Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: CDLjD85Qh0+WtSctDjIfmlmITGXJ44BuL/n3psGys6U=
Subject key identifier: 26:C5:84:0B:4A:CB:A9:31:48:8D:34:3B:AC:D5:2E:50:2F:DC:62:C2
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 01A0C256007796422E47F6F5665D32ED9274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0E01
Signing time: Mon 21 Sep 2026 05:00:11 +0000
Manifest this update: Mon 21 Sep 2026 05:00:11 +0000
Manifest next update: Tue 22 Sep 2026 05:00:11 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: z1QLAAWkA4SnSuapMSHaebyw9NrTKfo0WJ3aR35vc4E=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:00:77:96:42:2e:47:f6:f5:66:5d:32:ed:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Sep 21 05:00:11 2026 GMT
Not After : Sep 22 05:00:11 2026 GMT
Subject: CN=26c5840b4acba931488d343bacd52e502fdc62c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:29:c3:a5:36:08:ce:fa:ef:8d:11:07:2b:
1a:b5:8c:ac:cd:39:4c:84:1c:2b:17:00:6a:69:32:
15:a2:ff:1c:c8:8a:26:91:81:8a:5e:d6:61:cc:fe:
45:57:21:89:80:a6:f4:c3:81:c7:91:87:fc:e3:ce:
32:c9:5e:7c:d9:0f:4c:15:86:b2:e0:b9:00:58:82:
0d:f7:61:8f:8b:00:39:08:b7:8c:e2:8a:34:65:3f:
f3:48:3d:5f:79:21:7a:d6:81:d6:2f:91:0a:d0:a6:
e8:42:02:e5:27:45:6a:59:41:36:8d:c1:28:d9:74:
c0:dd:c3:ea:ef:6c:fb:13:4a:8e:16:7c:d4:90:0b:
ca:13:77:8b:94:e9:54:c9:fe:5c:43:c7:6f:2c:e1:
51:53:02:d7:01:08:cd:c9:05:03:12:55:20:14:93:
77:26:33:37:04:f5:72:db:83:48:82:71:87:a0:a1:
7c:8b:ab:97:db:51:7c:fd:7c:7f:b2:b4:34:83:d9:
6e:f6:a2:70:ca:2d:66:73:20:6f:f6:5e:2f:af:e4:
1f:33:bf:47:cc:9e:ce:ce:b7:e5:f8:5e:f7:4b:27:
f7:38:bd:8e:af:59:d5:5e:76:32:2b:42:e6:7a:12:
22:e4:0d:99:33:a7:e9:df:cd:53:91:29:85:db:df:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:84:0B:4A:CB:A9:31:48:8D:34:3B:AC:D5:2E:50:2F:DC:62:C2
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a9:bb:37:bf:e8:d1:d4:9a:b8:9e:33:25:28:95:c6:aa:58:
6b:5d:30:dc:c8:54:c7:0c:e2:9a:35:4e:9a:54:95:97:55:d6:
d5:62:7f:f8:71:8f:9e:3b:c9:9d:0e:41:9c:e3:d5:21:63:c1:
ff:bc:97:53:1d:4e:6d:5e:c0:a4:c5:d1:16:c4:74:00:68:be:
94:a5:af:ad:03:1b:27:af:57:53:a3:0f:0c:27:a6:94:a2:4e:
35:64:9a:b1:78:a6:4b:95:73:b4:6e:37:0a:c7:a0:75:21:36:
a5:d5:f7:4f:9a:93:b8:58:9d:26:40:0a:d7:63:45:d6:a3:21:
f4:68:e4:2e:42:3f:a4:d3:04:46:b0:22:b1:65:67:04:a6:24:
c4:af:0a:ce:a9:4a:4d:af:9e:32:86:4e:7c:00:15:48:b3:14:
a5:4d:97:37:e7:d6:82:55:d4:be:98:0d:7f:4e:25:f4:32:9b:
4e:63:d0:07:83:2e:f7:c7:e7:a9:3d:0b:d4:7e:9e:6b:72:0f:
60:64:e7:d4:f8:2d:6b:cb:28:d2:32:79:43:4e:63:f7:54:8b:
b2:4a:dc:e9:1d:c2:aa:eb:27:7b:16:83:45:c7:67:e4:f9:74:
9d:a4:f2:09:02:b3:df:61:37:98:bf:81:0a:91:eb:eb:5f:10:
7c:6c:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:34:10 2026 by rpki-client