Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: RVzGJSnMTtbozyUOX/s39sQTdJGfMJIIAd1TgB1vGnQ=
Subject key identifier: DF:55:47:7D:59:F5:03:68:E4:4C:48:2C:90:BE:30:B9:64:7D:D3:80
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 019D38657D718ECE5EB3764BCF7661DA1359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 12B0
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: G2kHLMS9golFHkY6EX+KcES5iT5RTeBAOFopHqei6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7d:71:8e:ce:5e:b3:76:4b:cf:76:61:da:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=df55477d59f50368e44c482c90be30b9647dd380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:50:94:10:f0:75:c6:f2:4b:4f:d5:37:9a:
92:a3:3d:85:a2:4a:12:5b:f1:90:f0:96:4a:3e:1a:
3c:1d:74:8f:76:fb:34:70:58:ad:a5:d6:d0:2d:72:
27:a3:c0:40:cb:cc:76:22:62:f2:37:15:81:48:88:
39:d3:c8:a2:8e:39:78:03:51:90:5a:aa:92:b9:3f:
7c:ec:82:4f:12:28:95:c5:7f:ef:31:fa:15:74:19:
04:be:80:89:96:53:92:83:bf:99:a7:9a:1f:f6:c4:
49:43:44:ee:a2:4a:89:67:f3:d3:65:c9:57:04:8e:
e7:8b:a9:8f:70:75:58:d2:04:95:f6:95:5f:7b:b4:
69:ef:73:e5:c4:be:12:a3:40:11:39:a6:39:f8:70:
2f:60:63:b3:ec:58:c1:ed:5a:b5:25:b3:5e:86:62:
65:a8:6b:89:59:56:5f:2a:91:bf:d8:15:68:33:2c:
8b:d9:96:5d:ae:7d:bf:e5:e7:db:ff:80:e1:4c:10:
18:5a:5c:ec:39:31:5f:bb:49:50:88:c8:ae:f5:d1:
b0:50:51:c8:2e:47:c5:dd:70:da:6b:b9:f5:5c:34:
9a:0c:98:1b:e5:40:16:f4:cd:5b:71:dd:5e:f5:d9:
b4:f6:93:92:31:b4:e8:1a:0d:5c:9c:8f:9d:61:2d:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:47:7D:59:F5:03:68:E4:4C:48:2C:90:BE:30:B9:64:7D:D3:80
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:b8:ac:48:35:69:1b:9d:c1:35:cd:77:33:53:d8:5a:c7:
c0:10:3c:f6:7c:8a:f8:8f:52:d9:74:35:10:f5:4b:0d:a3:82:
f7:1c:17:d5:cc:df:d2:ab:16:60:7f:55:2c:9f:28:cf:a2:a3:
de:3a:29:a9:ba:10:d0:70:0a:2c:90:9a:d9:59:5d:55:1f:0b:
14:4a:e6:61:d4:5a:29:23:b4:0b:52:02:08:ea:ec:68:76:35:
d3:8b:10:ec:da:e9:ad:17:8f:6c:15:0d:b0:b5:90:f2:8b:82:
4f:10:ef:2b:15:b8:c8:a7:a9:29:7e:02:15:a7:fa:37:0c:b2:
b9:af:71:fb:f1:7b:c4:4c:e5:eb:37:c0:5f:a2:e4:37:d5:35:
f8:40:10:1d:7f:4e:e3:a1:db:57:e1:bd:4a:41:19:b3:25:2b:
36:ba:cf:01:3c:bb:cd:8a:39:38:fc:41:a7:a5:c8:c7:59:22:
e0:07:0c:21:72:32:5f:c5:4b:ad:5f:66:fc:ac:5b:cf:75:c2:
d4:92:91:90:d8:56:54:5b:8b:9b:9f:42:43:b5:93:9d:ef:89:
7a:88:0f:12:89:b8:a2:f7:5b:4f:d8:7a:fb:e8:d9:26:1d:67:
89:5f:b9:fb:62:a0:90:02:2a:10:7a:1c:66:2b:b6:4d:64:c3:
3b:30:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:21 2026 by rpki-client