Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: xPvJIQ34nO3J84WaNGD+jTRh9gQ8TwezrsJhi/4S0FM=
Subject key identifier: C8:85:79:A4:06:8F:CA:F8:42:3C:85:BA:C0:4C:25:00:E1:4D:7D:22
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 019F9059B8F0A1F3A71CC3AD3BD050EA436F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 1579
Signing time: Thu 23 Jul 2026 19:00:26 +0000
Manifest this update: Thu 23 Jul 2026 19:00:26 +0000
Manifest next update: Fri 24 Jul 2026 19:00:26 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: 4MvkbrLCqQgRC1ZaWCdj1bVm5t8hnEYa1qSNHtmzFc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b8:f0:a1:f3:a7:1c:c3:ad:3b:d0:50:ea:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Jul 23 19:00:26 2026 GMT
Not After : Jul 24 19:00:26 2026 GMT
Subject: CN=c88579a4068fcaf8423c85bac04c2500e14d7d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:8a:3a:ed:3a:f5:18:f5:5c:bc:c2:de:4a:
ff:97:87:4a:eb:ba:ae:92:ff:ca:98:29:bf:87:df:
22:3d:f2:93:24:33:8f:a3:0a:db:ba:28:08:70:d2:
5c:db:c8:bb:80:67:56:6b:6a:6b:c5:7d:13:81:fe:
d6:33:ad:9a:7e:3b:b0:df:cd:6f:b6:71:b6:a1:bd:
6b:ce:ad:57:c7:58:ef:a8:06:51:0e:b9:96:da:14:
57:0d:fa:55:74:b7:65:c0:d0:05:06:b2:29:2b:f7:
e0:59:db:f4:91:8b:8b:35:41:29:7f:b7:3c:15:e2:
6f:0a:29:28:41:79:ba:58:5d:05:ac:28:a2:de:ce:
28:2c:55:ba:ca:19:d4:f7:2e:97:97:7b:63:32:14:
14:07:2d:55:dd:7d:14:81:ff:6b:00:a0:75:b8:4c:
31:55:c2:db:9e:0f:7a:c6:f1:34:c3:f8:22:ac:8d:
91:56:db:aa:ad:b5:6b:b1:57:94:c9:d9:ba:7e:49:
92:69:db:4d:8a:94:1c:e6:ff:7e:61:8b:8b:52:f7:
8d:cb:e1:d5:c9:76:54:f4:9a:c4:c9:dc:ea:0e:7d:
f7:21:60:23:a8:cf:4e:17:59:b2:65:10:b6:04:86:
15:32:63:27:6c:26:09:f3:8b:4e:08:0b:bf:6b:3e:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:79:A4:06:8F:CA:F8:42:3C:85:BA:C0:4C:25:00:E1:4D:7D:22
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fe:b8:5c:ee:1c:b0:09:3a:3c:b0:05:3e:0f:f4:45:5a:f8:
fe:0c:8c:97:7a:b8:ea:d5:f0:ac:4e:67:80:f4:8f:dc:35:93:
46:7b:e2:9a:7d:af:37:eb:ea:5c:bd:8d:a2:8a:ff:a8:7e:51:
ab:ae:02:73:d2:0d:f9:8e:ab:95:47:25:92:7e:bb:74:6f:0f:
89:62:99:09:63:fd:ae:61:1f:f1:78:14:fc:f8:8e:54:ae:93:
60:c2:b9:8a:51:e6:7a:b7:9d:c1:21:b9:fd:fd:6c:d8:2a:08:
f0:0b:7c:08:53:8a:d6:5f:87:de:cd:38:f2:e8:49:ed:c6:ab:
9a:ef:72:29:64:d8:0b:a3:40:7f:ef:13:c4:8d:93:a0:c5:64:
3a:1c:b7:06:86:06:93:a7:3b:7a:8e:ac:d9:50:ad:2a:e8:a6:
3a:d2:d8:86:d7:2f:5e:a5:96:87:b3:fe:bc:08:de:e8:e6:20:
07:d8:ce:35:ca:35:e3:35:c7:78:5f:09:17:81:04:c3:fa:a1:
8a:54:5e:4e:f3:3f:11:3c:b9:4a:3a:e6:1a:48:51:35:9a:51:
fb:c9:3f:f9:76:55:2c:12:e6:aa:a9:01:36:48:a1:94:2e:fd:
cb:02:9f:a0:a8:fa:a7:b6:93:81:0b:14:7c:61:c7:8e:8a:aa:
62:ce:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:40 2026 by rpki-client