Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File: CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier: UTpVi31Wypn+rpXI5FkJJlhRhU5+GE9abrkQL1sbBOA=
Subject key identifier: 80:64:B7:12:AF:4C:68:04:C0:9E:C2:6B:32:94:F7:07:93:1D:4A:E9
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial: 019D2884755ADFAE894B1759F2ECEA6C1E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number: 0108
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: lVvRyjOTBjqthsl3n7VqqYnLc/cSv0GdTJfsAhXy/pc=)
2: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (hash: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:75:5a:df:ae:89:4b:17:59:f2:ec:ea:6c:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=8064b712af4c6804c09ec26b3294f707931d4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:c5:e8:81:a1:a8:e4:65:e5:0b:17:b3:de:
a5:be:ae:10:b9:f6:82:af:06:d1:43:63:04:57:23:
53:32:96:a4:9b:ee:15:53:2e:f1:f2:6f:41:1d:13:
b1:14:7c:9d:da:53:dc:5e:53:f5:61:63:49:98:0c:
0e:bd:b7:c1:fc:77:ed:6a:43:b1:93:47:ac:ef:0e:
14:ea:7f:4c:fe:1e:f5:80:02:e7:0c:24:c6:64:88:
98:0c:42:98:02:20:57:77:7a:e4:ad:16:45:fd:08:
09:49:10:c0:3f:fb:b3:1e:7f:a9:2c:c3:db:64:28:
d9:e0:c4:b5:01:2b:42:f7:2d:fd:f5:0a:cb:16:da:
8e:88:38:1b:45:34:be:9b:74:b8:41:2d:c9:e3:48:
c0:46:c1:af:96:fa:c5:d6:57:5e:ca:dd:d7:fc:bb:
18:8a:1d:4a:7d:5b:d6:1d:c8:fe:66:4c:ce:23:45:
f1:97:77:80:71:78:4a:5c:a4:a9:27:0a:5a:bc:12:
38:8f:1c:ee:81:1d:e0:12:f7:f8:0f:ba:eb:65:2b:
ca:fc:82:6e:a6:60:16:5a:94:19:6d:68:6d:8c:76:
16:95:40:dc:5d:99:db:90:0b:b7:eb:c5:6d:83:78:
51:7e:03:65:4f:82:b3:ca:a2:fa:22:09:96:aa:7f:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:B7:12:AF:4C:68:04:C0:9E:C2:6B:32:94:F7:07:93:1D:4A:E9
X509v3 Authority Key Identifier:
keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:6e:6c:61:02:62:32:5b:20:d7:99:51:23:4d:03:65:5c:
78:c7:31:c2:8f:b4:5e:e2:ef:9c:67:a1:97:ec:56:f9:74:1c:
74:84:1e:3a:4a:62:ab:3a:82:fe:84:b7:61:20:64:c9:8e:af:
f0:2d:16:a1:27:08:0f:bf:c4:56:e0:01:d3:01:06:bd:bd:2d:
52:cc:6c:df:3e:c5:d6:ed:e5:64:e6:18:65:20:23:10:70:2e:
84:47:4b:34:da:f5:77:95:ec:32:d8:ba:dd:17:9b:fc:fc:ce:
91:5e:4f:38:6e:67:19:e7:ac:c5:9a:5c:5f:b4:67:b9:98:35:
24:0f:d4:c3:c7:1d:3c:0c:0e:53:4d:13:68:52:09:1a:1c:50:
1a:89:2a:be:0c:e6:6a:0f:40:59:c8:63:8f:55:ce:41:ee:05:
b5:5f:19:6c:3c:ca:c5:61:92:e7:3c:8a:a0:de:81:f8:53:96:
02:bd:8c:14:21:c2:30:01:b4:b9:9c:03:24:61:10:7b:97:c6:
48:57:43:8a:99:f4:93:a3:eb:18:94:08:7c:df:a8:ff:42:95:
ba:96:fb:e5:04:c6:7f:18:f5:63:85:74:9a:38:b3:54:a0:85:
3c:cd:40:ac:d7:97:02:fd:a2:9a:f6:f9:d1:f2:6f:59:0c:88:
67:81:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:38 2026 by rpki-client