Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: zXmAHFmdTG+bs+4gxZuZuoAoCK/Y5pH339S2jZEcyOU=
Subject key identifier: EF:E7:45:F4:4E:60:35:49:C5:2E:C7:F4:26:C6:D9:DA:EF:41:AD:7A
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 01A0E250B2727FA303D3F343056D50314364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 1628
Signing time: Sun 27 Sep 2026 10:02:14 +0000
Manifest this update: Sun 27 Sep 2026 10:02:14 +0000
Manifest next update: Mon 28 Sep 2026 10:02:14 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: GvCNndpv35Mx1ctjIDJmQMOvtBKwDkv75kGW9dZ2y6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:b2:72:7f:a3:03:d3:f3:43:05:6d:50:31:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Sep 27 10:02:14 2026 GMT
Not After : Sep 28 10:02:14 2026 GMT
Subject: CN=efe745f44e603549c52ec7f426c6d9daef41ad7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:e0:1a:c9:cd:e4:a7:3d:1f:d7:96:7a:39:
d3:f7:f6:1b:5e:3d:8d:0f:2e:d2:af:28:35:75:34:
34:f9:7d:60:15:b0:10:76:a7:7c:53:cc:41:ec:3b:
41:90:20:5e:64:ea:3e:4a:10:88:ae:9e:7a:40:33:
f7:ac:a9:9e:3b:e5:24:e9:54:ba:d8:85:9a:b2:c5:
85:d5:19:4d:3c:8e:8d:82:09:ee:62:d6:59:3b:3b:
a3:cc:ba:81:59:d6:9d:a8:67:ed:36:7a:86:2c:ab:
7e:92:13:2d:4a:b3:50:db:79:de:28:89:e7:3b:5f:
46:d6:3f:29:90:0d:23:a7:78:9a:ca:a3:4a:89:29:
76:de:20:f4:4f:42:17:12:e9:9a:b3:71:f8:fa:8a:
c5:aa:86:31:3b:23:3f:40:61:20:13:a6:d5:d8:b7:
d3:82:cd:c2:97:4f:37:81:0c:16:52:ef:fe:b1:b8:
11:39:ae:cb:12:38:78:32:0a:aa:ce:ab:fc:b7:cd:
0b:de:7f:bd:b1:fb:12:ef:3a:27:0e:28:52:00:14:
2e:6b:c1:6b:d1:f4:2b:90:be:55:de:cc:9e:7a:00:
db:e1:e4:ed:3b:fb:be:69:df:b9:0f:48:79:3b:ef:
62:5d:f5:4e:a8:27:bb:de:7c:fd:fa:c8:32:36:9d:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:45:F4:4E:60:35:49:C5:2E:C7:F4:26:C6:D9:DA:EF:41:AD:7A
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:3c:bb:3e:ce:79:7a:99:39:3b:3c:0c:61:8d:11:ab:42:
70:3e:de:35:9d:b7:3c:8c:45:07:cb:1e:35:f1:29:af:df:1a:
7a:cd:a0:d9:42:9f:47:16:83:fd:c0:fe:c4:6f:7b:82:f1:03:
21:b5:fa:d7:a8:0d:c9:34:dc:8e:a0:50:3c:39:a4:af:ed:4f:
5e:12:af:fa:90:c6:ff:2e:ca:04:a9:16:b3:8e:d8:19:dd:a6:
aa:a6:37:eb:71:81:2d:29:22:fc:8c:34:af:4e:26:7e:60:ff:
27:49:f5:44:38:84:89:7f:78:d9:c8:89:92:1d:63:00:3e:f8:
b6:97:7e:8d:ea:6a:3f:56:18:9f:56:96:ba:3a:f3:88:ec:aa:
a8:31:17:16:3f:11:8e:d2:41:ad:2d:46:0b:ab:6f:ca:36:5f:
53:73:4d:f2:80:22:05:e4:82:4d:00:35:7b:ff:c2:1d:74:70:
a0:f0:34:12:38:69:c4:bd:bd:44:e6:cb:b6:5c:f3:2c:0d:37:
84:ed:6d:33:25:17:9d:5a:f8:96:bc:07:24:87:fd:4b:5f:10:
f0:70:90:61:a9:50:82:11:72:7e:ad:15:11:bc:ce:79:f7:03:
2a:1d:62:ad:af:f6:b0:0b:78:13:de:bc:a7:39:fe:46:27:8c:
c8:90:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:14:43 2026 by rpki-client