
2f:d0:b3:09:49:1c:cf:99:b6:63:55:1b:62:45:56:
ed:91:2d:7e:91:97:eb:b3:b7:60:30:f3:42:e2:9b:
b4:81:ce:9f:86:18:5c:94:36:f0:0a:87:4a:44:65:
21:71:ed:93:7c:1c:8b:5f:b0:c5:ff:c6:a6:07:a2:
fc:1a:46:1f:52:cd:71:e9:fa:2a:c5:f7:0e:4f:cb:
47:d3:b7:15:2f:be:24:6d:da:13:bc:6d:91:59:f1:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:32:1F:56:FA:23:2B:F9:C4:89:4C:92:EA:9D:24:88:42:92:03
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3b:7f:4f:5e:c1:67:60:4b:68:7a:5b:77:46:77:82:68:ac:
7f:9e:93:57:22:d1:40:fa:19:6e:4d:c1:6b:e6:c5:03:a7:5a:
1f:22:f8:43:b5:0f:9d:93:a0:18:ec:86:6d:ec:d1:b7:3b:ae:
19:77:52:d9:fe:cb:a3:ef:3f:00:01:b9:b0:36:14:23:28:ca:
1b:fb:c4:a9:db:2d:3e:70:11:7c:0e:c5:85:c4:54:48:39:7e:
8d:72:59:a2:cb:b0:6b:9e:69:f6:28:14:15:88:36:86:4d:98:
8b:7f:fa:ed:25:60:2b:da:af:e3:e0:7e:f9:20:4e:bf:6a:73:
a3:dd:18:f1:fc:4d:8d:6b:8b:44:01:22:b0:9d:50:3b:da:a7:
05:1d:9f:e7:6c:1d:2d:47:a5:0c:71:f9:57:4d:79:bf:05:68:
0a:0f:96:95:64:a6:5b:fd:9a:2c:36:fd:94:d4:5a:c5:2d:1a:
6a:58:9e:a4:3d:cb:c7:cb:89:52:19:3e:13:26:b2:d9:08:55:
89:42:3d:0d:05:f4:d7:14:ea:17:ba:a0:42:63:fa:f2:19:16:
c7:90:27:84:9f:7c:ea:61:8b:8f:05:63:d5:3d:3a:ef:89:19:
04:7a:2e:fe:19:ad:34:53:9d:5c:32:da:e7:eb:43:b1:50:ea:
fd:d1:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:35 2026 by rpki-client