Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: m0Sdf58VF9LaQ28aDkxeP8hfP5jp6tsEpUNQ46DYSmk=
Subject key identifier: 83:FA:F1:41:C4:BE:F5:38:DD:93:C3:4E:A8:31:04:F4:2E:48:FA:6E
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01A186E409CFEAFDAD7E815F2047F19A6CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 079D
Signing time: Thu 29 Oct 2026 09:00:53 +0000
Manifest this update: Thu 29 Oct 2026 09:00:53 +0000
Manifest next update: Fri 30 Oct 2026 09:00:53 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: vfNDkKetVFQacjDUG1tn/ff2cnAnK8iSXqh/BwgnYMM=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e4:09:cf:ea:fd:ad:7e:81:5f:20:47:f1:9a:6c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Oct 29 09:00:53 2026 GMT
Not After : Oct 30 09:00:53 2026 GMT
Subject: CN=83faf141c4bef538dd93c34ea83104f42e48fa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:e9:a4:a2:29:0e:4e:5c:11:4e:b3:cf:b6:
9e:06:14:2f:63:a2:a9:b7:99:0a:25:76:2c:1a:99:
f1:31:16:65:35:ad:33:9e:97:0a:f4:62:4c:db:da:
96:4e:42:e7:fa:da:95:7d:d8:40:76:7f:bd:d3:7a:
4c:81:b5:f9:03:6a:bf:30:3c:db:40:e9:e5:47:43:
2c:fb:b3:56:63:6e:55:b0:2b:ee:de:c4:d2:92:9d:
13:50:84:22:cf:bd:11:0d:df:b4:a2:09:40:a2:2c:
3e:56:d0:a7:75:59:3c:e6:82:0f:90:cb:5b:af:25:
ee:b0:33:21:4e:95:97:08:9c:ac:79:36:73:a4:1f:
48:c3:d8:6c:07:02:33:8d:9b:11:6a:cc:9e:43:da:
e5:4a:b3:fc:92:cb:e3:5a:61:61:16:92:2c:51:17:
59:3f:c7:f7:62:57:09:0d:f5:c2:b5:e4:98:6e:c7:
90:a4:a3:2a:75:95:61:fa:7b:2b:e8:ab:83:72:2c:
39:68:1c:90:68:ef:83:4b:7e:db:38:da:20:29:30:
0c:86:17:2a:ab:33:2a:4f:3e:43:78:b9:46:39:1e:
8d:3a:51:6f:4e:04:59:7f:87:30:ff:3c:7d:e3:d4:
4b:ab:50:a8:2c:fb:4d:56:75:82:b3:3d:a3:eb:9c:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FA:F1:41:C4:BE:F5:38:DD:93:C3:4E:A8:31:04:F4:2E:48:FA:6E
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:13:a0:9b:d3:af:71:f5:ed:1d:5b:fc:e5:e9:a3:85:1f:a0:
65:c2:d7:41:ab:59:7d:2b:ca:86:26:51:ef:79:7c:05:7c:f2:
48:81:fc:4d:37:d3:2a:d0:78:72:5f:5f:16:61:50:90:c5:5c:
9a:6f:45:1a:8b:9e:42:f1:6b:2d:43:24:d6:42:96:7a:a3:76:
37:bd:ad:8d:36:d3:af:01:21:8d:2f:50:97:34:2a:ec:8e:78:
dd:d4:b4:94:98:21:ab:1b:29:c6:c3:ab:3f:c4:c1:d0:31:67:
c2:b8:9b:7c:75:65:9d:33:be:66:cb:a9:40:d4:6c:fb:53:95:
dd:5f:53:da:ea:ac:44:91:5b:a0:29:49:8c:40:2e:e0:48:e4:
55:b6:86:6d:d1:28:3e:0b:20:6f:c9:cb:9b:19:a7:7c:f7:a7:
60:6e:40:4b:5e:d5:aa:4d:fc:3c:33:90:04:7c:fe:d3:93:ca:
ba:48:57:7a:df:ec:05:b4:58:4d:59:79:1a:9b:6f:18:5b:0f:
39:0a:be:3e:51:2f:d2:ac:50:b8:d9:2b:b9:4a:f6:e1:80:80:
43:8b:47:f9:af:f1:42:1c:0a:3b:12:ca:46:6d:e6:0a:88:7b:
75:ff:47:2a:f4:a3:e2:7f:c7:af:a7:f8:a0:0f:6b:4c:d7:86:
37:a0:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:42 2026 by rpki-client