Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File: 97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier: FL3jrvItESdC70DSlqTrQYA1hYwSjMESy3E4p0XKdyA=
Subject key identifier: 25:A4:69:98:AC:39:E6:6B:6B:F3:3A:89:28:75:61:57:FD:6D:7C:CE
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial: 019D389C5ADA678CD13C714C2EE7C0B3D8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number: 05D7
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: 3+resGc6qRb2OoudC101W/QIUs7kPgbOb/7L4eX4Xh8=)
2: iz9gbVygmSBHL3t3PdATnT2zJmk.roa (hash: mrKo3a/hS44Co32MTqj4k1lL3E23S3iMQm9u18Qtexo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5a:da:67:8c:d1:3c:71:4c:2e:e7:c0:b3:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=25a46998ac39e66b6bf33a8928756157fd6d7cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:2b:85:c7:b7:91:21:a9:e6:84:51:9e:cd:
50:fc:91:db:e0:06:4a:64:50:11:0d:93:87:6f:e1:
04:00:49:91:02:93:d6:0a:0f:b6:81:f9:43:25:75:
64:4d:c3:d6:cb:e6:b5:90:57:70:f9:66:e1:c5:a6:
1f:05:90:ca:5a:ca:ee:18:1e:31:01:ab:1c:68:7a:
7b:3d:7a:59:8b:c7:09:54:c7:ef:b0:50:d0:3f:13:
d4:3a:78:81:8a:28:4a:1b:a5:5a:7d:2c:cc:2b:48:
66:3d:b2:45:53:d5:f7:c1:92:00:4b:70:51:e6:f0:
62:e2:a4:c9:ca:d8:ba:25:c2:5b:4d:fd:ee:9c:09:
8f:0a:93:02:2a:fb:24:75:18:cc:bb:32:63:54:e0:
5d:4d:79:06:2c:c1:56:a5:7e:f9:4c:97:ed:a9:b0:
85:d4:8f:ea:08:eb:dc:32:fd:58:0f:ff:6f:10:dd:
af:86:11:83:a2:ad:96:5f:fa:a0:6d:d0:e7:b7:b5:
5e:b3:77:f1:8b:23:37:7b:dc:9f:bb:35:03:d2:9e:
05:88:21:d8:c9:f4:5f:da:f8:1f:07:a8:24:a0:80:
8a:34:3a:2d:16:da:0b:98:16:97:dc:98:7d:90:05:
65:bb:bc:4f:e3:04:85:1c:4d:00:c6:76:d0:87:cd:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:69:98:AC:39:E6:6B:6B:F3:3A:89:28:75:61:57:FD:6D:7C:CE
X509v3 Authority Key Identifier:
keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e0:c9:e5:98:bc:90:84:69:ad:17:7f:e9:6a:ba:a0:89:7d:
37:03:50:f5:ea:17:e7:58:3e:7b:33:81:78:ea:a5:ee:c3:a9:
06:28:38:1f:b1:cd:19:1b:44:4c:27:3b:86:77:22:01:56:af:
79:cc:8a:ec:02:b9:f0:67:9d:36:77:15:3d:60:17:3d:ed:d5:
9c:bb:55:45:9f:00:75:93:c2:ad:bd:1c:cb:6c:05:6f:ac:32:
5c:44:d3:d7:ba:ec:26:c5:f9:23:9b:af:8e:ea:2e:7c:46:10:
f5:ea:77:6c:fd:0c:1c:b8:53:e3:a7:ae:70:20:2f:7e:5c:80:
59:d7:84:7f:dd:7e:03:ee:50:d1:bd:c2:eb:37:bf:23:ea:2f:
2c:8b:72:4e:24:bc:bf:79:bf:bd:5d:f0:3c:6b:75:9c:6b:34:
f4:11:64:7e:fb:cb:1e:4b:e3:f7:14:aa:03:03:99:b4:de:95:
60:77:97:6e:d6:d1:33:13:29:6b:9b:d8:de:99:da:08:ba:6c:
7c:a6:3c:6d:db:0c:3d:16:34:66:e1:af:5c:1b:d7:bb:65:37:
b4:c8:75:6d:0a:d6:e6:ab:0f:de:70:a6:27:66:bc:83:fa:20:
1f:6e:15:fb:43:dd:0b:90:3c:aa:43:05:bb:80:75:82:0e:a8:
63:f1:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:43 2026 by rpki-client