Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: OIz2mJhZDnOg3Z+v2GCo4bJaZu8Vd8lfCkJiDSUs1Gs=
Subject key identifier: A1:D3:8C:4E:D6:78:91:FD:23:E8:A6:D3:93:58:30:01:7B:72:F8:A7
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 019D38D374D086ED6F073D692A1F59519A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: LvfILeVXfHMU1OXM8I4DtoVJuZBLThZmQ9B86kYPKZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:74:d0:86:ed:6f:07:3d:69:2a:1f:59:51:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=a1d38c4ed67891fd23e8a6d3935830017b72f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:8a:81:39:eb:b9:c4:55:9b:10:e8:14:d9:
77:59:af:ae:cd:2e:ad:1e:9b:ba:6c:37:0e:ac:26:
5d:79:73:fb:bb:1d:38:70:36:3c:a4:25:eb:25:c6:
b6:ce:63:0f:9e:24:ab:44:0b:b2:c8:c4:df:b6:b6:
8d:42:fc:47:b4:20:1f:85:ae:02:58:5f:20:fc:58:
68:3a:39:d7:38:17:62:cd:a3:c1:4e:c7:d4:22:f8:
11:ce:6b:0d:3a:e7:07:42:d7:26:75:f1:e7:2d:ed:
bd:ce:ac:03:8c:ac:9d:c9:ae:48:2e:1f:bf:f0:f1:
ed:10:14:83:e7:41:3a:de:23:97:d9:20:ab:5f:f2:
20:89:c2:08:1d:12:99:42:0a:d9:47:25:bf:a4:bb:
c2:b6:a8:fe:c7:93:79:6c:7c:a0:1e:05:78:e5:22:
b0:db:12:e0:b9:8b:f2:eb:33:89:b8:55:48:43:56:
44:eb:2a:ed:49:9d:16:84:5f:94:53:d0:1b:6a:f4:
c4:40:c6:56:9d:53:f6:18:fd:a3:49:e8:57:72:29:
42:c1:c7:5b:08:f4:9b:20:ce:17:f9:e2:59:5b:9a:
02:56:67:ac:be:79:ec:1b:a9:d3:97:92:b2:ce:a5:
9f:e7:9f:55:22:96:51:99:55:c7:d4:b5:c5:49:2e:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:8C:4E:D6:78:91:FD:23:E8:A6:D3:93:58:30:01:7B:72:F8:A7
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:b2:7e:f1:09:e9:8d:cf:40:a4:32:a0:8c:03:ed:13:0e:
59:2a:de:c4:a5:8d:62:fc:3d:58:77:4f:b1:88:a0:b8:af:c7:
68:be:64:ee:b2:76:e3:39:6f:6f:24:e3:89:22:1f:4e:10:e9:
76:9c:9d:08:cc:70:cc:8d:76:ef:5b:78:e0:54:b7:4d:a4:36:
9a:81:9f:ed:61:b2:c7:21:a2:37:0b:86:46:bb:49:58:46:af:
1e:f4:64:71:58:db:03:b1:53:a2:f7:96:39:6e:d1:13:19:ca:
a8:b2:c8:77:be:cc:86:63:b4:e5:f9:b1:5e:87:85:49:26:8b:
a4:3c:69:df:2c:3e:ce:4d:af:df:fe:de:4e:61:31:67:f6:70:
89:34:b6:ec:ba:23:d6:69:49:a7:0d:13:05:ed:d1:a8:d7:d4:
12:88:43:2a:29:d3:92:b0:4c:90:99:e9:21:9b:f0:8d:31:98:
ea:34:da:9d:3b:ba:cd:2b:86:ee:51:00:d6:83:fd:07:6b:40:
3f:9e:ff:53:8d:9f:47:ee:5d:1c:50:bc:bc:f9:1e:ad:b7:1c:
60:6d:4b:61:74:20:2f:f1:57:4d:3a:7f:35:85:9a:d2:08:88:
75:02:64:a3:1d:62:33:bb:81:f3:31:1b:0f:75:c6:83:15:6f:
6f:90:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:50 2026 by rpki-client