Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: NOCMHLQMbv0Ms96ZrRBpz/IkkNjDZn/6dA5GL2HJvpA=
Subject key identifier: F9:CC:FB:7B:F8:8E:3F:B4:D0:C8:87:C9:2E:AC:72:2F:55:52:7D:0E
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 019DA30A03A73D5364229DE7943BAB078EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 00:00:35 +0000
Manifest this update: Sun 19 Apr 2026 00:00:35 +0000
Manifest next update: Mon 20 Apr 2026 00:00:35 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: R0l0GsFrE7XZQXYKs8tm+7gGjiZG6fHgMGoZv4ln82Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:03:a7:3d:53:64:22:9d:e7:94:3b:ab:07:8e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Apr 19 00:00:35 2026 GMT
Not After : Apr 20 00:00:35 2026 GMT
Subject: CN=f9ccfb7bf88e3fb4d0c887c92eac722f55527d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:d7:31:19:e5:01:c7:41:2d:20:32:c3:62:
45:b1:f4:4a:97:09:45:3e:02:3c:77:25:2d:86:e3:
bb:7c:bb:87:db:fd:d0:93:8f:34:c8:9b:53:fb:4a:
3a:0f:44:6e:77:1b:e9:83:c7:7a:c7:60:c4:73:b5:
4f:ea:c0:5a:dc:b1:e6:29:17:dd:c0:26:3b:96:6d:
bf:f0:9c:a8:04:ac:fd:e2:9f:71:9f:f6:91:91:df:
a4:e6:c7:d5:69:0b:bf:5a:43:98:05:78:e2:34:a7:
35:32:7a:d9:6d:6c:19:1b:38:11:35:5a:d5:f1:2e:
b7:2a:e4:af:21:84:8f:92:e1:75:06:91:88:ab:48:
57:0f:a4:1a:3d:55:72:a9:2e:3a:1f:5f:d9:51:c0:
3f:2a:4f:7d:b2:04:5c:f7:24:b5:9e:b0:84:56:55:
83:93:34:ae:f2:3e:57:ee:88:cf:2b:d5:21:26:c5:
55:98:36:25:59:c8:26:7b:60:8d:58:d7:c2:1c:79:
2a:69:2b:e6:5f:7e:62:18:52:bd:83:17:5a:8b:bc:
1d:24:c9:3d:e1:df:ba:eb:3e:36:66:71:a0:69:5e:
4f:f5:c5:21:1b:7c:b4:d9:dd:e3:8d:a5:9e:04:25:
4d:6a:e1:f7:83:1d:c9:bb:75:c4:fc:1c:59:85:00:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:FB:7B:F8:8E:3F:B4:D0:C8:87:C9:2E:AC:72:2F:55:52:7D:0E
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:87:2f:94:d6:85:cd:ef:19:e6:85:d6:b8:72:5d:f4:03:
18:4d:7e:bc:92:87:f4:dd:aa:31:3e:12:30:53:92:8b:9f:71:
0e:c7:88:4e:98:6d:2a:18:1b:ed:4f:62:ad:e3:3b:59:38:21:
08:0d:f5:b1:ac:ef:e3:d4:73:6c:1b:ce:3b:95:96:ba:38:b3:
1e:84:4e:28:ba:39:6b:1d:fc:b1:75:3e:31:f0:ae:d1:8d:66:
80:6a:35:f2:d6:bf:31:52:13:26:83:1f:6b:05:e1:71:d7:bb:
88:50:d5:a5:27:a9:da:21:2f:f0:a0:03:64:36:85:3d:b9:59:
fc:95:5e:0f:0e:9b:a4:e5:64:d2:de:3e:5f:d7:91:4d:90:d5:
d5:8f:f4:ea:29:ac:6c:f6:2b:ae:a6:6d:73:96:13:fc:6b:d7:
94:c2:dd:5e:39:66:a7:5e:e8:94:eb:f5:01:a3:36:03:de:20:
64:4c:76:9b:5f:3c:b4:5e:80:7a:ff:2c:f4:06:2a:95:6d:f2:
34:7f:9d:10:ea:e4:6a:46:1a:5e:73:1f:a3:f9:38:41:0e:d3:
fc:3e:ed:12:cc:bd:9b:54:99:2f:d1:2c:89:ed:d6:d9:66:40:
30:0d:30:1d:d5:d8:7a:2c:a3:a3:37:07:38:41:f5:59:37:5b:
10:dc:ec:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCgOnPVNkIp3nlDurB47yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjRhNDMyMmU4ODMxMmM4MWY0NjlhYzlmZmE3MzBkZjE0
YjMzODQwHhcNMjYwNDE5MDAwMDM1WhcNMjYwNDIwMDAwMDM1WjAzMTEwLwYDVQQD
EyhmOWNjZmI3YmY4OGUzZmI0ZDBjODg3YzkyZWFjNzIyZjU1NTI3ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcnXMRnlAcdBLSAyw2JFsfRKlwlF
PgI8dyUthuO7fLuH2/3Qk480yJtT+0o6D0Rudxvpg8d6x2DEc7VP6sBa3LHmKRfd
wCY7lm2/8JyoBKz94p9xn/aRkd+k5sfVaQu/WkOYBXjiNKc1MnrZbWwZGzgRNVrV
8S63KuSvIYSPkuF1BpGIq0hXD6QaPVVyqS46H1/ZUcA/Kk99sgRc9yS1nrCEVlWD
kzSu8j5X7ojPK9UhJsVVmDYlWcgme2CNWNfCHHkqaSvmX35iGFK9gxdai7wdJMk9
4d+66z42ZnGgaV5P9cUhG3y02d3jjaWeBCVNauH3gx3Ju3XE/BxZhQCbBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnM+3v4jj+00MiHyS6sci9VUn0OMB8GA1UdIwQY
MBaAFD8kpDIuiDEsgfRprJ/6cw3xSzOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDkt
ODkyYjViODJkNjY0LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDktODkyYjViODJkNjY0
LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi6HL5TW
hc3vGeaF1rhyXfQDGE1+vJKH9N2qMT4SMFOSi59xDseITphtKhgb7U9ireM7WTgh
CA31sazv49RzbBvOO5WWujizHoROKLo5ax38sXU+MfCu0Y1mgGo18ta/MVITJoMf
awXhcde7iFDVpSep2iEv8KADZDaFPblZ/JVeDw6bpOVk0t4+X9eRTZDV1Y/06ims
bPYrrqZtc5YT/GvXlMLdXjlmp17olOv1AaM2A94gZEx2m188tF6Aev8s9AYqlW3y
NH+dEOrkakYaXnMfo/k4QQ7T/D7tEsy9m1SZL9Esie3W2WZAMA0wHdXYeiyjozcH
OEH1WTdbENzscQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:56:18 2026 by rpki-client