Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: t/YPz7pRvOLJgE82rkIxI+EyS6A4yJfcOUNMxu3agJI=
Subject key identifier: 68:AB:4F:0B:66:B9:36:43:EF:2E:33:26:3D:CB:2B:C1:AC:78:B5:A5
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 019F178BABA469AFC8493532FA5E53D67989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0D24
Signing time: Tue 30 Jun 2026 08:00:57 +0000
Manifest this update: Tue 30 Jun 2026 08:00:57 +0000
Manifest next update: Wed 01 Jul 2026 08:00:57 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: lSyDlluRDi6qZscU8jFbIqsCPIE9sTJS3+BPV9wSSvo=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:ab:a4:69:af:c8:49:35:32:fa:5e:53:d6:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Jun 30 08:00:57 2026 GMT
Not After : Jul 1 08:00:57 2026 GMT
Subject: CN=68ab4f0b66b93643ef2e33263dcb2bc1ac78b5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:5d:53:d4:b9:9c:1e:ed:7b:a3:92:c2:cf:
8a:d2:0c:66:a8:d2:13:66:b7:6b:2d:a7:b0:1e:26:
76:68:38:e8:90:ba:5f:20:42:a8:6f:ae:e4:42:c9:
bb:6c:21:e2:27:9e:cc:13:1a:65:05:54:38:04:a6:
42:18:67:98:af:6c:00:40:b1:a3:b0:40:f6:fc:26:
85:99:3e:51:5e:a1:51:7a:26:a2:f4:92:34:6e:b4:
da:a8:17:e3:68:c6:fc:b7:62:14:69:17:0b:39:53:
a9:a6:96:06:d8:9c:1e:cd:92:83:2e:7d:a1:0c:38:
ee:c5:f4:80:20:51:45:42:b6:9c:1f:7b:30:ea:9e:
93:90:14:1d:92:53:49:ad:64:94:e6:15:a0:11:ed:
9d:0e:6b:77:56:ec:18:fa:b4:3d:b0:1e:d6:dc:e8:
bd:2b:2b:55:39:b7:46:68:81:f6:c2:05:b8:c2:de:
d3:4e:4e:d5:c8:15:86:79:fd:36:47:e0:e5:3b:bf:
46:81:7a:25:08:ba:32:ac:d7:83:9f:e0:37:a9:64:
d6:6f:06:b0:07:f4:08:2a:f3:69:07:29:9e:e0:97:
88:42:08:24:c2:f3:15:94:e1:94:d5:fd:3a:33:29:
b6:cc:01:24:b0:35:76:48:95:68:c9:1c:d3:39:66:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:4F:0B:66:B9:36:43:EF:2E:33:26:3D:CB:2B:C1:AC:78:B5:A5
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:b1:5f:fa:51:24:1d:c1:2c:2d:60:15:a5:85:5c:b3:ad:
60:6e:3f:75:54:8a:92:b9:7b:d4:20:76:ad:f1:e5:aa:42:cf:
81:92:9c:41:2d:f1:34:cf:20:42:a0:b0:5c:67:e0:33:2a:16:
bf:0b:9c:41:48:cd:41:2b:dd:e8:ec:f8:05:26:a5:e6:c7:1b:
7c:6b:f5:21:bb:6d:a1:ce:68:46:3a:6f:f9:f7:12:a4:0c:0f:
36:5f:23:9e:08:78:c1:2d:c3:d4:bc:4d:ac:68:17:4b:f5:57:
2d:6d:ce:a6:80:9e:68:f3:ce:fc:53:5c:1d:fd:f7:78:97:2a:
7c:4b:ed:4b:5e:66:af:69:b8:62:6c:e4:28:1b:53:f5:7e:c7:
73:0d:00:7b:73:12:61:cd:4e:74:fb:19:0a:23:df:e8:0d:68:
ce:05:01:d6:80:54:5e:91:b3:97:ef:7c:3c:79:5d:ce:a3:df:
68:55:ef:9d:c4:2e:c0:77:6b:5c:29:6e:8d:5b:25:c5:e4:84:
5d:58:5b:65:9e:61:e8:55:e8:e6:58:d4:55:e4:5f:be:5c:56:
38:a0:c0:21:fa:dc:15:ab:75:cc:36:e8:0e:9c:b4:fe:79:c5:
9b:93:36:06:99:e1:49:48:95:59:cd:c6:4a:0d:0c:3d:92:96:
3a:9b:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:54 2026 by rpki-client