Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: WIalQM4nAvx+MkHcKxnQbC5Cvsie2j1/x5aqL/4nEoc=
Subject key identifier: FC:88:DB:72:7B:5F:55:1E:85:3F:33:DA:90:3F:38:93:92:11:48:20
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019FA29757F23C9312AF2A54494EF70882FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0AA3
Signing time: Mon 27 Jul 2026 08:00:55 +0000
Manifest this update: Mon 27 Jul 2026 08:00:55 +0000
Manifest next update: Tue 28 Jul 2026 08:00:55 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: NEoKx52Fs1SRO/oNauMoFoyfnA22DIyEA4eYWKZkMGg=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:57:f2:3c:93:12:af:2a:54:49:4e:f7:08:82:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jul 27 08:00:55 2026 GMT
Not After : Jul 28 08:00:55 2026 GMT
Subject: CN=fc88db727b5f551e853f33da903f389392114820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dd:4a:04:91:ba:c4:1e:6d:36:20:50:8a:8e:
84:85:6d:9e:ea:19:9e:0d:25:f0:55:d0:06:e0:6c:
e0:63:6d:c7:9f:31:96:95:aa:29:ac:0c:c6:5d:9a:
ce:bf:43:db:51:fb:9c:be:10:2c:91:a8:8c:6f:3c:
63:f2:bf:4d:c8:52:aa:ab:be:74:c0:4e:d1:c0:20:
7f:78:27:1d:8c:82:42:2f:d6:06:ff:ea:c3:1c:f0:
c5:a2:7b:40:da:06:a5:e8:77:84:3d:44:5e:2a:38:
a2:ac:84:41:06:0b:11:bb:70:ec:d2:b5:0f:3e:03:
dc:13:0c:e6:30:a7:28:5f:5d:ac:3d:b4:04:3e:5a:
bd:cc:5b:d9:f7:a0:f6:46:63:7f:04:a6:b1:59:9a:
6c:da:82:30:8f:56:61:b1:e4:9d:2f:6b:08:d1:39:
63:c3:c7:a8:0b:82:de:fe:5b:7f:cb:8a:31:51:dc:
03:84:9d:7e:07:1a:29:96:d9:be:50:10:ec:98:f1:
6b:30:86:21:78:7b:80:8b:ee:64:18:4a:2d:9f:20:
47:1d:9f:64:e5:1e:8b:94:c6:49:fb:61:91:16:6f:
ef:77:ad:30:ba:8d:60:57:7e:26:ff:8c:bb:24:07:
b2:06:91:f2:9f:22:c6:06:10:56:64:c2:ab:b4:01:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:88:DB:72:7B:5F:55:1E:85:3F:33:DA:90:3F:38:93:92:11:48:20
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:02:8b:fb:37:5d:80:fb:dc:94:34:b2:c9:9a:27:41:a3:59:
d1:a1:5e:69:6e:64:83:4f:c6:32:f4:65:1c:69:98:40:14:c8:
c1:cd:56:51:45:35:1e:8c:28:6c:3e:83:72:76:f0:1c:46:98:
b5:0b:53:d1:c0:4b:9d:84:65:67:c3:18:a5:f5:c5:38:30:53:
71:e2:7a:45:ab:fd:e5:1d:3c:a5:4d:99:f4:8b:33:1f:43:e5:
88:c6:ed:75:f7:40:65:b4:f1:75:b3:05:bf:d9:cf:1f:a5:14:
a3:c5:fb:32:08:bd:30:de:89:d5:0c:c8:6d:e2:ae:b9:23:1e:
6d:92:e9:70:03:7d:c0:c7:23:fd:5f:25:ca:e9:6b:5c:f9:f3:
85:1b:13:24:e7:89:33:8b:dc:d7:79:93:75:30:d2:60:3d:78:
dd:36:c5:9c:d0:9d:8b:de:30:4e:f8:2d:67:7a:df:67:4b:f0:
58:f6:d0:47:d9:9f:43:43:8c:86:17:0a:e0:6d:16:b3:f3:4a:
1c:14:a5:31:92:39:4e:83:db:e6:68:20:23:0d:15:b4:ee:9f:
10:f4:53:2e:65:59:99:4c:5d:b6:87:6b:10:8c:42:f8:62:90:
5d:05:d4:3c:19:dc:c9:11:fb:80:3f:1a:4a:4e:6a:b1:a5:ed:
75:93:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:09:02 2026 by rpki-client