Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: P/y4Db8IwP0c6cS4s9N2TLqNq+2P6sn7Zt+C7SuMgRE=
Subject key identifier: 5C:2D:A9:78:97:39:5A:C3:E2:E4:37:4D:FC:D2:14:AC:DF:CC:1E:D8
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019F8EA245C9753C756BCBACE5175B8131DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 0247
Signing time: Thu 23 Jul 2026 11:00:27 +0000
Manifest this update: Thu 23 Jul 2026 11:00:27 +0000
Manifest next update: Fri 24 Jul 2026 11:00:27 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: ssoGs0EWKef3gaZLzD8sDb8rwmMqDNbog8A2Rl0izx8=)
2: tSbeP8_EOpw6AyTRFTldETaK43c.asa (hash: KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:45:c9:75:3c:75:6b:cb:ac:e5:17:5b:81:31:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Jul 23 11:00:27 2026 GMT
Not After : Jul 24 11:00:27 2026 GMT
Subject: CN=5c2da97897395ac3e2e4374dfcd214acdfcc1ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:53:74:5e:f3:91:bd:ea:6c:a1:18:c0:86:
20:a9:e3:da:e4:3f:96:38:c8:93:3b:81:24:7d:98:
22:6d:45:32:8e:2e:f1:8d:b2:0a:ce:84:ec:88:34:
51:61:6c:35:d7:23:5c:61:0e:bb:82:6f:e6:87:48:
de:0c:f2:d8:41:dd:89:fd:eb:84:46:5f:b3:ab:25:
99:ba:f9:f3:7b:9e:43:37:d4:f2:93:dd:de:96:a3:
6c:d7:70:9e:6a:f5:07:dd:23:f3:20:2a:27:6b:f1:
f4:02:20:30:1c:2f:c4:2c:b7:06:c6:a9:59:2d:e1:
f9:d0:59:15:eb:72:fa:30:b3:64:f7:5c:a0:68:2b:
54:bf:ad:f1:a4:88:5c:47:f0:aa:dd:4f:c9:41:0d:
5f:56:f4:1e:1f:c1:8f:0b:d9:79:7c:1f:09:14:18:
88:eb:42:15:e3:e7:6e:90:34:17:c8:04:28:2a:dc:
00:1e:d1:20:de:7b:ee:17:b8:9b:33:45:0c:94:18:
9b:41:04:ce:7a:2c:57:b1:b9:cf:60:96:c5:b5:b1:
e3:f6:da:80:c0:6e:75:50:d4:7a:81:02:c6:73:6c:
cf:ee:83:0f:9d:9e:bb:aa:23:76:9a:17:75:6b:c1:
a9:48:9f:08:13:67:5d:cb:8d:5e:ce:02:0b:14:48:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:A9:78:97:39:5A:C3:E2:E4:37:4D:FC:D2:14:AC:DF:CC:1E:D8
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:23:44:e4:19:f8:a5:f4:02:07:e1:46:4f:8f:c9:9d:1c:
59:d1:ca:2b:76:4f:20:11:67:9c:7b:72:3f:0e:29:8f:97:ad:
3f:44:8c:81:2c:bd:95:60:0b:87:26:21:d8:17:4c:c5:b1:f1:
88:08:e5:a0:e7:9b:46:21:c6:aa:10:2a:8e:0a:b6:bd:ef:51:
a4:4c:48:d5:92:ff:58:82:a3:1f:ce:57:8d:06:2c:50:79:60:
26:ea:b6:1d:db:bb:be:51:b8:c0:db:f0:ed:62:e3:34:f3:c5:
45:43:35:fd:68:73:5d:fe:d0:d6:55:a7:a6:81:24:20:33:2f:
94:e6:b1:c0:9a:37:48:28:bd:a9:21:ef:e1:e9:1a:13:c5:80:
c3:bb:39:3a:42:60:8d:9d:99:d9:34:51:b3:d4:8f:81:2d:5e:
7d:ec:08:fd:e5:a3:1c:7d:c0:42:f3:0d:cb:da:2c:e5:68:8c:
bc:82:5d:df:be:4d:a0:1c:7a:25:69:26:39:39:7b:33:51:be:
db:db:c6:db:80:6c:91:09:6f:3a:28:fb:35:dc:94:37:65:e0:
04:ec:f8:62:e0:0d:b3:f6:a4:24:8e:a1:4d:2c:89:a9:4a:59:
a1:27:68:77:8c:d0:11:a0:a2:be:75:f9:85:59:e3:fd:ed:e1:
47:82:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:33 2026 by rpki-client