Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier: gVYbgAyrwqSZL3G53Cmdabqu5U2h1YSkYCoIXgSF46c=
Subject key identifier: CC:28:B0:90:FC:16:B1:31:BB:80:68:92:C8:CD:A1:3A:0B:E7:F0:80
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial: 019FA82C1AFDEFF3EDD2C572BC55A440A4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 10:01:30 +0000
Manifest this update: Tue 28 Jul 2026 10:01:30 +0000
Manifest next update: Wed 29 Jul 2026 10:01:30 +0000
Files and hashes: 1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: FBkBWQYgnOZztqHA5QozX+8OnhiulKfwdErOpVTNzE8=)
2: iEGrmEBr_XYHG10FFaz1pHlElzU.roa (hash: Cm2PlN0NZyKWye3mjv4O21ycHAo7BA8ZMRSr0N03Zos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:1a:fd:ef:f3:ed:d2:c5:72:bc:55:a4:40:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Validity
Not Before: Jul 28 10:01:30 2026 GMT
Not After : Jul 29 10:01:30 2026 GMT
Subject: CN=cc28b090fc16b131bb806892c8cda13a0be7f080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:c8:34:5a:b3:74:74:cc:0d:6d:90:b9:1a:
1a:b3:e6:21:82:4f:5f:1f:20:18:9d:95:b5:30:f1:
95:57:a4:0a:f8:e3:18:ae:18:4c:e5:4c:96:eb:f9:
f3:0e:2d:2b:59:ea:31:38:0b:5e:35:7f:61:e6:48:
45:59:10:cd:a5:c5:c7:53:1d:7e:82:81:e9:4a:c7:
6d:5c:6f:fe:da:d6:7e:c7:a1:5b:42:4d:e4:7a:11:
47:80:39:73:eb:d1:de:d1:60:7b:b1:9a:b3:ee:a6:
4a:83:3f:37:21:d0:01:6b:83:f7:55:ea:1b:d1:73:
7d:6d:91:55:37:88:d0:34:2d:b6:0a:10:fc:bd:d2:
96:61:be:57:f3:72:56:60:be:28:95:8a:04:72:f5:
e4:02:b8:84:17:2e:45:a3:7c:6c:9a:7e:2e:d5:04:
6d:b2:7a:71:32:01:ba:c1:6f:4a:63:a4:2b:ef:51:
ed:03:43:be:65:60:39:fd:98:00:b2:8b:c4:d7:e8:
94:ea:00:d0:e4:35:67:5b:73:9b:87:a0:81:4a:b4:
79:ef:8c:70:2d:62:fe:d7:be:ef:64:60:f8:d2:f4:
3b:66:a1:29:03:56:64:0e:32:b0:ce:a7:a7:3e:5d:
14:aa:67:f4:76:fd:13:2e:d2:04:7d:6b:2e:d0:b2:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:28:B0:90:FC:16:B1:31:BB:80:68:92:C8:CD:A1:3A:0B:E7:F0:80
X509v3 Authority Key Identifier:
keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:99:45:9d:af:d5:ed:56:5e:23:9d:3d:70:cb:5b:9d:24:
61:b8:9d:40:45:4d:b0:df:6b:8d:b3:24:69:06:8c:3a:db:cc:
a5:1c:55:84:fe:58:3c:fb:57:ca:48:a6:df:18:9f:b3:04:ac:
b1:99:1c:7a:4b:93:2e:ab:6e:f4:05:4a:b5:86:cf:cf:3c:8b:
4d:b7:4c:e0:5f:c6:eb:47:68:95:e2:ac:a8:09:d9:30:15:0f:
d3:8d:b4:90:ad:04:d0:b4:08:08:47:bc:85:58:98:3d:88:38:
e9:2f:2f:ad:3a:e4:cd:cf:94:13:72:5a:08:3b:ec:17:ad:39:
54:72:75:3e:6f:1a:26:52:8e:d1:ae:d4:01:55:35:bb:07:40:
38:1c:d4:70:35:03:b0:f6:2c:bc:c9:fe:63:07:81:9e:de:2f:
3a:1d:da:6d:ee:79:0e:76:c7:86:98:ee:24:04:37:37:c8:c3:
35:89:91:13:ce:12:7d:51:f9:80:51:c4:d9:69:94:48:2f:90:
5d:51:7d:43:69:8e:7b:60:b6:46:3a:87:f1:bf:6d:61:c3:d1:
b4:dc:48:a3:a4:3a:4e:ff:88:fd:09:aa:89:d5:f0:15:c2:3d:
06:40:56:9f:84:7a:a3:09:b3:8b:4c:28:5c:df:eb:2a:60:04:
54:8d:3a:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oLBr97/Pt0sVyvFWkQKSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1
OWQxMDUwHhcNMjYwNzI4MTAwMTMwWhcNMjYwNzI5MTAwMTMwWjAzMTEwLwYDVQQD
EyhjYzI4YjA5MGZjMTZiMTMxYmI4MDY4OTJjOGNkYTEzYTBiZTdmMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonDINFqzdHTMDW2QuRoas+Yhgk9f
HyAYnZW1MPGVV6QK+OMYrhhM5UyW6/nzDi0rWeoxOAteNX9h5khFWRDNpcXHUx1+
goHpSsdtXG/+2tZ+x6FbQk3kehFHgDlz69He0WB7sZqz7qZKgz83IdABa4P3Veob
0XN9bZFVN4jQNC22ChD8vdKWYb5X83JWYL4olYoEcvXkAriEFy5Fo3xsmn4u1QRt
snpxMgG6wW9KY6Qr71HtA0O+ZWA5/ZgAsovE1+iU6gDQ5DVnW3Obh6CBSrR574xw
LWL+177vZGD40vQ7ZqEpA1ZkDjKwzqenPl0Uqmf0dv0TLtIEfWsu0LJNpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwosJD8FrExu4BoksjNoToL5/CAMB8GA1UdIwQY
MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt
OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0
LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0qZRZ2v
1e1WXiOdPXDLW50kYbidQEVNsN9rjbMkaQaMOtvMpRxVhP5YPPtXykim3xifswSs
sZkcekuTLqtu9AVKtYbPzzyLTbdM4F/G60doleKsqAnZMBUP0420kK0E0LQICEe8
hViYPYg46S8vrTrkzc+UE3JaCDvsF605VHJ1Pm8aJlKO0a7UAVU1uwdAOBzUcDUD
sPYsvMn+YweBnt4vOh3abe55DnbHhpjuJAQ3N8jDNYmRE84SfVH5gFHE2WmUSC+Q
XVF9Q2mOe2C2RjqH8b9tYcPRtNxIo6Q6Tv+I/QmqidXwFcI9BkBWn4R6owmzi0wo
XN/rKmAEVI065w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:32 2026 by rpki-client