Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: 46PbxAB29D+4zQNb7tj9qsC2hJ+4b1Bf1Z0INOjRkBs=
Subject key identifier: BE:CD:35:24:90:18:EE:96:BC:41:F1:2C:79:37:14:21:0F:01:06:CB
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019DCF3E01AF3CCBD603B5BF3B69FC0C87AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 09B1
Signing time: Mon 27 Apr 2026 14:00:40 +0000
Manifest this update: Mon 27 Apr 2026 14:00:40 +0000
Manifest next update: Tue 28 Apr 2026 14:00:40 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: uAjPPhirV/FrDEnHyn+99gFnVpwTTb9eG1gIN5hr25w=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:01:af:3c:cb:d6:03:b5:bf:3b:69:fc:0c:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Apr 27 14:00:40 2026 GMT
Not After : Apr 28 14:00:40 2026 GMT
Subject: CN=becd35249018ee96bc41f12c793714210f0106cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:88:f8:df:7f:9a:72:7b:e6:c4:af:66:78:
fc:a1:be:3b:92:ab:56:44:b7:09:b9:c9:ce:de:20:
e4:d0:b3:96:64:01:37:2c:88:e9:6b:e0:66:69:5b:
6a:94:7e:76:d1:dd:1e:ad:47:cc:18:fc:45:09:7f:
05:30:1d:b2:07:02:72:0a:b9:f9:0d:ce:9f:26:d3:
1a:da:ef:72:98:8c:91:fa:60:8d:28:b5:65:90:c1:
8c:5f:46:e1:c8:5a:29:8b:6e:75:b7:ef:c5:8c:df:
5e:c6:46:bd:52:e2:7e:80:8b:4e:c3:34:6b:df:e8:
3b:e9:c1:92:f8:72:d6:28:58:1c:e1:8e:a2:bd:60:
e9:54:ef:a2:96:73:d4:88:60:a7:34:2f:8b:20:0b:
da:79:c2:eb:bb:3e:40:d1:8a:92:5f:fb:93:c3:30:
44:43:9f:04:ad:e5:82:39:a3:95:17:5e:61:1c:98:
6e:17:45:56:f1:7b:46:22:58:9d:54:aa:a5:25:85:
6d:be:b3:cf:a6:78:8e:bd:20:ec:ea:14:b4:5c:24:
8e:7d:c4:4b:7b:7f:2a:97:02:fe:5e:25:75:5c:15:
2f:d0:f4:a6:44:be:bd:3a:ca:b6:bc:8a:7b:07:9d:
32:d1:26:ba:4b:73:19:cd:d9:5d:9c:30:7d:24:c0:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:35:24:90:18:EE:96:BC:41:F1:2C:79:37:14:21:0F:01:06:CB
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:dc:b8:72:c4:7d:6d:88:e6:0c:72:63:8c:32:f2:e4:b0:
37:f1:0e:5b:f5:92:f0:d5:ef:93:90:a5:9f:55:f0:2f:65:a6:
ad:51:87:3e:25:d7:f7:ca:76:6d:ba:e2:e7:bc:55:98:a3:86:
94:92:c9:05:83:26:19:5c:cb:45:26:45:90:c0:5e:e8:4f:37:
aa:f4:d3:aa:52:14:9d:79:7e:a1:e1:f2:0c:4d:70:00:77:7e:
7c:cf:81:83:92:44:be:28:b6:71:4a:44:d1:02:d1:6e:2e:53:
f6:2f:7a:b4:f8:c8:ee:ea:73:91:bf:31:03:11:47:2f:b6:6a:
7c:d6:62:8c:89:c5:6e:72:e7:1c:63:79:79:33:88:98:59:26:
99:f0:4f:fa:86:e1:28:dc:51:3f:30:60:d2:b0:fc:2f:cf:59:
fa:34:19:f9:6c:3d:ae:b1:fd:36:49:8d:7b:d1:f7:7e:54:ba:
d8:f5:dc:fa:c6:63:0f:1e:0b:c5:61:56:e9:46:30:40:f7:02:
a3:af:f9:8e:ad:14:15:20:8f:5a:bb:e6:a2:32:49:d3:f8:df:
43:91:17:07:7a:8d:13:65:8e:7c:bb:dc:42:4b:2c:5f:2f:9e:
49:df:ef:a8:13:f4:4d:4f:47:c6:7e:97:81:78:52:8f:f5:42:
f0:3d:00:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:32:11 2026 by rpki-client