Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: 5BLKX1JiOzjsYiWEPFT/WEWmE+0VkpIqYWdwEfBJzH8=
Subject key identifier: C9:F9:B1:44:F4:EA:F0:C8:0E:FF:27:E6:C1:AD:3D:22:54:1F:B5:5B
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 01A13D133C94F72DEC4EEAD1007C74C9BFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 1657
Signing time: Thu 15 Oct 2026 01:00:33 +0000
Manifest this update: Thu 15 Oct 2026 01:00:33 +0000
Manifest next update: Fri 16 Oct 2026 01:00:33 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: nspAE7i4xFrR/AplAgn3j1j0CfcEuJNGGpBikRELNUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:3c:94:f7:2d:ec:4e:ea:d1:00:7c:74:c9:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Oct 15 01:00:33 2026 GMT
Not After : Oct 16 01:00:33 2026 GMT
Subject: CN=c9f9b144f4eaf0c80eff27e6c1ad3d22541fb55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:1f:b8:f1:52:2d:0e:76:46:39:79:84:ac:
f9:22:a6:a4:2d:88:eb:5b:74:37:df:b9:1d:06:ee:
a4:47:c7:f5:65:bb:34:0e:ed:fa:05:3e:27:0e:91:
25:96:34:14:ce:cf:ef:24:83:d4:9b:66:4f:ee:00:
91:72:82:2c:da:0d:ec:31:3f:2c:92:06:bb:d9:42:
89:51:28:d2:23:c7:87:55:c7:87:1c:11:aa:7b:a3:
6d:96:dc:3b:83:e4:ac:4e:58:b8:96:c9:52:48:9f:
19:e7:67:66:0b:b4:f1:e8:8f:99:96:56:e2:2a:cf:
46:fd:fb:2c:4d:55:19:31:0b:32:6e:58:d3:83:f0:
45:01:2f:92:71:3e:53:04:f1:98:4e:c8:9a:00:30:
36:1c:f6:74:3b:eb:d6:28:9a:c1:3e:72:08:8d:7a:
43:e6:88:c0:b4:91:42:89:69:08:70:2c:87:83:ea:
c6:03:30:eb:20:6b:0b:28:e6:33:24:cc:8c:8a:a2:
bd:81:39:35:8c:e5:a4:9d:d7:30:f3:ca:f7:d2:1a:
29:c9:62:fa:3b:95:fa:3a:e8:3b:ec:2a:72:4e:f4:
76:2c:68:59:43:58:82:a6:63:17:d0:a0:0c:2c:97:
ee:80:66:3d:e4:02:7d:73:88:9a:33:99:9e:a0:3d:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:B1:44:F4:EA:F0:C8:0E:FF:27:E6:C1:AD:3D:22:54:1F:B5:5B
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:70:b1:ed:76:3d:2e:28:35:a7:1f:f4:03:b6:3d:75:3e:
53:2f:79:99:85:d3:10:90:5e:d5:a3:89:b0:30:7a:d1:dd:19:
21:3f:c1:eb:e6:ae:2a:23:3c:94:96:55:36:38:07:53:2b:c7:
77:30:f3:14:ec:ec:0c:c1:0d:e6:d4:f7:3e:ef:5b:72:86:d2:
5b:95:18:1a:c5:5a:cf:0d:a1:22:bb:c9:e9:96:88:fd:40:03:
54:fb:40:bb:7e:55:c9:c5:35:d1:d9:29:35:7c:4c:42:a2:45:
49:c5:d8:32:60:16:63:e5:2d:98:41:7d:c0:93:e9:a5:3e:5b:
22:01:9f:4b:50:63:92:ea:07:6c:d3:b8:a6:6d:ed:33:28:5d:
2c:a4:1d:c5:84:86:a3:d1:06:30:40:78:c4:37:19:af:39:66:
2c:c4:aa:bf:85:6d:60:0e:4b:b6:3b:53:6e:9b:57:cf:03:b8:
cf:91:49:c0:b3:2e:3d:fd:27:83:b0:44:0c:8d:eb:38:08:39:
5d:6e:53:69:7d:89:ad:88:ef:e6:f3:32:3a:ef:af:53:57:49:
a8:b0:d9:83:28:ee:26:98:f7:92:51:83:7f:b4:83:9b:4d:56:
8e:23:c1:1f:15:da:a9:20:60:88:63:4b:54:6f:fc:9d:f9:bd:
f3:eb:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:25 2026 by rpki-client