Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: NQ/3UNvolBL9R0oDcHhFWucDFfl8+8W9wxmUcxHpV2s=
Subject key identifier: C9:13:B8:B3:15:87:CD:EF:D8:EC:5E:84:4E:AD:E0:0B:0A:39:F8:C0
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 019FA8623B67BA516ED7990D6FAF21FDB5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0D6F
Signing time: Tue 28 Jul 2026 11:00:37 +0000
Manifest this update: Tue 28 Jul 2026 11:00:37 +0000
Manifest next update: Wed 29 Jul 2026 11:00:37 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: Xzh5FpG9GzXOTVs8mRIZLhVRTEdwbryCA5faKocvVOk=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:3b:67:ba:51:6e:d7:99:0d:6f:af:21:fd:b5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Jul 28 11:00:37 2026 GMT
Not After : Jul 29 11:00:37 2026 GMT
Subject: CN=c913b8b31587cdefd8ec5e844eade00b0a39f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:30:6d:67:ec:ea:95:da:06:e5:bd:63:9b:
de:16:69:ac:68:ab:9e:32:03:b1:2b:12:4a:8f:2e:
7e:5a:00:c3:33:85:45:07:59:84:4d:6d:1c:40:81:
ca:49:47:dd:c4:db:3b:1a:8b:77:70:e7:2a:dd:d6:
c4:35:6d:53:3c:9f:4f:1d:33:6d:29:b1:8b:8a:3f:
88:82:33:c0:a5:0e:b1:35:63:c0:ca:8d:56:63:e3:
c3:07:19:b7:36:81:72:95:99:44:86:c5:77:79:1e:
11:27:af:7b:d6:29:8f:8f:8f:9a:f5:7d:89:21:50:
2d:14:5b:6f:8e:a4:bc:20:30:de:6b:a9:fc:43:07:
ab:ae:7f:9f:15:47:ae:f0:b5:e8:ac:f0:f5:b4:e1:
a6:43:79:7c:67:ae:38:f1:5f:ff:60:d0:6c:e6:6d:
d5:e3:f9:36:24:ca:34:58:88:73:db:d0:2d:60:e3:
ed:39:88:68:45:a7:0c:b2:e3:a8:20:f9:d9:e2:c2:
13:69:8f:96:65:17:54:56:95:7a:96:1c:d1:71:73:
b4:84:67:05:db:92:c9:70:61:b8:c1:e9:6a:65:9d:
25:5a:b9:08:19:9b:d5:71:4a:91:df:75:8c:32:3b:
56:84:75:d0:cf:4d:66:fc:e5:b2:6b:f2:3d:4f:8b:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:B8:B3:15:87:CD:EF:D8:EC:5E:84:4E:AD:E0:0B:0A:39:F8:C0
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:be:29:86:49:dc:b2:3a:21:96:02:c0:8c:fc:ed:49:2d:24:
be:3f:f1:62:46:f5:97:e2:f1:10:07:5e:e2:79:0e:63:26:fc:
84:91:e7:84:27:a3:93:21:e7:df:14:99:c1:e6:e1:ca:3b:24:
ce:a3:52:37:6e:5f:7f:30:f2:2d:cc:52:5e:aa:51:74:eb:93:
15:d4:c5:3a:60:cf:a9:c4:c4:07:5c:59:2b:c6:5e:c0:70:74:
a3:7c:5a:5b:22:e2:ea:75:07:96:a9:e5:3d:21:5e:a5:5d:74:
e3:5e:dd:cd:1c:2b:69:45:a7:76:0b:e3:52:10:64:d1:8e:62:
e1:91:f4:af:2d:c3:df:e8:12:85:fa:db:e2:6a:6e:9a:9c:60:
ea:aa:ac:1f:dc:67:01:43:3b:25:7d:ad:34:35:cb:12:e3:28:
86:63:7a:f4:5b:64:ad:0d:c1:17:8e:2f:cb:56:64:f5:4f:82:
20:60:6f:bf:5e:c4:6a:ea:b7:17:db:93:45:14:9a:95:f5:78:
a6:c9:9d:36:ce:17:aa:82:94:59:db:6c:04:65:a0:78:75:40:
48:65:ec:73:24:dc:4d:b1:6e:99:78:9e:5d:07:05:5f:c7:c4:
9f:be:b9:98:fc:d1:ca:95:55:f1:24:0b:8f:dd:49:d4:90:7f:
61:70:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:15 2026 by rpki-client