Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: 1gM0lQaTRmdE8P+UUVR+rIAJ90sJ8uYlQAZYmIGblS4=
Subject key identifier: 26:31:64:74:F6:EB:3D:EC:7A:A0:B7:55:9E:7E:9C:CB:41:45:AA:C4
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 01A0D1248F092A07EA17EAFA7EE205A34296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 02EE
Signing time: Thu 24 Sep 2026 02:00:28 +0000
Manifest this update: Thu 24 Sep 2026 02:00:28 +0000
Manifest next update: Fri 25 Sep 2026 02:00:28 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: etKjn2ncZ7RRcZLsv5/jo7ODoAQZDTnXLLP1Zi+B8FA=)
2: tSbeP8_EOpw6AyTRFTldETaK43c.asa (hash: KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:8f:09:2a:07:ea:17:ea:fa:7e:e2:05:a3:42:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Sep 24 02:00:28 2026 GMT
Not After : Sep 25 02:00:28 2026 GMT
Subject: CN=26316474f6eb3dec7aa0b7559e7e9ccb4145aac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:c5:eb:83:91:c5:7c:4d:36:b6:df:fa:22:
3d:db:71:66:43:5c:81:72:2e:e1:06:3b:88:1f:dd:
dc:fe:8e:ec:d4:27:17:4d:12:bf:d4:06:4b:73:7f:
43:86:8f:08:1c:04:0f:e5:1e:0b:c1:77:9d:45:3d:
8f:6d:dc:3e:04:7b:ba:2e:09:fd:1c:20:81:25:d2:
e5:ed:ec:94:6b:a1:53:77:92:51:8f:1e:7d:d2:92:
42:b5:cc:6e:9e:01:1a:54:70:f3:2d:6e:3f:45:51:
b4:17:2d:2b:ba:cb:13:76:64:de:5c:0d:bb:66:11:
c3:b8:07:48:6f:cd:bb:25:28:48:b8:f7:d4:a3:fe:
b0:39:15:18:84:17:6c:09:d4:ab:6e:32:19:38:48:
a1:c1:c7:cd:ad:f1:31:e7:76:4e:11:c9:e5:29:51:
c2:db:b4:89:79:73:83:e3:ee:c4:2a:b5:1c:85:72:
ab:71:5a:a9:ab:96:83:dd:bf:98:b1:a2:e7:9e:55:
b2:cb:9d:9e:91:5b:dc:79:31:af:57:10:44:5c:eb:
05:f8:0b:aa:73:74:4a:5e:aa:32:db:aa:99:2c:18:
7e:89:88:b7:0e:db:f3:5c:98:79:e0:63:3f:62:33:
a9:2c:bb:71:c7:c0:ce:31:44:fc:97:99:dc:aa:66:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:64:74:F6:EB:3D:EC:7A:A0:B7:55:9E:7E:9C:CB:41:45:AA:C4
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:63:a7:48:a5:e2:3d:6d:15:8f:91:7a:2a:73:c9:b3:d7:91:
c6:7d:3a:13:80:56:10:fb:2c:4d:cc:f7:5d:ed:82:41:41:54:
77:3c:f8:a4:0e:cd:74:af:5d:66:c6:85:1a:b9:37:41:e1:3a:
b3:79:2a:bf:c3:c0:f5:0e:e2:1b:67:a4:b7:5d:89:f3:4b:b2:
bd:67:73:12:9c:e2:9f:bc:da:d7:f5:29:3a:6c:83:2c:ac:cb:
8f:cb:0f:ef:27:11:e8:8b:40:1a:a4:52:bb:01:1a:5a:95:0c:
a8:39:d6:9b:98:fc:9b:b7:dc:07:0a:f8:39:08:c6:4d:bd:b2:
4f:29:98:93:5b:3e:38:3a:e4:0b:3c:7a:5b:07:a8:dc:78:73:
f1:b4:6a:c4:0b:c0:c3:34:49:ce:c4:4a:c5:ad:c8:b9:91:17:
7b:e6:e4:7d:2c:31:44:d0:e1:8e:c6:a7:fc:93:ad:9f:c8:3b:
dd:11:08:69:7e:be:8a:0e:52:f8:35:d3:2f:e0:e6:56:1e:d8:
f0:60:fd:21:40:d4:d8:e6:dd:cf:b6:3a:b6:d0:56:24:01:1a:
1a:e1:0e:88:f5:0f:dc:2d:36:5d:0b:01:da:78:2c:4f:c1:da:
a0:0a:6b:4e:dc:39:0c:f2:7c:a5:52:6f:f3:f5:bc:cc:f2:d0:
22:4a:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:51:12 2026 by rpki-client