
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: r0PM6OwNommFIqbp7QSEwvZOvWOIJJ9O+RpntrODsEg=
Subject key identifier: 1A:D5:CC:9D:F8:F3:CD:C2:5D:9F:13:67:E9:CF:57:40:5D:70:22:CF
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019CE77FB7915AC183AB8F71B7A1549367E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0939
Signing time: Fri 13 Mar 2026 14:00:32 +0000
Manifest this update: Fri 13 Mar 2026 14:00:32 +0000
Manifest next update: Sat 14 Mar 2026 14:00:32 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: 1HwE5GAbK6cF48GxpHGor1lbZ94cr1Xrb7smFOB5xRg=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:7f:b7:91:5a:c1:83:ab:8f:71:b7:a1:54:93:67:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Mar 13 14:00:32 2026 GMT
Not After : Mar 14 14:00:32 2026 GMT
Subject: CN=1ad5cc9df8f3cdc25d9f1367e9cf57405d7022cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:7c:0a:03:54:28:33:c2:79:13:04:18:ea:
e4:c2:4e:34:9d:33:83:0b:69:b9:2d:1e:5f:f3:12:
69:e9:0c:c1:00:a2:86:7c:73:0a:7b:e5:44:1a:1f:
10:8d:4e:88:fe:69:3b:0a:74:6f:85:33:39:c5:ce:
c3:da:f2:a5:cb:81:18:20:63:a2:4f:4a:64:2e:24:
f2:39:1a:ce:40:88:e2:19:0f:08:da:70:c5:fb:03:
a5:fc:6a:2c:c0:a1:ed:c1:aa:54:73:01:f6:f1:ad:
7f:a0:66:97:a9:25:95:27:b9:1d:1f:16:cb:fa:4b:
b3:db:f5:a0:dd:28:66:0b:71:cb:30:0f:cb:46:8a:
bd:9e:7e:b1:45:0e:b4:26:76:fc:b7:3b:0e:e5:01:
b2:15:62:f9:7b:d1:ae:15:61:02:d9:fb:89:90:03:
5f:51:66:2d:a9:cc:f1:e6:cf:51:66:d0:c8:5c:fc:
b0:da:45:b4:f4:01:e3:22:f9:9f:cb:7e:2d:08:8e:
2b:10:2f:4d:64:ae:d2:28:16:42:ab:a8:40:7c:fa:
02:48:7c:c6:83:a9:eb:16:a2:66:bc:05:5e:06:35:
ab:ea:66:ba:a3:44:d1:5a:c6:6c:d5:ae:60:9f:1f:
68:5f:68:78:02:41:5b:a3:15:a4:6f:d9:f7:56:82:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:CC:9D:F8:F3:CD:C2:5D:9F:13:67:E9:CF:57:40:5D:70:22:CF
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2a:f7:98:73:a6:04:a8:15:c9:ab:ea:7e:0d:f7:90:a4:c1:
a7:bc:da:5d:d2:8f:20:9a:7f:68:f3:74:dd:21:6c:ed:a5:7f:
94:36:84:0a:5d:07:05:e2:47:56:08:5e:8b:1e:10:db:ae:b5:
2d:60:85:68:83:94:13:1b:23:b8:45:cc:fa:3b:5c:ee:82:49:
8b:28:6e:46:aa:30:4a:25:fe:e6:cc:45:50:43:d0:8c:8a:23:
8d:71:fa:8a:e2:45:ca:7f:f9:6b:43:31:45:3b:f1:6d:7e:1f:
61:0d:ef:0b:66:42:2a:8c:33:f1:df:c1:a3:7b:fd:7c:a8:d8:
6a:ea:46:0d:f7:44:6e:d6:5d:60:34:ac:cf:00:e3:00:06:ba:
33:6f:45:d6:4c:84:d5:9e:b3:59:b6:1a:5b:1f:33:7e:00:5b:
c9:1b:6b:65:3f:52:3d:8a:41:8c:97:04:84:ee:68:0a:c5:35:
56:54:89:3f:0d:83:88:f6:c3:f3:33:23:fe:85:2c:a2:8f:0a:
28:1d:5b:a8:2e:6a:88:e2:79:fb:9b:75:7c:96:1f:f0:e6:24:
ce:12:5d:ac:71:9a:a3:c5:9a:25:4c:43:ee:72:f9:b8:c6:b0:
6a:cc:9f:2c:d8:61:2d:07:57:07:3b:84:d1:c6:d4:7c:58:f7:
78:24:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:51:08 2026 by rpki-client