Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: l8924nRL/VKK7Yt09CMZEUEsJ307I1HGntx2eYILRio=
Subject key identifier: A1:A8:FD:34:AA:31:C5:84:BB:26:AD:0D:67:B6:61:F9:BA:55:95:4C
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 019FA974B73CA65DB0B2FE7A7DC4F8DC3418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 1586
Signing time: Tue 28 Jul 2026 16:00:26 +0000
Manifest this update: Tue 28 Jul 2026 16:00:26 +0000
Manifest next update: Wed 29 Jul 2026 16:00:26 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: pf4rKVZHingdkQaMcTReyfJvdIXJyb47rOU1Gp1arq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b7:3c:a6:5d:b0:b2:fe:7a:7d:c4:f8:dc:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Jul 28 16:00:26 2026 GMT
Not After : Jul 29 16:00:26 2026 GMT
Subject: CN=a1a8fd34aa31c584bb26ad0d67b661f9ba55954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:56:14:09:21:83:7a:6b:c8:cd:1a:aa:a8:
be:37:5e:a9:aa:2d:9d:e0:99:ff:94:12:cc:00:94:
21:ec:ea:ad:7d:7b:df:b0:eb:5f:10:95:5c:8b:a3:
62:6b:bc:52:a7:61:e1:a7:10:64:7f:5d:50:dd:2a:
cf:f9:0c:27:4e:e6:1a:7a:ac:4f:6e:dc:4a:d4:c6:
86:84:2f:ec:e5:9e:6c:8e:59:25:d3:17:56:72:ec:
12:43:51:b6:11:ad:7e:b6:e5:71:5e:b4:02:d5:87:
65:1a:dc:05:13:a3:f2:66:d0:18:23:89:04:10:a9:
07:51:22:c9:9a:87:aa:38:45:5e:f3:a8:e2:fd:ed:
8b:02:98:6e:14:d0:22:6e:64:a8:d8:7f:00:6b:9e:
fb:4c:90:6d:de:fc:ae:24:ed:10:5d:fa:fd:7f:99:
7c:8f:03:af:60:ae:10:a2:d0:06:e5:7d:15:b3:35:
42:9f:02:de:ec:56:b1:88:c6:3e:bc:e0:28:7a:06:
bf:42:f4:cb:dc:1b:00:e7:2e:a4:20:a6:3f:eb:19:
b9:5b:f7:bc:e8:66:72:2b:d6:59:bd:be:63:4e:b5:
f8:d9:1f:db:02:14:a1:81:b9:60:07:3e:ad:2a:f7:
23:43:d6:b0:2b:2a:86:43:6a:77:a3:d5:87:fa:83:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:FD:34:AA:31:C5:84:BB:26:AD:0D:67:B6:61:F9:BA:55:95:4C
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ba:04:a5:a8:3a:68:8c:54:22:01:d0:44:d4:0f:35:34:8e:
0c:a4:d1:ff:f1:44:0c:71:86:49:6a:80:e1:61:aa:e2:ee:57:
59:01:5d:8e:d9:c7:78:7e:c3:5e:ec:71:6d:cf:fc:26:82:e0:
ea:96:da:fb:3b:53:20:c4:bd:e8:78:a6:94:7f:54:d4:3e:0d:
0e:f1:ad:0b:3c:d5:29:4f:58:6b:2f:6c:fa:40:60:a0:b5:60:
f7:f2:96:d8:91:be:31:f6:cc:ad:bf:80:92:52:ae:bc:8e:30:
b0:f5:6f:be:87:5c:7b:b2:8a:f3:b1:06:de:8e:42:c7:3f:56:
c7:79:8d:54:e0:4d:8d:95:1a:79:34:b7:1c:4f:36:c9:d1:9c:
3d:09:ce:08:d5:91:c8:6d:58:2f:71:c0:44:c6:ac:3c:16:56:
4a:4f:ac:0f:08:25:ad:c8:9e:eb:f4:e8:db:fe:4c:45:c7:ab:
1b:a4:66:b1:32:46:4c:d5:31:f9:27:d2:ce:fa:3d:09:2d:b6:
1b:ee:43:72:ce:40:34:1e:e4:4b:4b:a0:5d:bc:dd:21:d9:5e:
55:aa:04:2f:3b:97:e0:31:b3:99:4f:89:2e:96:ef:52:b7:d4:
4c:b8:80:d7:53:a4:88:60:75:03:b9:07:bd:f6:58:41:a3:9d:
80:27:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:47 2026 by rpki-client