Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: groHXVgr97QfkS55d2K4X16v0tPDucFla2ICOeryEUc=
Subject key identifier: 38:6D:F9:E0:BD:79:14:58:0E:C8:1F:E5:79:9D:ED:6E:D3:45:D3:0E
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 01A0D6BA3E38ED99C20F0F93D238D6B12FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 1622
Signing time: Fri 25 Sep 2026 04:02:04 +0000
Manifest this update: Fri 25 Sep 2026 04:02:04 +0000
Manifest next update: Sat 26 Sep 2026 04:02:04 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: 9v283eCgiweCfhLpIH9deTQ53nWhBmfeTQPqDAgCJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:3e:38:ed:99:c2:0f:0f:93:d2:38:d6:b1:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Sep 25 04:02:04 2026 GMT
Not After : Sep 26 04:02:04 2026 GMT
Subject: CN=386df9e0bd7914580ec81fe5799ded6ed345d30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:d1:e0:77:1a:1b:e1:40:af:81:c4:28:02:
1b:ae:ec:74:6d:0a:0b:34:36:dd:c6:b9:d9:5d:bf:
ca:00:c8:f8:5b:67:ab:fc:54:14:fc:33:1b:8c:c1:
36:eb:ce:0e:73:da:66:07:8f:cd:7f:d1:4a:d1:ed:
32:df:e4:55:ca:65:aa:c6:3e:be:9c:be:2e:a3:18:
79:ae:23:8c:fa:45:3c:70:c6:4f:ba:12:d4:95:b9:
fe:db:a6:dd:4c:35:5c:50:7b:52:4d:d0:be:d3:d2:
78:9a:10:0f:d8:94:71:b6:2d:02:85:c6:2a:a6:42:
30:0a:48:66:c7:75:ca:a8:22:6e:91:c7:bd:bc:07:
03:8d:5c:88:1a:1e:a8:5a:a9:64:00:eb:86:52:99:
6e:50:6e:79:d5:1e:4f:9f:ed:3c:25:2e:b0:c6:8a:
4c:e6:8b:56:93:fd:2c:9a:c2:83:07:10:6c:66:da:
cd:a1:c3:79:a8:1a:38:90:87:9c:92:37:8a:dd:a4:
38:d6:78:c4:00:80:3d:7f:d6:1d:9c:44:fb:63:6f:
fe:a3:ee:eb:c9:78:8d:47:33:3c:47:a8:ae:11:fc:
43:ae:36:bc:3c:2b:95:cb:b8:7e:5b:fd:2c:88:03:
d9:ee:ef:b6:c5:05:55:72:11:40:f4:08:eb:a8:15:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:F9:E0:BD:79:14:58:0E:C8:1F:E5:79:9D:ED:6E:D3:45:D3:0E
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:56:fc:97:0a:2b:db:0a:61:da:70:05:44:44:1e:64:4e:09:
a2:fd:3e:3c:dd:4d:f6:f5:17:9d:dc:97:45:3f:02:84:71:57:
b1:b3:ab:28:4b:01:6d:e1:e3:35:56:05:02:64:b2:e1:38:3e:
15:fc:6a:76:c2:bd:24:ac:b0:ac:7d:ad:21:ca:4e:14:46:7c:
54:35:ec:8c:47:96:28:b7:da:c5:ff:58:f1:84:ed:11:f8:8c:
a8:11:2e:c8:0c:ca:23:1a:ae:7d:26:b3:59:21:db:6c:b8:7e:
cb:40:a5:31:93:c8:4d:c6:01:15:92:2a:43:e3:ec:89:19:c5:
ae:59:c1:12:96:22:29:44:92:64:37:fd:8d:b5:bc:e7:4e:22:
11:b2:1b:7b:ee:62:ad:8c:a5:a7:ef:c0:9a:b5:8b:fe:c3:be:
78:ce:5b:c8:7e:c2:2a:f6:c3:f2:17:98:8f:f0:62:69:14:5a:
1f:e7:50:e3:99:4c:0e:63:cb:3f:9c:59:40:ec:d5:33:cf:43:
06:d3:4b:f5:13:27:df:e8:ce:1d:ba:50:2d:e8:fc:fa:12:21:
c1:59:86:32:1b:05:04:7d:bb:76:c6:63:61:7f:82:a8:a2:73:
d0:5d:da:44:e5:94:84:12:af:01:9c:e4:a3:c6:9e:6b:27:c0:
6f:dc:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:01:33 2026 by rpki-client