Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: t8cyLYTf44QJWJJfB26r/r4vXmXHIUtPQNxAj/Z+VP4=
Subject key identifier: 4F:90:95:A4:81:B8:9D:23:00:2B:A4:4F:6B:38:27:30:BC:46:E4:A0
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 019D389C51FEFF086A42A699F2CC94723057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0C2C
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: rJuTASopmK8DwIOj/3y56+TDwZzrz73xVFeLTX/1IC8=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:51:fe:ff:08:6a:42:a6:99:f2:cc:94:72:30:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=4f9095a481b89d23002ba44f6b382730bc46e4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:44:4b:ee:5a:57:e5:98:51:28:fe:8c:fe:
82:89:01:f6:b5:e1:26:d8:15:26:91:76:df:74:4c:
ae:f0:7c:02:26:5e:b2:8e:8a:ac:03:c4:cd:cf:19:
84:18:c3:70:86:34:1a:69:35:13:be:24:41:da:bc:
ac:c5:06:d3:59:be:a9:ee:35:0a:27:17:6e:ee:6f:
41:8a:44:93:1b:ba:7e:b5:ca:ad:c1:31:4a:d6:cd:
4c:6b:2d:dc:2f:4b:4c:35:9d:be:4b:1c:dc:fd:46:
60:70:06:88:96:12:ea:9a:aa:fc:43:98:66:fd:95:
ba:e2:13:41:8d:dd:93:d0:4a:57:48:b2:34:12:e9:
ae:1c:65:b3:cc:67:18:35:64:f4:73:1b:3e:a0:94:
2c:db:d8:f2:aa:b7:73:61:92:24:c6:4e:0c:a4:3f:
f8:26:16:b6:ab:cf:61:b9:b7:5f:da:30:bf:be:1e:
86:2d:83:02:c8:96:4b:4c:91:65:f5:84:a5:40:c0:
64:3e:47:b0:02:4b:e6:4c:a4:fe:ce:14:4e:33:a1:
91:be:f7:13:07:e9:3d:22:f5:bf:c9:b7:3d:aa:02:
95:a6:f0:e8:92:b7:60:7d:90:a8:b3:ff:2e:65:02:
bb:70:2b:ac:11:ab:e6:75:08:c3:bd:37:68:15:bb:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:95:A4:81:B8:9D:23:00:2B:A4:4F:6B:38:27:30:BC:46:E4:A0
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6e:2b:1e:80:b1:2c:d4:5b:0c:4a:af:e0:b6:e2:31:7d:89:
07:c2:18:94:64:40:d2:13:70:c9:6b:fc:18:a2:19:12:81:54:
97:bd:00:84:3e:21:50:d3:38:87:74:e4:d5:80:22:65:07:f0:
80:0c:1b:0a:ca:45:58:ea:83:cb:c3:c8:2a:ee:32:b4:da:e0:
ba:0b:f9:cd:df:4f:95:3b:d5:3f:bc:eb:39:3d:d0:be:c6:ca:
fb:fc:61:b6:90:43:7d:da:fb:2e:a5:b7:d0:dd:bd:32:d1:03:
7a:ea:d5:a3:d6:9c:44:12:00:b1:70:51:df:1d:bb:25:e3:68:
39:05:a0:52:c1:26:0f:34:5d:5a:5d:6c:d6:c7:5e:92:ac:52:
0a:14:e0:03:63:d2:a6:48:6b:40:17:ad:9a:ac:8c:44:4c:3a:
b3:2a:6f:11:26:40:18:cc:3f:b3:c7:d3:eb:a5:b8:06:fa:89:
09:cb:4b:d5:08:94:3b:4a:4a:8b:aa:7d:d5:3a:81:0c:21:6b:
a0:df:8b:e1:f3:c6:fd:66:2f:80:0f:5a:12:fd:61:11:cf:2d:
57:63:e1:18:67:95:95:c4:0e:27:7c:2f:d3:5b:41:83:fb:6e:
11:25:83:cc:49:7b:24:d6:c8:88:21:11:a1:3d:63:af:76:3d:
cb:a5:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client