Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: bt/+3/f/OwSFbRTt4/OG4S5nf5Up4MoMZuu8Vwq8djE=
Subject key identifier: F6:16:B9:3D:80:89:DE:A5:73:27:F5:04:38:D4:33:44:4D:DE:B6:7D
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019D38668335CEB4DBBDA5140B9670206B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 096B
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: nZxXsn4lng+FPAbhTySlk9JChroWd5wks+1JvwHIdAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:83:35:ce:b4:db:bd:a5:14:0b:96:70:20:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=f616b93d8089dea57327f50438d433444ddeb67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:59:4a:57:ef:89:fb:18:f1:5f:f3:a5:79:
6e:ce:a5:db:5a:46:67:e0:cd:53:86:ee:99:4e:ae:
60:ad:89:26:a2:a3:64:29:6f:00:a3:e0:e6:a5:68:
ae:d2:99:5d:75:70:ab:09:34:d7:e1:cc:8f:d6:e0:
34:4e:9b:a3:b3:63:db:3a:db:80:0b:b7:c6:7f:aa:
51:3d:da:92:f8:25:26:39:a1:79:9f:f9:f5:49:8d:
ce:12:f2:74:eb:fe:a5:c7:f5:83:c7:cb:5b:63:8d:
ce:fd:9c:8f:ae:09:84:cd:6a:80:06:be:ff:12:1a:
18:ac:75:cc:57:83:7e:27:51:82:1e:1a:c2:40:46:
37:23:6a:6d:4f:a4:64:19:ea:85:03:bc:9a:aa:2f:
85:ad:02:8f:43:79:3d:41:ab:97:b8:4a:40:fc:80:
8d:b3:ce:c3:5c:cb:d9:7a:12:ab:7d:51:2c:ca:9d:
df:3a:a3:73:58:03:02:6b:1d:1b:28:2e:fb:1f:04:
30:c1:fd:a4:c5:bc:3f:75:16:47:8e:4b:93:4e:fa:
5e:0c:0e:1e:02:b7:11:d7:13:2b:b3:63:6a:34:af:
20:28:8d:cc:51:83:ec:65:ef:58:14:bc:fd:48:54:
8c:55:8b:94:32:92:da:fb:f6:69:21:7b:51:d4:88:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:B9:3D:80:89:DE:A5:73:27:F5:04:38:D4:33:44:4D:DE:B6:7D
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:27:85:e6:98:86:cc:77:04:29:c2:aa:f3:ff:20:e7:8c:
e1:17:8a:09:d7:6c:99:f1:02:10:d8:f0:72:0a:63:03:af:1c:
71:af:57:6e:97:ab:34:0c:0a:05:7b:86:30:1b:e1:f5:e4:bf:
1f:59:37:4f:89:73:0a:17:fe:b5:b8:49:bd:9c:2f:70:cd:a2:
2a:31:50:32:d4:37:9a:1d:6a:06:da:86:c2:17:9f:a6:31:87:
f4:ec:d2:c7:2e:d7:9b:d4:fb:50:5c:4d:5f:c5:e2:61:3d:91:
73:b8:09:a9:a4:89:5c:14:1e:01:d9:cd:d3:63:11:7f:bf:65:
5e:57:f0:13:ce:7d:58:20:50:58:cf:41:ca:cd:09:1d:1a:05:
51:6a:f8:d5:96:a6:f4:83:f3:54:c4:ed:ab:27:6d:9f:eb:52:
9e:eb:5d:b3:fd:8e:5a:6a:1a:cf:72:a8:36:f3:51:e7:28:65:
fa:3f:e1:27:e2:60:f5:36:bb:0f:d6:c0:d8:49:b0:1a:de:15:
3a:71:9f:c5:af:52:bc:2d:c2:b0:35:39:06:d5:bd:e6:32:1f:
22:c9:67:b3:f7:7d:8a:44:0e:30:f2:4d:42:dd:5f:44:e1:e4:
44:7e:21:0b:8b:c8:d9:71:da:8d:d9:9b:81:3e:2d:a6:50:da:
94:62:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client