Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: 5QImCIrcbMKonisX6fphfsATE71rFBqJIxvjRggrxG8=
Subject key identifier: F8:7D:56:5E:E1:98:56:16:77:B7:02:45:9A:C6:19:BF:27:C9:EC:38
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 019D284D7E5CB20F7023C5F923C77C4E5158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 143A
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: gZHVhVKLRUYcmhMv+Qz0lm157GVYBMOU1Mrlj+MOpvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7e:5c:b2:0f:70:23:c5:f9:23:c7:7c:4e:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=f87d565ee198561677b702459ac619bf27c9ec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:0d:ce:d2:73:e7:56:22:20:08:d7:57:fb:
db:ec:61:c8:2a:b1:5c:8f:90:b0:95:89:93:f9:b2:
d1:4f:8c:57:2d:8e:bb:7b:01:e8:b6:ac:b3:88:da:
75:84:41:c5:51:66:f7:97:56:2b:ff:33:f7:c7:08:
26:03:56:d7:f2:c0:68:de:b9:f3:a9:8e:ec:2c:1f:
ac:9e:1e:1d:35:1a:d3:31:05:f9:85:91:84:5c:3a:
74:b3:dd:06:36:2d:65:11:fb:85:cb:67:67:eb:cc:
a7:72:7a:39:84:59:f0:1d:08:18:09:e0:d1:38:c5:
f7:a6:05:1a:b5:1b:a8:c8:54:e1:60:4e:a5:94:20:
49:0c:1d:20:bd:d1:67:a9:35:27:7e:8d:b4:1a:0b:
17:66:62:ec:b5:44:29:41:6f:93:a3:cd:d2:82:38:
e1:46:43:1d:35:66:1d:27:05:81:ad:9a:7d:ac:37:
b4:3c:d0:06:57:58:fe:82:4d:95:39:47:dd:fe:c5:
e0:22:b7:da:60:50:99:8e:17:c5:e6:79:e0:41:15:
92:45:c2:cd:45:7d:4c:2d:c8:e4:4f:4a:54:46:33:
9a:5f:1a:b6:52:7b:89:9c:ae:ac:8f:6a:26:6a:6b:
bc:7b:4e:3a:ae:3b:4d:bf:4b:11:8c:8d:0d:46:90:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:56:5E:E1:98:56:16:77:B7:02:45:9A:C6:19:BF:27:C9:EC:38
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:46:ef:29:9b:33:ba:4e:5d:25:fa:7b:a6:fd:9f:98:c5:82:
f7:1d:83:88:0d:3a:18:5d:eb:a6:5c:70:e5:8a:0b:ad:48:45:
96:62:0a:ef:e9:2f:82:b5:32:db:4b:11:3b:06:7c:df:c4:d4:
f6:9c:ed:a1:ab:51:d4:2b:5a:df:48:45:0f:17:51:e4:10:4a:
b8:e5:3a:aa:b7:d1:d2:cb:55:28:29:7c:de:e3:24:1c:ea:47:
6a:04:9c:8a:3b:6b:7b:4d:5b:f7:89:2f:a7:ce:ff:fa:ca:c4:
c3:54:39:53:f9:af:31:42:13:f7:7d:86:78:64:5a:35:89:30:
b1:d9:f4:e2:70:63:24:c2:c4:fa:15:ef:c9:01:ee:02:ca:8e:
43:62:0a:d7:19:f0:9f:26:92:73:66:6e:6f:1e:e3:b7:4d:84:
76:32:5c:ca:dd:ea:d7:1e:d2:03:77:9c:f5:0b:d4:c7:3f:8d:
f4:0c:5c:28:c7:30:b0:22:bc:79:06:31:d5:62:28:4c:56:ad:
02:65:16:c0:85:ee:0d:f9:21:b3:eb:8e:9e:66:84:9f:ab:0c:
b7:e0:1c:8a:b2:3c:48:ad:83:92:35:aa:d1:7b:82:43:25:60:
0b:88:ff:67:5b:94:d5:51:c6:f2:5b:9e:eb:8a:06:aa:02:27:
4b:41:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:02 2026 by rpki-client