Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: 3d1PgVZDPFcZe7T6NeJAQPuTQmWBP8ypStcsHknmNwM=
Subject key identifier: C5:64:3E:A5:EF:B3:DD:BA:86:27:5F:11:3C:49:15:D1:65:6C:2A:4F
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 01A00137D0152540A6CE99D336EA6BF7F915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0D9D
Signing time: Fri 14 Aug 2026 17:00:29 +0000
Manifest this update: Fri 14 Aug 2026 17:00:29 +0000
Manifest next update: Sat 15 Aug 2026 17:00:29 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: LQU8n26TdAZOI9hj8fmuBDq8Y2+lhZTIS/pL2xHFfBU=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:d0:15:25:40:a6:ce:99:d3:36:ea:6b:f7:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Aug 14 17:00:29 2026 GMT
Not After : Aug 15 17:00:29 2026 GMT
Subject: CN=c5643ea5efb3ddba86275f113c4915d1656c2a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:05:f1:e2:e5:79:c9:02:96:e7:ec:1f:d9:
4e:70:c4:9d:d7:e5:ee:81:3c:71:99:a9:19:3e:cd:
32:f3:14:d6:e8:81:bc:01:f4:7a:75:ea:5e:35:6a:
7a:ec:62:c7:92:e3:d4:74:61:6d:cd:aa:da:70:5c:
d9:be:73:b7:3d:ef:7a:cf:68:ce:66:b0:84:3d:9e:
fa:fb:07:94:9b:93:cd:91:3a:38:79:0b:f9:34:20:
2a:fd:18:62:c7:7a:50:d4:8d:c1:46:ef:78:f8:24:
e2:62:65:da:92:ee:cd:37:29:b6:d1:13:68:3f:37:
7c:97:46:97:a3:be:c5:d6:10:bb:36:bb:a9:54:ef:
bb:b7:b8:0b:44:f6:20:9f:45:8c:16:77:c0:34:d2:
5b:81:17:a5:8f:56:df:e4:1d:3d:5f:36:f3:c2:75:
c4:42:2c:b4:04:40:80:f5:85:ef:50:95:83:2c:24:
40:00:ad:1f:79:7c:95:59:d9:2e:20:4e:d0:62:11:
b6:19:03:64:0b:b5:ce:e0:dc:ec:61:25:ad:72:7c:
20:d5:16:b5:32:73:a0:83:c5:c5:0f:63:08:8f:65:
c5:87:0a:2e:84:9e:99:82:ba:38:9e:61:ca:10:eb:
75:30:b0:9d:1a:f0:14:0e:2f:a9:2a:79:d5:69:43:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:3E:A5:EF:B3:DD:BA:86:27:5F:11:3C:49:15:D1:65:6C:2A:4F
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:4b:bb:f4:6f:fb:dd:c0:c6:bc:3f:2b:19:22:04:89:cf:
6a:68:1e:5e:02:0e:7a:b1:d2:e6:ce:86:c6:77:bd:89:6c:43:
04:9f:1d:5f:b9:46:ec:a3:9d:5e:6b:aa:51:e9:32:a3:7a:6f:
a0:43:48:d6:94:76:a1:38:a1:c4:ad:de:eb:2c:91:e0:e4:ae:
1a:14:15:02:67:b4:4c:b3:42:06:a9:ac:f3:47:79:07:41:fb:
aa:a0:be:d3:a0:96:77:18:4f:42:ed:9f:ec:01:c5:2f:a0:ef:
9b:d6:bf:97:59:74:00:56:7c:2f:34:4e:15:46:ae:6c:51:8e:
ba:e9:29:c5:5a:74:c8:7c:50:f3:91:3c:a9:2b:cb:22:70:f7:
25:ad:97:48:be:69:bc:07:96:d3:5f:72:7d:c3:23:ba:9c:ff:
57:8a:b2:72:98:9b:5f:7a:ff:2f:ae:ad:4b:17:2d:62:6f:58:
15:a4:36:f1:08:70:3d:c0:3f:75:fe:fa:16:4c:1f:af:85:fe:
d9:1a:89:3b:a0:be:7d:97:4e:9c:87:40:cb:4a:d1:c0:5f:6a:
e6:67:6a:04:64:dc:c2:04:fc:8c:8c:fb:74:58:df:68:78:57:
8d:ba:46:08:a6:ac:76:e7:23:90:97:83:95:32:0c:e0:24:31:
2e:a3:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:24 2026 by rpki-client