Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: UoW13ish8ktUbbDObthSSivbJmtD+PHxvXSlEuw1Ok0=
Subject key identifier: 6E:C8:1E:69:A4:CC:7B:85:B1:52:0C:2D:43:C8:5E:03:9A:8E:92:1A
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019D27045722148B3BDA04CEE5E6334C16D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0962
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: vqZaWi1pnI10IhFqnZwUL1zfb4VZ4eUyU82IpIBd13Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:57:22:14:8b:3b:da:04:ce:e5:e6:33:4c:16:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=6ec81e69a4cc7b85b1520c2d43c85e039a8e921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:0b:49:2f:00:da:1a:f0:f6:55:40:9f:27:
7a:00:69:66:eb:aa:6a:bd:f0:b6:99:7f:ce:13:0a:
a1:f9:89:be:1e:9b:5e:08:5e:e1:c7:c0:f6:34:7c:
9b:6c:0e:4e:ad:83:e0:1c:e5:4d:b5:07:4c:a6:3b:
33:4e:86:02:63:38:51:37:88:8d:8a:8b:f7:d6:6d:
db:5f:9c:91:f8:ed:88:47:c6:9a:d2:24:0f:62:00:
b3:51:6b:8c:fc:e8:ca:77:4d:2d:43:83:60:61:01:
9b:3a:bc:df:6a:1c:e5:5d:75:6e:5b:f8:a9:68:1f:
04:eb:04:e6:bf:44:17:c8:e0:1a:9a:fb:df:a8:97:
a5:51:94:57:73:bc:86:6c:90:1b:2d:c9:d4:ca:01:
8b:1b:d5:57:c4:14:16:29:34:2f:aa:21:a1:f3:c3:
fa:00:d8:2d:ce:46:e0:88:fa:b3:3f:d8:03:cc:c2:
57:e0:7d:8d:3f:94:9f:5f:5b:00:c8:5c:22:de:4e:
71:a0:3a:c4:6a:f4:48:e0:8e:ec:33:92:7e:9c:f1:
1c:12:4a:4f:1a:c3:e5:6a:0e:38:1e:c5:53:51:ea:
f2:93:de:f3:f7:7a:4c:85:c2:9b:24:05:7a:98:50:
dd:f7:31:1a:99:10:9b:d9:ce:42:85:e7:dd:75:1c:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:1E:69:A4:CC:7B:85:B1:52:0C:2D:43:C8:5E:03:9A:8E:92:1A
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:e3:a4:82:03:a0:75:74:1e:29:ce:e6:fd:a6:c5:4e:35:
99:54:ba:ab:88:be:22:6a:0c:48:5f:fd:1b:97:8f:2b:6a:9c:
41:74:42:c9:0f:48:71:91:87:06:b7:8c:eb:18:c5:e1:aa:35:
64:d3:62:dd:1f:4b:4d:47:0f:e6:c0:77:56:8b:98:f2:5d:9b:
88:fb:d0:73:c4:cf:13:48:67:cf:cc:70:34:50:8e:18:a7:e1:
4a:a6:e1:87:f6:79:28:01:67:f6:f6:9c:6a:5a:6d:3a:f3:6a:
f1:48:26:29:66:d5:1c:0c:9e:62:87:e0:05:6d:b2:57:cf:c3:
86:05:81:a3:24:d3:d6:a4:93:bd:55:a6:87:b8:ef:73:97:18:
df:e4:95:de:59:30:71:de:43:50:a3:52:81:22:26:7b:ca:44:
e5:05:a2:eb:30:b7:89:04:7e:64:46:be:91:15:61:4b:d6:b9:
b0:1e:6c:ba:1e:3c:35:ba:5f:fa:9a:2c:a0:0a:b6:20:3e:58:
b7:a6:4a:8e:89:6c:9b:6f:a8:b7:41:59:74:ec:1d:43:4f:4d:
db:28:0b:0a:d9:9d:89:3b:ed:5e:82:99:bb:5b:f6:cf:a4:b7:
cb:97:ee:48:7d:51:0a:74:f2:c3:fa:49:30:13:45:16:6c:8a:
94:8b:47:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFciFIs72gTO5eYzTBbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDA3Y2ZjMjhhYzQ3MDNkZjZhYjI2ZmNkMmUzOTUzY2Uz
OTA5NzkwHhcNMjYwMzI1MjIwMTI4WhcNMjYwMzI2MjIwMTI4WjAzMTEwLwYDVQQD
Eyg2ZWM4MWU2OWE0Y2M3Yjg1YjE1MjBjMmQ0M2M4NWUwMzlhOGU5MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCQLSS8A2hrw9lVAnyd6AGlm66pq
vfC2mX/OEwqh+Ym+HpteCF7hx8D2NHybbA5OrYPgHOVNtQdMpjszToYCYzhRN4iN
iov31m3bX5yR+O2IR8aa0iQPYgCzUWuM/OjKd00tQ4NgYQGbOrzfahzlXXVuW/ip
aB8E6wTmv0QXyOAamvvfqJelUZRXc7yGbJAbLcnUygGLG9VXxBQWKTQvqiGh88P6
ANgtzkbgiPqzP9gDzMJX4H2NP5SfX1sAyFwi3k5xoDrEavRI4I7sM5J+nPEcEkpP
GsPlag44HsVTUeryk97z93pMhcKbJAV6mFDd9zEamRCb2c5ChefddRx1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7IHmmkzHuFsVIMLUPIXgOajpIaMB8GA1UdIwQY
MBaAFADQfPworEcD32qyb80uOVPOOQl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQt
ODA1NDUyMDU0NTZjLzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQtODA1NDUyMDU0NTZj
LzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhbjpIID
oHV0HinO5v2mxU41mVS6q4i+ImoMSF/9G5ePK2qcQXRCyQ9IcZGHBreM6xjF4ao1
ZNNi3R9LTUcP5sB3VouY8l2biPvQc8TPE0hnz8xwNFCOGKfhSqbhh/Z5KAFn9vac
alptOvNq8UgmKWbVHAyeYofgBW2yV8/DhgWBoyTT1qSTvVWmh7jvc5cY3+SV3lkw
cd5DUKNSgSIme8pE5QWi6zC3iQR+ZEa+kRVhS9a5sB5suh48Nbpf+posoAq2ID5Y
t6ZKjolsm2+ot0FZdOwdQ09N2ygLCtmdiTvtXoKZu1v2z6S3y5fuSH1RCnTyw/pJ
MBNFFmyKlItHUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:28 2026 by rpki-client