Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: Cj+keJTY8ndC7BEilvYTtExKvZw3AhdRC6ULPgnrG6c=
Subject key identifier: 1A:FB:A2:D3:47:EB:59:B3:06:49:F3:90:D6:61:4C:95:B2:7F:DF:DD
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01A0DEE152AFEF1D8B8D2C171FDF2DB71CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 0746
Signing time: Sat 26 Sep 2026 18:01:43 +0000
Manifest this update: Sat 26 Sep 2026 18:01:43 +0000
Manifest next update: Sun 27 Sep 2026 18:01:43 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: q/s1jyxAPXT0IOLwgSe+M7Ls2SCMreGBueajEBwKplc=)
2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:52:af:ef:1d:8b:8d:2c:17:1f:df:2d:b7:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Sep 26 18:01:43 2026 GMT
Not After : Sep 27 18:01:43 2026 GMT
Subject: CN=1afba2d347eb59b30649f390d6614c95b27fdfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:75:6e:55:98:18:00:96:18:5d:83:7a:5b:
07:dd:e6:11:48:10:79:4e:f2:d2:ae:98:db:ac:1d:
82:9c:7f:b4:de:a5:46:32:5f:25:3d:c4:29:6a:6f:
57:58:57:37:d4:eb:e0:98:fd:70:bc:94:1b:6c:f5:
af:bb:ca:2c:20:fd:93:a1:f2:d9:69:e3:fc:10:b0:
be:78:34:96:8d:a5:49:c0:13:bc:1e:17:d8:6a:a9:
ff:6a:02:8e:fe:c5:a7:3e:64:c7:4c:2c:21:07:c7:
6e:7b:62:5b:ae:07:0f:ea:8d:23:70:4e:62:da:c2:
90:4c:71:af:c9:d6:0e:72:06:db:b6:87:bd:fd:63:
15:e5:3d:b5:c3:e5:1a:96:33:e1:da:79:7f:4b:40:
83:f5:32:81:9b:a8:d5:3b:1d:74:5f:e6:98:c6:dc:
c6:b0:13:1a:8d:cc:54:bb:92:2b:ca:e8:16:f9:80:
13:81:86:09:af:d1:61:50:c7:97:0a:9a:57:c4:28:
99:aa:b1:2e:68:11:41:55:e0:03:92:66:39:de:5a:
dd:35:e3:3c:7f:62:28:2c:f4:4c:ce:92:c2:de:99:
7a:6e:ff:2d:d0:f4:1d:30:20:4b:21:9d:37:14:09:
e3:19:7e:6c:14:0f:15:b4:b7:8d:86:93:f4:65:25:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:A2:D3:47:EB:59:B3:06:49:F3:90:D6:61:4C:95:B2:7F:DF:DD
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c1:d0:e5:2c:4b:34:2f:2f:09:2c:7e:1f:76:e8:9c:44:c8:
7f:ed:ca:76:e9:c6:48:4a:80:52:3f:ca:49:52:8f:65:fb:38:
80:39:dc:86:d8:a0:14:c3:e2:20:23:bf:60:7c:de:c7:14:78:
67:78:09:d9:be:83:42:2b:df:87:e9:c4:4a:f6:b8:55:4d:2c:
2b:2c:87:28:d5:89:30:fd:e8:d0:1a:3a:2b:0b:53:b4:1a:5d:
fb:16:f5:3e:2c:f1:12:f3:6b:98:73:9c:16:d6:c2:7f:8f:00:
96:16:bd:f4:99:61:1c:73:d8:3a:8b:74:96:f7:8e:40:fe:62:
fb:35:35:0c:65:c4:34:61:aa:31:0c:e8:b5:04:eb:34:c6:56:
7f:24:d6:17:85:90:2c:30:64:47:03:b3:5f:3a:3c:50:f3:db:
e8:68:1b:88:eb:37:d6:1f:6e:4b:51:73:0f:cb:53:6a:85:37:
57:c1:de:1b:60:08:5f:28:b5:ea:9e:c3:9c:45:f8:7b:bd:bd:
f1:9f:24:1a:a9:4c:ef:e3:af:0a:80:8a:ed:27:b0:8b:7f:9a:
be:9a:fa:11:be:61:20:a2:fc:40:de:4a:97:f9:d2:78:51:35:
80:8b:92:0a:e9:14:00:1f:d9:24:85:ea:1e:ea:d4:9b:65:80:
f5:60:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:48:02 2026 by rpki-client