Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: k45YER9jyqJa0afMlhQjoikLfXq9sWhnwYAgib+TJYM=
Subject key identifier: 8D:A6:B9:62:BE:DA:74:E2:C4:52:73:C6:E4:0F:70:A8:28:DE:1A:0C
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01A089E78C6EA04CBF9C50D99B600D2A22CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 071A
Signing time: Thu 10 Sep 2026 06:00:48 +0000
Manifest this update: Thu 10 Sep 2026 06:00:48 +0000
Manifest next update: Fri 11 Sep 2026 06:00:48 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: IiH8N1BhIdBupHjFeha5xj4uWmp1/6zE4qJgZCm/s14=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:8c:6e:a0:4c:bf:9c:50:d9:9b:60:0d:2a:22:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Sep 10 06:00:48 2026 GMT
Not After : Sep 11 06:00:48 2026 GMT
Subject: CN=8da6b962beda74e2c45273c6e40f70a828de1a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:ac:df:d2:42:4c:ed:21:d0:32:51:1f:4a:
52:f3:ba:c2:5b:86:03:f0:d7:01:f9:03:de:1b:60:
b2:14:e0:ae:e1:5f:a0:70:a1:22:70:ee:75:c8:5c:
64:51:14:39:4f:f9:84:a8:2a:0f:10:be:53:84:9d:
66:c7:21:8f:70:d0:2f:24:2c:22:a5:e8:19:de:2d:
d8:2f:68:16:82:18:ea:6c:9a:db:74:0a:73:78:68:
42:da:d9:b8:46:31:50:71:a7:8c:9a:f6:9e:d3:af:
7d:ef:9d:bf:ce:7e:a2:e0:16:8c:ca:30:47:a9:df:
89:1c:15:73:69:bf:84:f1:54:a8:7f:71:a4:63:73:
5f:a2:c9:7d:3a:5b:3a:d3:a5:cc:01:c3:23:ec:e6:
da:e0:1f:2b:16:48:74:b3:b2:92:b9:39:1f:aa:52:
b0:ce:ef:cf:c6:33:bd:b8:f9:57:a7:3d:29:39:00:
63:d6:65:69:e4:20:7c:32:a8:e5:cb:0f:b0:13:d6:
9d:fe:49:be:23:cd:ce:b9:1d:c6:78:5c:2d:90:79:
1d:77:4a:2f:2b:e2:2f:a1:da:14:e0:88:3b:9c:52:
c6:1c:04:ca:d8:e5:08:1f:3f:e9:8a:9f:7d:e1:df:
71:18:96:e2:a6:67:59:99:b8:5d:46:52:63:f0:54:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:B9:62:BE:DA:74:E2:C4:52:73:C6:E4:0F:70:A8:28:DE:1A:0C
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:91:10:72:64:df:40:30:58:c7:cf:cb:68:c1:a3:18:c5:d3:
e9:b1:82:2c:de:81:bb:13:eb:60:bc:2d:74:2e:8d:4c:1a:10:
dc:3f:32:ab:2e:c5:d0:4b:58:ed:c1:37:57:f3:c7:84:dd:16:
9b:4f:51:52:95:bd:84:8f:28:db:76:c4:3c:a3:a1:08:e1:bd:
95:89:ae:6d:0a:ad:c8:3d:47:eb:c5:b8:40:af:48:76:be:a4:
cf:b1:b3:17:ae:c9:cb:54:e4:7f:4e:e6:b3:15:18:51:70:01:
8b:89:34:b8:6a:14:cd:8f:5c:9f:79:02:10:9b:8d:d2:44:d9:
a7:ba:3f:c7:bd:6d:c1:2a:eb:29:28:d8:8d:fb:08:96:77:16:
6a:b8:95:ba:a7:11:cf:cd:de:61:02:b8:a6:ba:41:70:53:c3:
77:83:a1:01:0e:9b:10:3e:51:ee:a0:1e:97:46:be:15:b5:45:
90:7e:67:25:60:03:94:71:1b:2c:4b:f3:20:75:03:6d:10:80:
a9:ec:ee:89:be:0c:d1:92:50:1a:b6:8a:ed:99:6a:c9:27:e4:
ab:99:52:4b:5a:31:88:68:c0:59:f3:4e:88:73:f2:06:71:1d:
f6:2d:de:0e:db:3d:b1:80:e5:38:d3:10:da:5b:92:33:09:ea:
62:2b:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:00:14 2026 by rpki-client