Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: n7/5FMnhsz0h1MoFaW1381Cgqk+kZN+PvX/nh82NjYU=
Subject key identifier: 64:5E:70:98:96:05:FC:3E:AF:BC:8C:90:E6:58:B5:11:F2:9F:31:D4
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 019F92B61B52336251DBC738E4D7C32259AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 069A
Signing time: Fri 24 Jul 2026 06:00:35 +0000
Manifest this update: Fri 24 Jul 2026 06:00:35 +0000
Manifest next update: Sat 25 Jul 2026 06:00:35 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: JDYv7x3M9ZQID//btfD4Cakrj9VBo5/0XgBS3F1hCz8=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:1b:52:33:62:51:db:c7:38:e4:d7:c3:22:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Jul 24 06:00:35 2026 GMT
Not After : Jul 25 06:00:35 2026 GMT
Subject: CN=645e70989605fc3eafbc8c90e658b511f29f31d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:aa:85:c6:03:de:4a:85:a7:c0:11:28:e1:
01:08:af:0d:48:23:5f:72:17:dc:6f:5f:26:e7:06:
f7:4a:8b:dd:a9:b5:5d:3e:fc:c1:5c:20:ae:48:aa:
a0:4c:dc:89:8c:94:26:e6:70:43:ac:94:c5:7b:28:
fd:e0:8a:ba:2b:fa:65:ed:77:4d:f2:7d:26:c7:c7:
92:2f:2d:2c:fd:d4:7a:09:07:8a:93:aa:86:28:f0:
17:07:70:12:f0:78:9c:20:f2:24:f0:59:af:76:42:
a4:69:e4:82:fa:53:e6:78:c6:a4:cb:49:e1:87:86:
98:53:a7:af:c1:ed:07:f6:dc:fc:5f:de:17:e8:7c:
ea:90:bc:06:d9:41:c3:cb:76:21:e8:37:ab:66:f2:
41:67:6c:22:a5:9c:16:92:5a:71:28:a2:52:11:9d:
5a:84:a9:09:ce:5c:a9:9b:67:08:ce:6f:e1:27:97:
07:51:f3:b7:dd:66:e0:c7:50:6f:c0:51:bc:49:0a:
34:43:c6:bb:82:13:8d:29:21:90:f8:1f:97:5a:b5:
f0:5c:f0:bc:ed:82:81:a9:64:6d:b1:b3:fd:88:4e:
69:84:6e:ef:66:76:c7:64:89:4f:a7:f7:c9:9b:c0:
a9:a2:b4:54:7f:8a:ea:8a:6e:98:24:cd:d2:1d:3d:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:70:98:96:05:FC:3E:AF:BC:8C:90:E6:58:B5:11:F2:9F:31:D4
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:00:b4:0d:f1:56:74:8d:6f:be:06:35:6c:d4:20:b0:0d:06:
8d:6a:b0:07:6d:51:3d:ec:ef:b9:fb:22:68:ff:d8:58:dd:62:
37:ff:c0:ae:f3:d7:02:72:9d:12:c8:5d:f5:a9:de:2c:e0:15:
3c:47:fe:3d:ce:23:e8:6d:f7:eb:6e:91:dc:3f:d4:48:0c:e1:
7b:eb:49:44:7b:44:7a:2d:34:74:27:56:97:52:81:2e:06:ab:
8e:9f:ce:25:b6:22:b7:ec:9e:dd:5c:0b:b4:06:b7:71:3c:37:
e3:c3:8c:7a:a7:55:f6:6b:27:9a:76:8f:30:9e:68:25:d9:00:
99:1b:bd:8d:64:be:5e:69:50:5c:7b:bd:49:6a:5b:3f:60:83:
52:5d:39:6a:d4:37:85:3e:8c:b6:00:a1:ea:4f:18:97:3b:65:
a8:b0:84:2c:b0:a7:ce:0d:13:9b:f3:5b:d3:07:7f:71:e3:60:
42:e4:fd:3f:68:81:ca:a2:ba:0a:20:3a:88:9d:1a:4a:b1:91:
2c:df:a2:2f:88:29:88:5e:4a:83:9b:f1:ab:90:76:53:dd:1f:
ab:e9:0c:7d:a2:f2:dc:20:86:c3:ee:31:e4:ee:43:8e:0c:fd:
47:18:08:c9:68:51:db:7e:ab:05:5a:dd:76:91:39:7e:e3:92:
91:ca:c4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SthtSM2JR28c45NfDIlmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw
MTE1MjAwHhcNMjYwNzI0MDYwMDM1WhcNMjYwNzI1MDYwMDM1WjAzMTEwLwYDVQQD
Eyg2NDVlNzA5ODk2MDVmYzNlYWZiYzhjOTBlNjU4YjUxMWYyOWYzMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunOqhcYD3kqFp8ARKOEBCK8NSCNf
chfcb18m5wb3SovdqbVdPvzBXCCuSKqgTNyJjJQm5nBDrJTFeyj94Iq6K/pl7XdN
8n0mx8eSLy0s/dR6CQeKk6qGKPAXB3AS8HicIPIk8FmvdkKkaeSC+lPmeMaky0nh
h4aYU6evwe0H9tz8X94X6HzqkLwG2UHDy3Yh6DerZvJBZ2wipZwWklpxKKJSEZ1a
hKkJzlypm2cIzm/hJ5cHUfO33Wbgx1BvwFG8SQo0Q8a7ghONKSGQ+B+XWrXwXPC8
7YKBqWRtsbP9iE5phG7vZnbHZIlPp/fJm8CporRUf4rqim6YJM3SHT0YVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRecJiWBfw+r7yMkOZYtRHynzHUMB8GA1UdIwQY
MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt
MTJlNmE2ZWRkMTI0LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0
LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgC0DfFW
dI1vvgY1bNQgsA0GjWqwB21RPezvufsiaP/YWN1iN//ArvPXAnKdEshd9aneLOAV
PEf+Pc4j6G33626R3D/USAzhe+tJRHtEei00dCdWl1KBLgarjp/OJbYit+ye3VwL
tAa3cTw348OMeqdV9msnmnaPMJ5oJdkAmRu9jWS+XmlQXHu9SWpbP2CDUl05atQ3
hT6MtgCh6k8YlztlqLCELLCnzg0Tm/Nb0wd/ceNgQuT9P2iByqK6CiA6iJ0aSrGR
LN+iL4gpiF5Kg5vxq5B2U90fq+kMfaLy3CCGw+4x5O5Djgz9RxgIyWhR236rBVrd
dpE5fuOSkcrE+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:34 2026 by rpki-client