Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: uGmpHSMcv8t7pgZkBERxSe823+xn0Ok3vC9PnFMahUg=
Subject key identifier: 45:66:35:46:6F:FA:BF:25:AB:08:37:E1:65:CF:79:EB:30:C7:1E:20
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019EB8EA62B7FCCA5932F5350C89B58CC36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0A2A
Signing time: Thu 11 Jun 2026 23:00:28 +0000
Manifest this update: Thu 11 Jun 2026 23:00:28 +0000
Manifest next update: Fri 12 Jun 2026 23:00:28 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: dZ7jmarwAUHjJ5x4ORfHMgeiRu6FcmB5fhUR+6yKqgo=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:62:b7:fc:ca:59:32:f5:35:0c:89:b5:8c:c3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jun 11 23:00:28 2026 GMT
Not After : Jun 12 23:00:28 2026 GMT
Subject: CN=456635466ffabf25ab0837e165cf79eb30c71e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:c7:a4:b0:29:c6:2c:48:3f:5b:0b:c0:87:
4a:60:b0:57:7e:b8:d4:23:28:af:6f:69:ce:98:41:
18:5e:68:ff:ac:af:59:4a:b9:1e:8f:3e:e3:39:76:
8e:7c:f8:05:0a:9e:dc:0f:41:51:b5:d8:3b:32:74:
fc:d2:a9:dd:fc:89:86:af:fa:a7:8c:aa:a2:05:6f:
8d:cf:aa:16:cc:06:19:38:0d:c3:25:8d:c3:c7:ce:
b6:a1:59:b6:8a:f4:d5:0e:21:f0:1d:34:82:4f:51:
fb:00:8e:58:b4:2c:01:02:2f:39:e6:5b:9d:e3:8e:
1d:24:47:6a:76:50:e1:00:9d:5d:ce:61:44:80:8b:
7c:10:3d:c7:80:38:34:d7:20:19:96:ab:8b:80:9d:
82:54:99:19:a0:54:da:ca:c0:1f:5e:66:55:a4:0a:
ed:29:35:24:71:64:ec:49:99:94:2f:0f:e7:08:6e:
79:00:2e:7f:35:77:e1:d5:0a:e7:1f:1a:a5:f3:29:
e8:09:c5:81:a1:a3:c0:9b:70:08:26:a8:14:bf:f1:
2c:d5:6c:61:33:6e:34:2e:4e:9f:3a:f1:85:9e:bf:
95:63:69:0b:26:42:ef:1a:46:0d:d2:68:a4:dc:78:
92:fa:b5:e7:13:95:1c:20:7d:54:dc:b6:f2:d2:58:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:35:46:6F:FA:BF:25:AB:08:37:E1:65:CF:79:EB:30:C7:1E:20
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:0a:04:f4:1f:56:d8:85:66:b5:c5:21:02:9d:77:c1:07:
c3:30:bb:a4:66:7c:bb:6d:6a:bf:9a:16:d7:7f:bd:e9:38:24:
a1:0a:da:17:e5:73:de:4a:3e:a1:85:c5:aa:44:a1:4a:42:5e:
d2:0c:77:db:ff:ab:91:29:41:21:a3:0d:04:58:fb:b0:36:a6:
7c:f6:7d:41:96:ad:ff:57:4c:90:17:8d:dc:95:7b:8e:0b:b7:
15:53:b1:32:41:f8:29:77:f2:19:28:40:20:0b:ce:f8:82:a8:
53:94:01:b8:da:6a:62:33:eb:50:83:f2:3e:47:ef:48:74:b1:
6b:54:2b:ae:7d:32:4f:e8:f6:4b:c2:d6:5b:b0:32:92:e4:04:
f4:7c:51:5f:3e:bd:b8:4d:a2:e4:2b:8b:e5:ba:1a:dd:fb:fe:
8c:9b:81:ba:0f:ea:ec:14:f4:02:4a:c4:c1:e5:32:e1:5b:87:
9b:47:45:ba:bf:d9:43:81:01:42:3a:48:9a:2e:c9:39:92:99:
05:d2:a5:77:69:7d:e8:96:e4:0c:8e:8b:a1:77:a6:66:3a:d7:
ff:27:66:64:41:35:02:47:32:85:b0:a1:b1:da:e6:46:2d:f4:
67:df:d1:08:13:38:ea:11:15:eb:35:ae:17:5c:ba:c6:a0:e1:
ab:fc:70:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:29:28 2026 by rpki-client