Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: fXWePXEugNQF6NMDCXFs4eIIBsoyCEbH9OKaqOTNV5g=
Subject key identifier: BE:72:02:AD:3E:08:34:8D:CD:69:F1:CD:44:E2:9B:D5:3F:0C:14:70
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 01A0005CC31886E7FE9D117D345B04F98D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 15B3
Signing time: Fri 14 Aug 2026 13:01:14 +0000
Manifest this update: Fri 14 Aug 2026 13:01:14 +0000
Manifest next update: Sat 15 Aug 2026 13:01:14 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: Vudj6ukHvnUicxHlaxo69RU2uKU/oHScmHqwWU3pZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:c3:18:86:e7:fe:9d:11:7d:34:5b:04:f9:8d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Aug 14 13:01:14 2026 GMT
Not After : Aug 15 13:01:14 2026 GMT
Subject: CN=be7202ad3e08348dcd69f1cd44e29bd53f0c1470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:e1:f1:d0:7e:d4:8f:0d:23:33:4a:b8:2b:
b5:91:19:3c:25:fe:10:59:ea:4a:14:e8:d6:fe:b3:
34:b2:6e:97:51:a2:ab:4e:b6:3c:3a:56:85:1f:f1:
a4:05:c2:72:3c:9e:29:82:db:a0:51:88:99:16:90:
b7:14:df:5a:bd:c8:3e:0e:6f:64:b5:a2:5f:90:0a:
b4:1e:4f:b0:0b:d8:6e:b6:75:fc:be:02:65:c0:e2:
9a:ad:e8:31:3d:9e:9c:dc:95:bd:cf:f3:5d:9b:cd:
c0:9b:69:e8:fc:f4:80:16:40:5a:90:b3:85:fd:2b:
15:2f:28:0b:21:f9:c2:a2:a4:cb:0e:a4:32:00:f4:
d7:df:f9:f8:29:05:46:79:c8:61:63:93:9a:19:58:
a9:22:97:56:b6:7d:c6:98:31:b9:4b:6f:28:3f:ac:
33:01:c2:aa:70:68:30:41:74:03:c4:81:54:5e:1a:
d3:29:13:4f:9f:28:55:3f:51:b8:25:00:cf:2f:98:
17:a4:14:43:5f:a7:f8:f5:0e:a6:ca:c8:a4:6d:37:
7c:9e:e7:a5:2c:de:d3:64:9f:dc:e4:36:c3:d0:94:
8e:9d:ef:aa:1b:f5:a1:e9:e4:94:5d:82:eb:02:89:
62:c6:5b:48:1d:62:35:69:92:2c:64:9b:b9:20:e0:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:02:AD:3E:08:34:8D:CD:69:F1:CD:44:E2:9B:D5:3F:0C:14:70
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:2f:70:50:53:b1:9b:a2:d3:17:29:11:ff:62:71:37:7a:
ae:67:3a:7f:b3:e7:a7:d5:6b:8b:9f:e1:8c:b5:41:e9:bb:6f:
ba:7c:26:7c:27:fc:47:6c:21:b2:3d:c0:36:80:01:69:8d:c9:
38:6d:ab:ce:3e:64:6d:36:00:2e:46:f2:f7:20:9c:3e:0d:99:
27:55:a5:03:39:3d:dc:20:76:d4:72:b7:3d:65:2f:5b:df:b2:
ca:17:4b:e7:f4:11:8b:22:7e:86:60:2f:fa:a5:eb:4c:2e:64:
ce:5c:7f:0c:bf:4d:d7:a2:5d:54:73:a6:b2:4d:5a:52:f4:0d:
bb:4b:43:4e:e7:98:a7:b7:12:cf:89:61:11:d3:c4:b7:24:d9:
41:21:bc:28:df:c8:76:6c:e0:e1:b8:88:6c:f9:f2:2f:7d:e0:
9c:51:f7:d1:c7:cd:c1:8f:47:9c:7c:df:f2:72:28:23:ef:a7:
23:35:49:9f:b4:1a:0a:2b:09:9f:94:1b:66:c9:e9:66:35:5a:
e2:b9:5c:b7:44:c8:f6:2f:65:ea:0e:71:9f:d4:97:c6:fb:21:
3d:92:c5:6e:47:02:32:46:79:95:93:30:e1:33:7a:e0:44:f1:
0a:49:de:eb:a3:84:d9:65:49:df:3c:a8:a0:c7:18:20:63:ba:
56:d0:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:27 2026 by rpki-client