Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: cDq1vCfs63tE+eUvkVOh/yTkVRDBR4njlok93ZfLbOg=
Subject key identifier: C7:A1:FC:F8:3B:34:07:CA:F1:06:22:0F:0A:C7:27:17:C0:29:0D:27
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 019E1DFE9BD35E58A0CD78868B7A53257137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 05D9
Signing time: Tue 12 May 2026 21:01:25 +0000
Manifest this update: Tue 12 May 2026 21:01:25 +0000
Manifest next update: Wed 13 May 2026 21:01:25 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: hmjCI9Khx46YcJ7IPZQ8HPNM7CY4WPl8sZEKYpjCrjM=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:9b:d3:5e:58:a0:cd:78:86:8b:7a:53:25:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: May 12 21:01:25 2026 GMT
Not After : May 13 21:01:25 2026 GMT
Subject: CN=c7a1fcf83b3407caf106220f0ac72717c0290d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:e8:09:31:18:15:e8:6d:b4:b1:fc:ee:ef:
b2:e7:1b:40:0f:b3:93:59:5f:84:f6:89:3d:a7:2d:
e9:a4:1c:02:31:eb:ef:3f:dc:02:36:d1:76:a9:7f:
da:fd:62:67:c8:ef:14:d8:0e:b9:19:a3:1e:c5:fa:
d4:83:c3:2e:0a:62:f9:81:6f:76:8a:55:55:00:7d:
af:e8:05:a9:08:62:43:8c:1a:7d:40:be:e9:dd:55:
8e:f1:08:26:d9:25:d2:bf:db:21:bd:8e:ba:d5:53:
b8:a5:3a:40:4e:ff:2a:47:fa:a8:e8:de:68:20:b0:
ee:e6:9d:84:1b:40:5a:59:ee:be:14:9e:6c:11:f1:
30:9c:22:19:1c:a2:32:24:a0:de:44:44:32:3f:c0:
1c:f4:eb:98:ef:e2:46:42:73:b6:bc:21:f2:92:58:
44:82:75:97:cd:19:44:21:5d:2d:de:1b:0f:db:54:
c5:14:e3:46:32:b1:40:4c:a0:c1:1a:22:4a:fe:19:
5b:46:36:a4:a2:8f:1e:bf:4c:0b:6b:9f:d3:6f:83:
40:3a:dd:b8:e4:d3:a4:53:36:44:bc:e3:49:c5:ba:
13:b4:dc:cb:11:8f:4c:2e:30:c5:3c:6e:fc:b3:a3:
f3:1b:28:88:eb:3a:ed:fe:3f:da:80:fd:f2:8f:53:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:FC:F8:3B:34:07:CA:F1:06:22:0F:0A:C7:27:17:C0:29:0D:27
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:e1:15:81:93:84:12:03:c9:fc:db:6b:aa:e8:8e:b8:44:
7b:de:15:a6:8f:59:c3:3a:f2:e6:8c:2b:b1:17:16:85:74:02:
17:2c:e9:f9:bb:f9:75:1b:f9:5e:cf:61:d2:7c:28:34:65:a4:
54:60:22:c0:1f:ee:7f:b7:8a:9d:37:7f:99:3c:c3:2e:8f:d2:
51:d8:9c:95:7d:2e:7e:a2:eb:c1:a9:95:5b:9d:52:7c:97:f5:
4b:fe:2d:eb:cb:32:9a:0d:05:c4:5b:86:46:bf:ab:d5:d6:19:
c6:41:34:9e:4f:59:a2:a0:a8:7e:bc:a6:49:16:3c:58:8f:a7:
3d:cc:ee:31:71:5a:69:64:3e:5c:24:3f:02:c7:26:48:35:54:
4f:33:79:b3:72:e3:8d:a2:df:dc:81:27:67:1c:c2:1a:57:38:
c0:90:c2:28:cb:94:c8:16:5a:a2:9f:5d:f1:1e:4b:a0:f8:6c:
31:cb:18:ff:75:92:d4:42:99:78:23:dd:81:07:ce:0d:d3:2a:
db:bd:39:5b:89:00:17:98:a7:89:ff:55:c8:df:42:52:9c:8a:
c8:51:8e:cf:e8:84:1d:1a:a9:35:67:36:b2:f6:8e:10:10:35:
db:06:a1:a8:c8:59:0b:89:10:d9:61:a8:66:68:ac:a5:9d:ee:
1b:4a:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:24 2026 by rpki-client