Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: qMjARFldSL68+rSY4WTP1FH7vdvFfTGOUNPJ48p3xg8=
Subject key identifier: 1F:EB:84:16:E3:25:35:3C:C8:98:29:8C:6D:86:65:4C:BB:EA:7F:D2
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 019FA03B57586E280EBE0A1443E45E34FA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 06A1
Signing time: Sun 26 Jul 2026 21:01:11 +0000
Manifest this update: Sun 26 Jul 2026 21:01:11 +0000
Manifest next update: Mon 27 Jul 2026 21:01:11 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: FajLNItLZneAKPvp6sxbKPXGsuVxe00JHf8C+cVzni8=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:57:58:6e:28:0e:be:0a:14:43:e4:5e:34:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Jul 26 21:01:11 2026 GMT
Not After : Jul 27 21:01:11 2026 GMT
Subject: CN=1feb8416e325353cc898298c6d86654cbbea7fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:65:b3:39:98:ab:02:b1:cf:1b:2b:8b:e6:
b1:6d:96:35:9b:cc:8a:d4:21:7e:ad:58:b1:49:00:
ec:09:e3:8d:9c:19:19:e5:12:90:9a:71:57:10:a2:
d1:c7:ce:62:9e:e0:d1:54:7c:23:fe:e6:4a:5f:30:
fc:36:74:43:fa:94:88:6f:ac:82:cb:8f:27:df:b4:
33:66:d3:fd:f6:f0:cb:7f:dd:75:66:32:17:f0:15:
be:7d:ee:11:e5:ee:76:b3:c9:40:92:5d:c0:45:df:
0a:f5:37:27:7b:ef:05:ed:33:e4:b6:1a:fa:57:00:
c2:61:c7:3d:1e:39:7f:31:e5:a1:7f:ac:05:05:a2:
d3:16:ec:a9:01:d4:3e:2c:cd:33:16:5f:3c:db:c0:
67:2f:da:a5:03:ca:65:9d:59:85:1b:d8:af:5a:62:
68:78:c5:ba:ed:76:68:6e:0c:35:ee:ce:65:de:79:
e8:7b:ab:62:4d:e9:4e:7f:90:61:7d:96:1a:61:57:
3c:f5:b5:5b:37:f4:1b:64:38:c4:40:17:ee:58:be:
03:ec:fd:19:7e:eb:48:b4:21:7b:1f:4e:f0:64:9c:
85:32:1c:bd:5c:ea:55:f8:4b:4f:78:ec:77:b8:00:
74:35:4b:1d:7f:ce:31:7b:38:ab:15:0d:23:79:9c:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:84:16:E3:25:35:3C:C8:98:29:8C:6D:86:65:4C:BB:EA:7F:D2
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b1:5e:3c:c0:17:5a:c8:47:48:48:7c:c1:59:f0:d0:bb:09:
c8:5d:cc:94:d6:db:de:b6:f7:dc:1f:ab:03:3d:bf:4c:a4:45:
7b:d2:e5:f9:eb:8b:ae:6c:80:a2:62:20:23:e2:08:a0:2e:a1:
38:fb:fe:81:8f:45:3c:62:d1:2f:cd:b5:02:6b:aa:8a:df:24:
ee:d5:a1:15:b5:cb:ed:c3:d3:ad:ed:2e:2c:2f:1d:93:dd:f3:
70:78:18:3e:7f:a3:ce:fa:23:ec:72:ed:85:24:1f:0e:e7:99:
dc:88:3e:fb:45:c7:20:20:ef:20:84:fe:df:a0:ef:0e:df:de:
51:b6:ad:15:f1:da:75:3b:4c:16:99:ba:40:8a:88:b5:88:4f:
24:ee:d6:09:9d:a5:71:ad:ad:dc:93:57:7f:c2:a2:c1:17:9e:
fe:28:61:42:b0:2d:e6:11:3f:c3:51:4f:d7:7a:9f:b5:21:2d:
ea:ab:1f:6b:9f:bf:6b:2d:85:bc:ed:3b:cd:2f:50:fb:5c:7a:
dc:a7:3d:07:5c:a5:0e:4d:f9:fe:12:5a:25:ed:14:e0:51:08:
16:45:b0:8e:fe:21:da:7d:46:aa:d9:c6:c0:5e:27:3f:63:72:
1b:c3:7c:d0:21:da:fd:bf:9b:bd:eb:36:c6:0d:5c:57:13:5b:
8d:46:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:04 2026 by rpki-client