Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: LZv6OStV8wfbzBpxBk0CIsq3jx5ROX3B+UYu32cmnxA=
Subject key identifier: 1D:70:AC:C3:62:B7:4A:50:94:6F:3D:B0:27:6F:6B:CB:DA:60:A3:2C
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019CDB44B000BEC35F18685F3B461946B000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: E0
Signing time: Wed 11 Mar 2026 05:00:37 +0000
Manifest this update: Wed 11 Mar 2026 05:00:37 +0000
Manifest next update: Thu 12 Mar 2026 05:00:37 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: 1X+uqzn+1Xtiid3ROm5LvQeqmsvyoWxn9ix1/dTMSns=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:44:b0:00:be:c3:5f:18:68:5f:3b:46:19:46:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Mar 11 05:00:37 2026 GMT
Not After : Mar 12 05:00:37 2026 GMT
Subject: CN=1d70acc362b74a50946f3db0276f6bcbda60a32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:15:ca:18:07:05:21:9f:a6:84:06:91:72:
94:0b:2c:9c:38:66:37:80:7e:9e:e6:55:81:86:ae:
f0:ab:28:f9:7a:bb:2c:6e:f8:e6:85:24:e7:ad:52:
c3:3c:d9:b8:75:8f:d9:c9:3b:c3:8c:cc:68:bb:50:
5e:8e:82:85:fb:f9:16:65:d1:97:ec:dd:23:4b:7c:
a1:e7:91:d2:c7:f9:b6:24:54:ad:b1:85:eb:ba:ed:
26:20:0d:a7:9c:b3:c8:08:6f:b9:1c:ad:62:c5:7b:
c7:23:b7:36:8f:04:99:0d:fb:2d:44:56:65:8d:7e:
bc:bd:5f:e7:a7:d1:8c:f1:87:55:92:6e:ca:04:a3:
ba:56:33:2a:19:b1:14:ec:44:c7:bf:cb:a8:03:70:
b1:47:ff:dc:db:28:50:94:67:3e:50:25:a7:6c:83:
8c:a6:69:d1:ee:d1:eb:8c:42:43:71:5f:02:9e:67:
98:b9:0b:1d:31:c4:00:b2:77:69:d2:31:38:6f:65:
82:71:17:f0:bf:d6:e1:cc:82:b7:d0:53:66:5f:9f:
28:b7:e9:35:79:e2:24:fb:04:ba:fe:a4:dd:90:8c:
4d:e8:16:8d:06:7f:34:9b:22:72:85:0d:d2:d3:8d:
8f:d0:0b:b7:3c:34:08:51:58:c0:52:e2:98:3a:74:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:AC:C3:62:B7:4A:50:94:6F:3D:B0:27:6F:6B:CB:DA:60:A3:2C
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:41:b1:ac:dd:21:e8:6c:94:b6:79:2b:7f:ee:12:fa:0b:a2:
92:07:5a:4b:08:3d:38:0d:5e:62:68:a2:ab:77:65:f8:41:55:
98:c3:a3:b7:21:4c:df:28:77:aa:48:59:c8:42:e3:66:35:8e:
41:39:70:bf:37:f0:c2:24:61:5a:96:19:94:a8:fa:e4:52:3a:
03:0e:3e:a0:b8:a6:42:d4:54:84:da:b2:ee:e6:61:46:e3:1f:
85:d4:c7:01:81:31:f9:79:c5:c7:79:bf:1e:84:93:6f:08:87:
58:55:2f:f9:82:5c:89:ac:70:69:b3:18:e5:12:c7:de:14:df:
8e:6e:eb:2d:4f:1b:58:41:a3:34:84:03:57:e6:8c:8f:3e:a4:
ae:e3:f8:eb:47:0e:0d:29:de:3d:6d:85:4f:33:62:89:50:e7:
bd:f5:8e:41:9a:26:49:7d:25:7e:11:50:75:e5:41:90:00:88:
ae:f0:a0:51:c4:7b:a7:cb:da:d5:73:e8:75:64:b1:f2:d6:de:
1b:5f:13:cb:1b:7c:14:de:6a:0f:30:7d:72:df:99:b0:6e:3d:
69:09:37:5c:94:84:98:60:3a:b2:28:ec:e6:94:68:a1:7c:a4:
76:fc:c1:99:95:a1:ef:29:2b:cd:c9:54:bf:68:c2:e3:ae:7f:
18:19:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 14:20:17 2026 by rpki-client