Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: lvwDxnMNCwSpFgnnZjqbk+7xLjE/C2AaunAmfsPIJ5Y=
Subject key identifier: DB:17:6C:CE:FB:1E:CA:42:A8:91:CD:2E:EE:CA:88:9A:FF:39:D0:76
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019D992B23F6CAF42C5372430055431A456C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0995
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: prrGS4lEI/qnrg/97R7fgNtKBY3JRqhsOJJfy2PrO+w=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:23:f6:ca:f4:2c:53:72:43:00:55:43:1a:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=db176ccefb1eca42a891cd2eeeca889aff39d076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:73:c0:3c:db:58:8b:4a:db:1d:1e:69:91:
9b:0a:02:d2:ad:ab:0e:d2:93:d1:cd:aa:98:fe:54:
79:63:81:d0:6e:ba:c9:08:e8:2f:07:e7:cb:2d:66:
9a:e4:3c:3f:6b:3a:93:fe:e5:18:65:2b:6c:56:d1:
2a:c8:70:ed:01:63:b3:0b:1d:6a:16:6c:91:1e:c4:
6b:96:58:b8:e2:42:7a:39:90:04:e2:ab:5c:f9:f7:
66:6f:0c:b5:f1:f9:21:2b:83:2a:05:08:cd:d7:fc:
9c:57:89:22:22:12:51:6f:bf:9a:c8:e8:8f:4c:28:
4a:89:43:26:ef:b0:e7:26:c5:4a:9b:8d:8b:23:6b:
c7:6c:7b:c6:9f:24:d8:7c:ba:a9:c6:ea:7f:77:ec:
fb:4d:ba:51:a1:e8:d1:fb:1b:b4:fb:85:1b:64:2e:
b0:f9:df:0c:47:63:99:e0:62:14:1b:2e:0d:8d:84:
dc:de:e8:4d:6b:d3:fb:91:11:c4:3e:c4:bd:f3:ac:
8e:4c:49:fd:17:40:f7:34:bf:23:e9:78:9a:e6:91:
cc:19:a4:d1:1e:bd:df:f1:ce:00:20:9a:6b:0d:08:
63:8b:a0:26:d9:18:df:3f:c1:a9:67:ee:3a:ef:22:
7d:9a:b8:1f:5f:66:e1:55:cd:87:e9:07:c0:c3:cb:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:6C:CE:FB:1E:CA:42:A8:91:CD:2E:EE:CA:88:9A:FF:39:D0:76
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:02:c9:24:ba:bc:8f:13:13:9a:a8:9f:6e:e0:c2:33:3a:04:
9f:5a:a7:5a:04:85:85:6d:ff:0b:ab:16:2a:9b:5e:88:d2:97:
17:ab:29:12:76:03:9c:88:9a:07:9c:a3:18:dd:af:a5:85:54:
b2:27:8b:e2:e9:07:eb:ac:9c:29:59:09:33:66:e3:15:4d:f7:
69:b5:1d:af:6f:5d:2b:f8:6e:96:37:8e:df:88:82:90:10:3c:
b7:5b:37:b1:59:77:18:e1:90:1e:d6:da:cd:f5:c8:33:a4:6f:
5b:82:60:4b:35:92:81:fd:71:90:8b:b2:b7:15:ca:6c:2b:75:
54:28:16:e3:d9:79:f7:98:c7:6e:71:48:16:7d:5e:14:61:b1:
0b:6c:e1:cc:4f:67:32:d1:25:c7:b7:d9:49:3b:c1:17:64:56:
1e:e6:76:b8:07:a4:51:f1:44:5d:cf:ae:f1:63:dc:0f:ad:a0:
76:9e:44:3f:34:ed:ce:91:5b:92:0f:4b:e8:c8:93:e7:a1:56:
a2:4f:cb:43:b1:48:0c:80:06:99:69:6e:69:4d:ef:31:ff:68:
ac:44:7f:25:b1:74:f1:0b:6c:bb:de:20:ec:fa:eb:56:90:a3:
8f:f9:88:4b:b4:71:d9:76:1f:d3:8c:42:71:26:91:80:59:7e:
9b:d2:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:19 2026 by rpki-client