Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: xDIAvX8b0ygPyOSQ6RzmF168rO7L5nyVE+Nruwn9/K8=
Subject key identifier: 7E:6B:88:54:E6:8A:C4:81:2B:92:80:9A:78:90:5C:DD:FB:8B:B6:AB
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019F90FEF0882BB0847F2F1A82D12393609E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0AA2
Signing time: Thu 23 Jul 2026 22:00:54 +0000
Manifest this update: Thu 23 Jul 2026 22:00:54 +0000
Manifest next update: Fri 24 Jul 2026 22:00:54 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: TECL6OJ+KJH7aVa6bcUhpfzrRGtsCgIRHP+xL2/yw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f0:88:2b:b0:84:7f:2f:1a:82:d1:23:93:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Jul 23 22:00:54 2026 GMT
Not After : Jul 24 22:00:54 2026 GMT
Subject: CN=7e6b8854e68ac4812b92809a78905cddfb8bb6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:5c:fe:4a:8f:57:8f:27:5e:53:40:12:aa:
fe:ab:47:f8:a6:2e:e7:04:70:6c:b2:bc:0d:5d:8a:
10:a2:81:6a:be:d3:3d:1e:a9:66:94:bd:c8:3b:9c:
af:51:09:16:a6:b2:c1:84:fc:21:d1:8e:34:35:a7:
e3:f7:72:e5:cd:b8:dd:ea:0f:38:24:8f:b5:02:53:
f5:dc:62:ba:b2:7f:60:a9:7d:59:b8:8b:8d:33:25:
fb:ba:c0:eb:17:10:1d:0f:45:a5:cd:15:2c:2d:ee:
e3:9f:a4:be:ee:b0:47:38:ac:04:12:50:1c:b1:03:
2a:44:fd:27:fc:2a:b9:44:6e:10:a6:c4:e6:db:7f:
13:59:00:a8:c9:57:08:b3:38:9e:d1:21:7f:9a:93:
a5:e3:55:aa:97:c2:77:9e:8b:9e:44:e8:bc:fb:79:
a7:f8:d7:e3:d1:bf:20:42:32:b6:47:59:cf:92:47:
30:41:ea:a8:ff:0b:a0:cc:2c:c2:99:cd:47:4d:14:
03:35:45:de:82:a0:f5:7a:c1:97:5f:1e:91:83:92:
5e:2e:7b:f9:0f:1a:18:e3:0c:e5:0a:4d:39:c1:1a:
0b:7a:5c:c9:5d:14:12:b9:0a:14:64:59:96:3c:84:
80:74:ca:91:43:eb:94:b0:17:e6:88:e9:26:6c:d9:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:88:54:E6:8A:C4:81:2B:92:80:9A:78:90:5C:DD:FB:8B:B6:AB
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3c:6f:87:9a:51:28:1e:c1:0d:2a:d0:d1:06:28:72:90:89:
b1:df:e1:17:f0:9d:6e:2a:48:7c:37:d9:e7:39:5c:47:95:c2:
11:95:57:ea:c4:77:cc:64:bc:c8:1a:9a:91:22:7e:6e:ad:d6:
67:0e:5a:fe:2b:fb:e6:bf:4b:2d:cd:58:e4:35:c4:2c:92:bc:
dc:bd:88:69:61:af:c6:d7:35:a2:14:a8:76:0e:43:8c:96:27:
fc:f6:c2:04:6a:5c:14:0d:14:ba:87:ef:2b:0e:cb:bd:9f:ba:
8d:bd:ee:82:34:0f:6f:34:2e:0a:89:bf:dc:20:03:99:7c:9b:
4f:b4:25:18:d2:41:a2:85:6a:4f:62:aa:6e:60:b2:17:e6:4f:
88:4f:35:b7:66:38:ab:6f:3f:5c:46:f6:68:44:de:8b:3c:c5:
60:c8:7d:3d:7f:45:0b:03:21:24:d4:eb:e3:ea:06:fa:4d:3b:
0a:e4:b3:9e:67:5e:b3:1e:21:37:02:bc:cb:93:8d:d4:e5:56:
f6:06:00:8e:ee:20:4a:ed:62:cf:71:8f:06:39:29:b1:06:bf:
79:6b:08:81:ab:26:df:0f:e9:5d:05:ae:a0:c1:c2:90:92:ce:
26:e9:3e:c5:dd:c8:e7:c2:cc:a4:42:ec:cb:d7:b3:d8:2a:08:
3d:95:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:29:04 2026 by rpki-client