Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: T7B2x6R92TLM4P73DXYe6oLovBTVV5wocZO2NDOThZk=
Subject key identifier: B9:32:0E:86:0E:CD:36:14:BB:40:D9:E3:00:62:B0:F1:9A:A7:F5:3B
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 019D27729005904D0DA1D7DA54E7F8ED5208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:52 +0000
Manifest this update: Thu 26 Mar 2026 00:01:52 +0000
Manifest next update: Fri 27 Mar 2026 00:01:52 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: XD2Xt4QtK46CeQd0C/4LV0g1EiIGKbctW0KGEO1/HL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:90:05:90:4d:0d:a1:d7:da:54:e7:f8:ed:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Mar 26 00:01:52 2026 GMT
Not After : Mar 27 00:01:52 2026 GMT
Subject: CN=b9320e860ecd3614bb40d9e30062b0f19aa7f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:df:96:fe:ad:de:40:5f:a6:4a:26:7e:5c:
a5:df:29:53:05:98:bf:d1:ff:96:c0:23:11:f0:d7:
52:da:4d:dd:d9:31:84:0a:7b:ee:df:99:ae:05:d5:
c7:e0:a0:f3:d7:a5:5d:d9:cb:38:3a:79:ea:c1:2a:
fc:3a:ef:39:1c:9a:0b:8d:de:a3:e8:77:35:51:2a:
5d:fe:78:21:a3:9a:f7:47:b8:36:93:00:0f:0e:63:
0d:d5:65:ca:6f:ff:90:55:14:26:31:d0:4c:91:50:
2a:cc:20:11:b0:11:1b:d2:38:bf:b8:c8:f6:3f:12:
c3:f9:52:19:06:27:09:6a:e9:00:ab:60:e7:7e:3b:
1f:ff:57:da:ed:93:28:7e:28:1e:f5:de:05:4a:2a:
48:94:ba:f0:11:bb:44:5b:3f:ad:ee:23:36:83:fe:
09:38:e4:c6:10:5d:cd:43:07:22:b7:27:79:e5:94:
c0:30:30:43:1d:35:96:43:5d:08:84:b9:5e:c0:5b:
57:a7:04:f9:1f:e0:cf:99:cd:2b:5b:6f:f3:2a:aa:
87:d5:cd:42:a8:81:73:69:d3:26:88:28:18:93:51:
9e:76:d8:ad:9d:dd:4b:7e:42:d3:e9:0a:43:8c:df:
b8:d2:77:27:76:b6:ea:20:61:61:90:05:d8:8c:33:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:0E:86:0E:CD:36:14:BB:40:D9:E3:00:62:B0:F1:9A:A7:F5:3B
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:cd:ef:4d:40:79:4d:ea:e5:a5:49:b2:a6:a6:33:fb:cf:
9c:a4:4c:71:bc:32:aa:35:1f:58:36:cf:24:ec:af:e4:74:73:
2b:6c:c6:79:84:93:98:a6:72:a9:f2:14:ef:ed:94:c1:67:cc:
9c:3d:cb:3c:ed:50:af:d7:a4:01:20:fb:06:a9:17:0c:cd:04:
bb:04:c8:48:ce:cd:bd:5f:33:4f:17:ce:c5:29:68:ca:88:98:
97:cb:11:8f:ba:c2:22:62:a0:13:0f:1e:2f:ce:9b:59:9a:d1:
b5:c4:0f:cd:8e:8d:f8:bd:80:55:b1:f7:3e:31:27:c6:ad:82:
db:cf:3d:62:e2:2a:7d:be:50:e0:4f:38:a2:74:6c:8e:42:0c:
1d:f1:aa:8c:57:45:14:58:48:d3:9e:80:92:1f:d1:6f:aa:ac:
32:9d:ab:2c:d2:fb:1d:df:b0:cc:5d:a1:43:15:a2:76:9a:fd:
f5:e6:5b:d5:7c:89:de:34:1c:a1:da:13:ac:a6:5d:3f:cb:d6:
4b:73:47:88:fe:29:bf:0f:3f:38:c0:25:28:e9:28:c4:97:21:
cb:71:4b:20:40:16:9a:e4:eb:77:5f:91:20:31:10:2b:83:a1:
cf:d0:5f:14:4a:c1:51:a7:9a:1d:c1:df:3b:08:63:75:c5:75:
cc:e0:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:19 2026 by rpki-client