Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: EQY3SQ+BmtzdRe2VcpZl/9UlxJEZHcve9aRoVG0R9vc=
Subject key identifier: 03:D2:23:F9:8D:39:87:D6:EC:CC:A9:11:F4:45:CD:F1:45:3F:C2:8A
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 01A19C905AA5543017E1FF441680FA548EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0BA9
Signing time: Mon 02 Nov 2026 14:01:08 +0000
Manifest this update: Mon 02 Nov 2026 14:01:08 +0000
Manifest next update: Tue 03 Nov 2026 14:01:08 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: eMlbQfvJski8UWA+H6gg2ekuGBHXW0C70WP9XTEZrz4=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:90:5a:a5:54:30:17:e1:ff:44:16:80:fa:54:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Nov 2 14:01:08 2026 GMT
Not After : Nov 3 14:01:08 2026 GMT
Subject: CN=03d223f98d3987d6eccca911f445cdf1453fc28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:16:06:ab:a8:d3:78:21:9d:f8:73:d6:80:
63:af:c5:b8:1d:4b:55:9a:49:4d:20:5b:59:9f:ae:
ac:0a:de:61:ad:8e:80:0b:98:ae:d3:5c:3f:83:d7:
6f:9e:cf:46:d7:12:86:25:f4:cb:71:e8:d8:c3:d3:
f2:3f:67:e1:b4:3a:6c:0f:4f:51:c6:04:dd:01:1e:
b7:94:f8:53:a9:e0:31:ac:7d:4f:26:33:39:b2:6d:
2d:b4:8d:df:5e:b6:3e:2d:8b:5c:8e:3b:72:fa:a6:
86:a1:37:7c:15:34:fd:72:3d:71:1f:77:f9:35:ee:
36:eb:e4:98:24:86:ab:2c:3d:79:02:57:5b:3c:5d:
27:01:9b:e0:06:87:df:65:85:b1:bf:0d:36:af:1a:
1d:3c:59:5b:6b:4d:02:d9:1f:a6:06:72:1c:1a:b9:
c8:28:44:8e:6c:2c:d0:11:12:f0:5f:7c:81:a9:2c:
49:22:f3:e2:7a:ba:bc:07:13:d4:2a:42:5c:1b:de:
3f:c9:8f:b6:86:11:6a:33:f7:18:b6:26:c5:8f:4d:
6f:73:db:6b:fc:29:34:0b:fe:f3:ee:36:d8:8b:04:
e5:2a:16:18:25:b5:4a:e5:f0:4a:46:95:5f:11:19:
e6:9f:b0:0a:fb:cb:aa:df:74:44:93:f9:f7:40:52:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:23:F9:8D:39:87:D6:EC:CC:A9:11:F4:45:CD:F1:45:3F:C2:8A
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:72:20:13:eb:12:16:c0:13:83:09:fc:88:70:94:a7:cb:85:
5d:75:c0:0d:b3:44:45:18:b4:54:32:b4:22:61:46:22:96:af:
e5:4f:2b:53:b7:8d:3c:e5:73:2e:da:60:d3:c9:40:fe:00:e9:
3f:14:ac:e1:f8:e6:8a:b2:42:c6:31:10:6f:a3:10:12:c8:ff:
f8:e5:15:73:60:97:fe:aa:7c:30:86:00:3d:ff:1b:34:aa:8f:
7a:57:e8:24:10:f8:9e:9e:c9:00:83:ea:f2:74:f8:8e:09:5e:
f9:b2:8c:84:b7:84:a6:76:09:76:03:08:27:02:62:4e:1f:1d:
9c:88:93:a8:f8:99:6c:77:5c:8b:ed:1f:15:84:43:c2:99:8a:
cf:b3:05:66:c0:79:a7:e3:62:27:71:4e:93:6e:c5:2d:7a:95:
0c:ce:7d:df:f2:33:0d:54:bf:79:d7:73:25:33:9a:f9:d9:e4:
e0:4c:38:7c:fd:c4:09:39:c9:bb:34:8b:87:76:2f:db:b8:3f:
38:f5:0c:c3:11:81:d6:a3:f5:3f:b8:71:63:de:e6:32:89:89:
2a:81:c1:86:35:72:b0:c4:57:d3:31:ab:e4:b3:29:0c:24:0e:
3c:6a:fa:7b:05:82:1f:9b:e8:fe:6e:09:dd:ae:59:0c:55:9a:
8c:52:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 23:41:33 2026 by rpki-client