Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: 8wEYcfoEoP560MP7FAf+ky5AAKPPEP5gDlz67S1nMZU=
Subject key identifier: 96:25:3E:37:54:7B:7D:6B:4D:06:4D:72:CA:CE:DA:BB:42:1C:1E:70
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 019D26CD0AB401AD880919AF930B65DD6463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 0559
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: v7QjTkcSGdMOfki2mvk9HCnsH89ec2lQbvm6z+PXBRA=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0a:b4:01:ad:88:09:19:af:93:0b:65:dd:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=96253e37547b7d6b4d064d72cacedabb421c1e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:05:7d:f6:db:d2:72:42:5c:2a:7b:2b:fa:
37:c3:71:48:c1:80:f4:b8:74:15:02:f9:f6:3c:1e:
63:c7:f8:c5:17:57:86:07:9b:3f:f7:89:50:10:98:
95:d4:22:cf:28:83:ed:0c:e0:fe:99:20:cc:28:e0:
c5:64:7b:f3:a6:a3:b8:27:67:70:ab:77:e1:a6:4f:
35:99:ce:b2:32:35:5b:c8:ed:ba:68:54:22:34:d9:
b4:a9:17:d0:2d:c2:5e:94:aa:1a:bb:1b:d3:0b:26:
a1:09:34:1e:df:6e:e1:8b:b2:87:bb:9c:1e:2c:23:
5e:de:54:97:3f:29:db:89:eb:b0:6c:79:8f:54:e3:
d6:b9:98:b7:f1:fd:8c:ae:2b:53:14:a8:c1:64:5a:
07:58:db:91:43:29:32:48:bf:ee:31:04:83:b1:b9:
0a:6c:8e:f0:b0:58:71:df:21:a1:0e:74:c6:db:e1:
a6:29:4b:2b:09:83:1f:26:a9:7f:6d:df:6a:dd:4d:
72:41:8a:e7:92:77:d6:c3:ab:b8:41:7a:bd:5b:41:
e2:a2:c2:55:c3:d4:c3:a1:c9:58:d9:4c:68:f5:cc:
7b:00:83:a1:ff:9b:cd:23:e6:d1:74:a4:cf:91:f1:
9f:93:37:87:c3:08:c8:a7:c5:7f:5c:21:b6:73:30:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:3E:37:54:7B:7D:6B:4D:06:4D:72:CA:CE:DA:BB:42:1C:1E:70
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:ae:59:ba:25:22:42:94:84:70:46:b4:10:4a:bd:fb:8a:
50:f5:e4:4e:e3:11:20:3c:ad:73:05:53:79:cf:8e:eb:77:55:
6a:2f:6e:5e:f2:dd:c6:a9:12:b3:dd:07:3c:5b:f3:c0:30:8a:
40:b3:48:bd:83:b5:54:3e:b7:8e:c3:71:b8:e9:07:55:79:af:
c2:86:71:2b:30:2c:ba:e0:21:58:67:95:44:2a:80:d6:ec:a4:
cc:15:f4:6a:99:9c:18:6e:91:c0:47:cb:be:40:f6:c1:6e:ad:
0b:f2:a6:6a:c3:4b:af:28:e5:5a:93:ef:a4:13:8b:50:66:37:
a6:e3:5a:36:a7:a7:3f:86:36:f5:fc:ca:7d:f5:53:ec:38:06:
d8:98:f1:88:70:45:00:2a:f5:f3:5e:27:f4:50:97:d5:b8:d8:
57:d8:40:1b:76:58:34:7c:f5:85:ee:3b:5a:cc:16:be:a8:f8:
c8:7d:10:93:d1:b9:a3:b7:94:3a:73:cb:43:dd:ce:4c:4d:11:
d1:34:15:a3:75:1f:b3:2c:78:28:b2:6d:5b:ec:13:f2:d1:ee:
f1:f2:67:53:4a:95:40:dc:0c:5f:ee:d8:aa:2b:11:d0:cb:36:
e9:e0:68:37:f1:83:62:4c:ca:dd:78:16:dd:92:06:cc:88:12:
c5:7e:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:46 2026 by rpki-client