Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: mtXH78YsMtF2nHr6SvEOdL9QfJXwF2GNeblhseerQss=
Subject key identifier: 11:CA:33:CF:AE:11:26:C0:B0:80:FC:3B:09:55:37:33:4A:1A:7C:E4
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 019EB68E22D9567121351AE0CFC40F5C289D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 0628
Signing time: Thu 11 Jun 2026 12:00:28 +0000
Manifest this update: Thu 11 Jun 2026 12:00:28 +0000
Manifest next update: Fri 12 Jun 2026 12:00:28 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: f2ttV8+GkrRgutY5laSpZ9YR2Bd8xiLhusNMluV56xM=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:22:d9:56:71:21:35:1a:e0:cf:c4:0f:5c:28:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Jun 11 12:00:28 2026 GMT
Not After : Jun 12 12:00:28 2026 GMT
Subject: CN=11ca33cfae1126c0b080fc3b095537334a1a7ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:6f:53:1e:d4:0c:46:ab:aa:5c:8c:9c:87:
dc:25:da:68:e3:41:5d:50:5d:9b:d2:0e:45:6c:73:
4c:2f:ad:b4:d7:90:ea:ea:4b:90:01:e6:fd:c4:19:
a4:c0:22:14:01:d8:2f:8e:8f:1e:bb:72:7e:a8:5f:
0d:a8:25:2f:96:cf:81:6b:f8:b0:97:46:9c:be:3b:
96:14:ed:6c:f5:29:e8:7d:50:70:44:3b:4c:b9:f0:
74:ae:d8:e2:26:e5:9a:93:f6:17:87:31:ac:7a:b4:
47:e4:e1:1e:05:81:bc:fb:e5:73:92:88:e4:de:a8:
94:56:b7:2a:97:1a:29:e3:c7:92:02:b0:bf:43:7b:
0d:93:86:47:70:ad:93:27:0c:43:d7:2e:be:7f:7b:
c1:c9:93:3d:2b:6e:1d:d7:33:2b:e1:9e:36:69:7c:
66:88:d8:99:c4:2d:f9:ef:99:9c:ff:ad:b0:32:59:
15:30:ec:47:eb:a0:b0:d6:13:2c:02:fa:a3:d3:43:
7d:aa:fa:cd:3c:51:57:39:09:be:37:df:77:67:5b:
5c:a3:c5:6f:31:18:41:7e:44:76:53:58:0e:0c:56:
9f:17:86:00:a2:f6:83:fd:00:14:dd:52:80:5a:06:
76:c3:5d:a3:03:94:6b:d3:0a:2d:8d:81:fb:1c:13:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CA:33:CF:AE:11:26:C0:B0:80:FC:3B:09:55:37:33:4A:1A:7C:E4
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:21:ae:fe:c7:0e:fe:20:ad:d8:5b:81:0a:e8:58:df:7c:b0:
11:d8:5d:02:53:ad:4e:ee:ae:b6:5a:e4:e2:51:58:fa:44:86:
08:9e:70:c2:f8:99:0b:cf:8c:fb:19:37:de:3b:6a:34:3b:fc:
2c:82:dd:bc:a1:4d:c4:85:0e:d1:74:f0:a9:51:d3:2c:16:d2:
e0:e7:e4:25:bb:51:07:79:2e:91:3f:1f:57:bc:67:7f:5a:b7:
48:10:eb:8d:c6:d9:a3:9d:55:33:1f:e0:87:aa:4e:92:c0:6b:
87:fe:c4:1a:2e:03:82:da:4b:26:b4:e6:a0:0c:42:2d:ab:b2:
30:10:90:96:0d:72:44:29:11:e5:4c:b1:c3:af:3a:a0:f6:9c:
e5:ac:04:b9:c7:b7:af:76:da:99:8e:e4:b5:5b:70:42:54:0a:
43:65:68:0d:20:6c:32:91:d1:34:39:3c:44:8c:67:73:4a:f0:
18:28:28:b7:86:4c:fc:b7:42:0d:a4:fd:40:67:fb:ee:18:2a:
c7:6f:2b:30:50:46:b8:0e:9e:d5:d5:3a:fd:2d:9d:98:f7:06:
75:d2:7a:c5:10:31:09:0b:85:9e:33:c8:9e:36:40:d3:87:55:
01:e5:c7:ec:ab:2f:ef:89:17:b1:21:57:83:23:be:a5:89:70:
7d:e8:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:40 2026 by rpki-client