Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier: 3fzQkD9IQA8w550gt8WBpALJKz4ERLqmr7sL84maFWg=
Subject key identifier: 2D:04:80:E7:80:F3:0D:2A:A0:FA:02:1B:40:28:C6:1C:96:F1:D2:BB
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial: 019CAB6AE702B7237077F9D0853C87AA0ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: 6XoP9Qm56QwbH7XcWd4JSoCKajcBuqhr7xNUVG7R7Pk=)
2: iEGrmEBr_XYHG10FFaz1pHlElzU.roa (hash: Cm2PlN0NZyKWye3mjv4O21ycHAo7BA8ZMRSr0N03Zos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e7:02:b7:23:70:77:f9:d0:85:3c:87:aa:0a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=2d0480e780f30d2aa0fa021b4028c61c96f1d2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:36:46:4e:55:15:6b:ca:18:32:45:16:0e:
51:a9:52:51:3c:fe:55:2d:18:af:43:07:c3:73:45:
f0:c5:8a:42:11:b3:34:1e:d8:0a:c6:2f:ed:4b:e6:
8a:b0:75:06:98:e5:91:bf:2e:a3:62:9f:44:d0:c5:
b0:ef:7a:44:9e:9b:98:50:cc:6b:6e:c7:86:c0:75:
06:a2:53:63:41:4d:63:bf:d0:e9:7c:57:22:26:80:
e5:8e:a4:79:b2:c0:cb:c9:cb:7b:cb:21:c0:f8:82:
ee:96:69:d6:9b:ec:ee:a8:2c:48:ae:38:66:41:2c:
89:dd:f6:da:37:db:f0:be:f0:d2:fb:3e:74:4d:1a:
b5:87:ac:05:f8:9f:75:51:c4:37:c0:87:f1:87:23:
06:9e:f4:12:a8:3d:8f:c6:5a:d8:4a:b1:68:08:91:
b8:a9:85:e4:29:3c:79:0f:87:6f:37:55:cc:4a:c2:
44:83:18:41:4c:fd:45:9b:c0:b7:a8:a9:77:5a:39:
5d:6f:f3:b2:d5:e0:68:1d:3a:e2:ef:68:27:99:92:
47:75:09:ca:74:f3:26:c6:fa:35:5d:84:1c:43:68:
9c:a8:a4:19:98:e6:e3:20:78:54:89:e2:68:3a:62:
6d:02:c2:0c:e3:19:3a:28:1d:62:17:d3:06:59:a6:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:80:E7:80:F3:0D:2A:A0:FA:02:1B:40:28:C6:1C:96:F1:D2:BB
X509v3 Authority Key Identifier:
keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:63:d9:bc:49:da:f9:11:4c:0c:c6:1b:6d:e6:ea:14:01:46:
8f:f7:ee:b5:69:1c:1c:70:6f:f4:cf:a8:9d:00:e6:59:bc:b8:
a3:c4:9c:a1:ad:27:44:ac:c3:c5:d4:b9:08:51:cc:63:de:69:
16:1c:4b:99:d7:de:f3:0a:1a:94:2a:4c:b7:e4:5f:65:ff:40:
9b:58:cf:32:de:5e:e3:df:8f:67:ec:18:a5:d5:75:c3:67:55:
c9:f2:57:47:7d:f7:9d:f5:b2:f7:3e:f0:01:9b:b7:9a:0c:98:
9e:9c:7b:15:16:4f:44:68:d9:91:13:75:1a:10:de:41:68:4f:
fc:ba:ed:d3:f7:1f:69:c1:b0:d4:75:0b:d9:b2:e4:af:d1:02:
3e:51:c0:b0:53:00:24:48:7b:8f:80:d7:a6:c2:3c:18:a3:fb:
da:ce:6a:16:f3:21:61:c2:cf:ca:d3:63:d7:a0:21:3a:d4:51:
4d:07:22:b6:03:71:60:a0:95:56:a2:97:82:34:ee:01:7c:69:
71:c0:4d:98:30:f7:df:27:80:b1:47:3b:5c:66:68:b6:2c:c2:
77:e3:52:23:cb:38:2d:62:dd:98:7d:54:77:ba:a5:53:8e:6b:
b9:24:29:7b:58:f4:ab:3d:2e:a4:df:da:2a:01:65:80:f3:71:
98:d0:85:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraucCtyNwd/nQhTyHqgq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1
OWQxMDUwHhcNMjYwMzAxMjIwMDM1WhcNMjYwMzAyMjIwMDM1WjAzMTEwLwYDVQQD
EygyZDA0ODBlNzgwZjMwZDJhYTBmYTAyMWI0MDI4YzYxYzk2ZjFkMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt582Rk5VFWvKGDJFFg5RqVJRPP5V
LRivQwfDc0XwxYpCEbM0HtgKxi/tS+aKsHUGmOWRvy6jYp9E0MWw73pEnpuYUMxr
bseGwHUGolNjQU1jv9DpfFciJoDljqR5ssDLyct7yyHA+ILulmnWm+zuqCxIrjhm
QSyJ3fbaN9vwvvDS+z50TRq1h6wF+J91UcQ3wIfxhyMGnvQSqD2PxlrYSrFoCJG4
qYXkKTx5D4dvN1XMSsJEgxhBTP1Fm8C3qKl3Wjldb/Oy1eBoHTri72gnmZJHdQnK
dPMmxvo1XYQcQ2icqKQZmObjIHhUieJoOmJtAsIM4xk6KB1iF9MGWaYV5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0EgOeA8w0qoPoCG0AoxhyW8dK7MB8GA1UdIwQY
MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt
OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0
LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmPZvEna
+RFMDMYbbebqFAFGj/futWkcHHBv9M+onQDmWby4o8Scoa0nRKzDxdS5CFHMY95p
FhxLmdfe8woalCpMt+RfZf9Am1jPMt5e49+PZ+wYpdV1w2dVyfJXR333nfWy9z7w
AZu3mgyYnpx7FRZPRGjZkRN1GhDeQWhP/Lrt0/cfacGw1HUL2bLkr9ECPlHAsFMA
JEh7j4DXpsI8GKP72s5qFvMhYcLPytNj16AhOtRRTQcitgNxYKCVVqKXgjTuAXxp
ccBNmDD33yeAsUc7XGZotizCd+NSI8s4LWLdmH1Ud7qlU45ruSQpe1j0qz0upN/a
KgFlgPNxmNCFFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:25 2026 by rpki-client