Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File: 97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier: CUajW1rSoZHJ92Dn+qx2rh8awG5eTw9nm9mLopLmRbg=
Subject key identifier: A5:29:69:D9:C7:D1:89:17:71:55:FF:CF:25:DE:D6:75:FE:7B:77:2C
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial: 019CAA58FD823DF40466BA6C2FBB94B9C066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: uuGidT99knUST5FAUFwXRZjsG7F/wrO2uUlxkma94yc=)
2: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (hash: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fd:82:3d:f4:04:66:ba:6c:2f:bb:94:b9:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=a52969d9c7d189177155ffcf25ded675fe7b772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:ed:82:8a:78:8f:1a:0f:15:99:70:0a:d4:
5a:09:5c:ef:77:16:d2:ce:c8:b0:07:1c:37:29:4b:
d9:bd:b3:1f:fc:2b:d0:b7:9b:c7:0a:86:95:13:bd:
a1:b5:8b:98:6b:49:0e:da:10:d6:0c:be:a2:ca:7c:
5f:38:3d:42:15:76:88:7d:21:db:72:17:82:23:e6:
db:f6:9d:da:03:98:87:d7:35:5f:df:07:f7:7a:be:
e9:39:d7:47:11:cf:50:76:de:21:cc:af:f8:f2:75:
82:a7:01:26:35:da:55:6a:18:8e:af:98:58:ba:7c:
5a:b1:92:ff:56:3d:b9:25:25:61:de:f6:c9:83:8e:
6d:56:3d:57:86:ad:03:14:b5:9b:8a:8c:70:57:80:
eb:b2:bf:bd:80:fc:ee:10:7f:bb:91:c7:0c:f3:f9:
c3:a0:c4:2b:28:1d:c0:c6:74:d0:bc:1c:43:e6:a3:
54:15:bb:9d:b6:4c:10:de:df:df:a5:d3:88:f8:0a:
c2:54:da:fb:01:79:eb:58:c0:66:47:e6:f6:7f:1c:
08:b1:12:32:b1:4c:1a:b6:b2:2a:81:f5:ed:44:0e:
e6:b6:6a:38:f8:bd:46:13:ce:87:c6:a2:13:a8:92:
4d:61:85:7d:83:45:08:65:d1:e5:d4:4b:88:66:3b:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:69:D9:C7:D1:89:17:71:55:FF:CF:25:DE:D6:75:FE:7B:77:2C
X509v3 Authority Key Identifier:
keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0d:ca:c1:5c:d5:db:e2:3b:bb:c1:03:a4:ad:f0:8c:af:82:
d2:36:0d:5a:26:d1:ca:9a:5c:c5:84:10:61:91:2c:43:56:89:
8e:03:35:21:f4:18:4b:38:b3:2e:ce:d4:40:58:58:8b:8f:65:
06:21:1d:e5:e0:1a:89:ee:4c:8a:bc:5e:3f:29:2a:a4:fb:b9:
b1:52:2f:4e:c5:26:68:75:eb:54:be:80:bc:d9:f8:bd:e9:63:
4c:9a:2f:a9:bf:c8:eb:56:c3:dd:90:8f:37:e1:46:04:8a:37:
39:2b:45:69:2f:30:b0:46:5e:9e:a4:23:fc:02:f1:3e:ec:a7:
e0:4e:17:98:10:87:95:e4:1e:75:49:82:b9:8d:94:d7:bb:91:
34:6c:d3:4f:f1:c3:84:51:69:cf:97:1a:c8:01:17:46:c0:52:
34:55:44:cb:77:d2:89:bf:90:36:16:d3:21:e5:4e:c0:6f:a2:
ee:3d:e3:8f:5c:c5:b2:26:b7:61:e5:26:2e:80:9a:a7:f7:fe:
17:6e:79:de:15:e4:ce:d3:52:11:b9:26:d0:44:69:49:02:bf:
97:b8:79:27:57:68:6c:da:f7:7b:86:f0:e7:c7:4c:3c:bf:22:
d6:47:3c:23:02:1e:62:2c:4a:74:2c:24:9b:99:38:2f:f7:b5:
00:58:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:39 2026 by rpki-client