Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: GQt8uZvAAmnFMNQbuamNWzGVyDjSBG0G1lslRnfp0QQ=
Subject key identifier: 38:36:3D:15:C9:BA:91:4E:72:A8:25:DA:88:E4:E2:90:43:A4:CA:48
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019E1BD94FD791D8B2BDACC3079227AB1BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 0186
Signing time: Tue 12 May 2026 11:01:26 +0000
Manifest this update: Tue 12 May 2026 11:01:26 +0000
Manifest next update: Wed 13 May 2026 11:01:26 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: NEZ8QX5gLBoqcVWD39wWfNWGrI+t8rHPkO+LaqRGmdA=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:4f:d7:91:d8:b2:bd:ac:c3:07:92:27:ab:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: May 12 11:01:26 2026 GMT
Not After : May 13 11:01:26 2026 GMT
Subject: CN=38363d15c9ba914e72a825da88e4e29043a4ca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:c6:96:09:26:37:c7:6d:91:ab:b8:6d:17:
57:31:f2:e0:79:d2:0e:87:40:24:64:05:bc:d7:b7:
93:9c:7d:4e:d6:05:92:f4:5c:46:8b:c1:e0:9e:f0:
e9:e9:15:72:e5:43:a4:a3:fe:ea:0d:a6:74:b5:50:
82:a3:67:67:72:a6:2d:2c:22:e1:12:1a:c3:6a:2e:
01:3a:51:cc:a9:1b:d7:8a:92:38:69:f7:3d:d3:ff:
06:70:99:2f:b1:10:0e:bd:b7:25:94:cd:65:ca:b6:
86:20:d1:9d:0c:a9:9e:93:4f:5e:1c:f8:e3:02:28:
1e:80:90:82:1a:03:0f:53:d9:1f:89:5f:4e:02:02:
20:4c:26:4a:a1:55:80:d2:08:d1:f3:0c:4a:91:3f:
98:f5:23:a6:8c:ba:77:e4:42:71:90:5b:ae:83:5f:
b9:5f:9f:f9:4a:d3:ed:0a:a8:9f:8d:52:e3:88:1f:
3c:49:85:d8:fb:b8:bb:f9:db:83:16:1a:5c:9f:6e:
0c:3e:e9:55:82:15:00:8c:aa:32:ec:b9:6c:b0:9a:
f5:df:9e:48:fd:93:8c:4c:73:6d:b0:d0:51:a0:f1:
b1:e2:f1:4d:b0:e6:f2:a4:d5:1a:ad:77:9b:cd:0e:
33:ec:76:98:17:8e:b2:30:98:8b:81:76:c6:5a:d1:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:3D:15:C9:BA:91:4E:72:A8:25:DA:88:E4:E2:90:43:A4:CA:48
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9a:25:b7:67:c8:f8:2c:be:72:8a:4d:80:c7:4a:58:7c:4e:
0d:be:ba:a6:09:02:12:52:7d:7e:80:0d:ab:cc:b2:48:ed:ec:
86:a0:f7:c1:d9:77:8f:1c:15:ba:27:b6:6e:45:37:5b:39:87:
7d:3a:eb:34:1c:8c:c6:2a:10:3b:a7:7f:79:2c:a1:5c:8d:1f:
e4:a9:1b:bb:ae:d2:40:c2:63:ae:bb:93:c4:55:08:76:b2:48:
d5:25:ac:63:68:10:05:ed:9d:21:39:e4:98:d4:03:9f:76:b3:
01:fe:7c:af:81:67:10:89:52:d4:cc:a3:16:fe:0f:31:14:99:
05:49:f9:28:b0:15:b0:44:3f:e6:d9:f9:1b:c6:d0:07:cb:35:
22:3c:aa:97:02:58:4f:a3:7c:f8:8a:66:d9:65:8c:23:01:73:
ab:7a:06:94:6b:a2:bc:bd:75:ad:ae:bf:92:a2:dd:f7:19:42:
11:56:ea:2d:c8:19:dd:53:1b:50:c4:aa:3c:65:0c:b8:fb:46:
ac:39:34:e0:3c:14:6b:c8:a2:c9:36:3a:47:d6:8b:3c:0b:93:
55:c1:02:0d:b7:19:1a:36:8a:7f:ab:c6:36:82:6a:1a:03:3e:
2c:91:f1:dc:3b:dd:63:f5:3a:ae:5a:a6:4b:8c:58:01:e4:48:
a3:de:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:46 2026 by rpki-client