Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: bzijdOhgKXi4JODQ10gRWTj8El1j8699+CUukIv5xbY=
Subject key identifier: 3A:18:3D:09:23:33:37:C2:28:DA:3A:5B:6E:B7:32:2A:F6:83:4F:59
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01A0FDC744977E4299D9B0B334E2D1A2B8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 0756
Signing time: Fri 02 Oct 2026 18:01:29 +0000
Manifest this update: Fri 02 Oct 2026 18:01:29 +0000
Manifest next update: Sat 03 Oct 2026 18:01:29 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: LJ3PFYCBACOJxrU2RunmRoHz/R5Z7908gMPBOr/nym0=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:c7:44:97:7e:42:99:d9:b0:b3:34:e2:d1:a2:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Oct 2 18:01:29 2026 GMT
Not After : Oct 3 18:01:29 2026 GMT
Subject: CN=3a183d09233337c228da3a5b6eb7322af6834f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:99:35:2d:ce:10:59:66:59:b6:97:e9:4e:
6c:b8:9c:ef:de:45:b1:9a:3b:c5:33:e5:a8:6f:8c:
48:8c:04:5a:5f:bf:a0:5a:c1:6a:19:cf:46:83:05:
af:17:69:eb:85:a6:d2:b3:8a:d7:01:53:5a:7d:4c:
d0:ad:99:db:ff:f1:bf:3b:b4:44:1b:fd:18:f0:f0:
a3:36:c1:98:ad:c9:91:93:39:f6:0a:e3:bf:e1:9b:
eb:9e:23:b6:80:30:6e:4a:b1:84:78:40:4f:07:41:
d1:cc:8b:85:f0:34:ea:19:5c:c9:85:37:30:e6:bd:
28:df:a3:db:34:d6:94:32:0a:12:7f:ad:f1:98:c7:
cb:87:3b:c8:35:79:4f:0e:8f:84:07:5c:d4:b4:4c:
2c:d7:f4:57:0e:07:18:da:18:75:de:5d:01:8a:8c:
51:2e:98:99:c3:87:7e:ec:8a:ec:1d:d3:a4:d0:4c:
0b:9a:fc:0c:04:bf:aa:b5:13:37:0c:6f:2a:28:4d:
0f:9c:59:5a:78:94:48:d2:ed:e9:3a:2f:bb:d7:19:
47:b3:2f:e7:93:68:97:55:70:d5:99:e4:ba:77:2a:
de:c8:e9:43:e7:c6:f0:08:01:7a:6d:12:58:c0:44:
1a:38:6d:f1:4a:4e:26:01:a5:27:ee:60:27:d7:ef:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:3D:09:23:33:37:C2:28:DA:3A:5B:6E:B7:32:2A:F6:83:4F:59
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:a0:36:43:c3:f9:7b:c1:52:f9:cf:c0:84:4e:3f:c5:78:
4a:1c:d4:c1:06:1e:cf:10:04:4f:1e:fb:13:40:90:54:29:08:
23:58:73:c2:95:ba:54:36:07:8a:19:43:c5:ef:e7:e9:49:7d:
cb:20:92:4a:70:b0:81:6c:67:4e:da:64:31:af:61:fc:a2:0a:
a5:4b:fc:eb:05:22:08:1b:88:66:8e:de:ae:d2:26:97:cb:bf:
4f:f9:e3:9c:24:21:d3:30:cc:dc:51:0c:b6:c9:7f:b3:2b:f8:
7d:43:bb:e4:b3:8f:60:33:4d:00:71:f4:a5:0c:cb:69:95:bf:
db:fe:b1:ca:88:bd:05:f4:6a:bb:bd:97:36:a2:65:d7:2a:ee:
59:95:f5:54:f3:6a:32:e8:c6:f5:fa:2b:e5:53:a3:8d:ff:8b:
5f:fd:a9:28:e1:99:b9:f9:b4:37:d6:b5:0d:44:62:f7:1d:62:
b5:ca:54:eb:cd:f9:6c:ba:81:c9:51:34:84:98:2d:f7:0c:a5:
51:9b:3c:bf:a9:d9:15:53:75:66:b5:f1:1c:c4:35:69:ec:7f:
38:19:46:e9:9d:37:c9:ea:b9:81:18:77:8c:1a:28:9e:23:d6:
32:57:c7:cb:91:7f:fc:b0:a7:9a:93:fd:36:5f:ed:8e:11:35:
4a:05:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:37:53 2026 by rpki-client