Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: lIpwK9CKII5MSOtxNpEshZv3Gvd1LGH/2N/YZ4oKSKs=
Subject key identifier: A9:1B:5C:84:F2:26:E0:85:E3:83:FE:59:BE:57:82:25:A3:E4:E7:F4
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 019D273AB5265913D92CC6F15D244D8965E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 1034
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: SCVVgQLPmmI0OYhgkirsGKqJcJBhodU2JgekGTHqRA8=)
2: WR4OdfiqbUtKRBxmNGOYuDODNhc.roa (hash: IOdXx78zFnzCoanUyK8Eoz2x7/BQu6nx+hj6sfA8gAo=)
3: a9jsfvYT5uq7cLphSIWekSBM3fE.roa (hash: UxRKV2mmyTATSKYXQyGpA4Zfu3X4aIXNncXJMaKZcRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b5:26:59:13:d9:2c:c6:f1:5d:24:4d:89:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=a91b5c84f226e085e383fe59be578225a3e4e7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:e7:9d:0e:6c:7e:de:64:39:94:dc:58:20:
fa:f5:61:86:c2:02:53:9b:3d:75:80:4b:77:e8:24:
e6:8d:04:a5:99:0a:cf:91:22:de:c9:fd:4f:27:50:
5c:63:af:86:90:4a:ca:6f:ea:16:ef:b6:e3:45:25:
04:d6:ae:86:93:77:70:0a:69:ce:d4:3e:de:99:47:
40:45:b1:79:91:a1:bc:ff:9f:7b:9f:b0:65:44:9b:
13:62:b8:c1:ee:67:96:41:26:c2:0e:32:53:ce:70:
cf:3e:50:a2:68:b4:e8:d4:f2:3e:02:62:b2:c8:11:
2b:ce:d4:d8:9d:f5:8c:c1:df:c7:9f:bd:c8:e8:16:
cc:88:ec:af:06:ec:80:d9:8c:fd:f9:36:6f:af:aa:
24:00:11:6e:0e:60:cb:76:7c:9e:a8:0b:3a:66:b9:
7a:fc:41:cb:1a:81:92:2b:c9:e9:53:7c:50:e3:c8:
2e:24:db:68:94:c6:cb:81:0e:12:50:1a:33:5b:5b:
3f:ac:b2:89:b3:92:6c:da:69:34:33:a2:09:5f:2e:
7b:05:4d:5a:25:d7:12:4a:23:1f:2c:43:0a:e8:54:
f9:cc:f9:fd:cb:f4:1f:c3:29:96:cb:3f:14:15:ea:
7c:02:aa:ef:c0:02:f7:c8:d1:ef:33:a3:34:77:a2:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:5C:84:F2:26:E0:85:E3:83:FE:59:BE:57:82:25:A3:E4:E7:F4
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:58:a7:9a:15:4d:a9:e3:f3:d8:c9:2e:12:f6:83:28:a3:e3:
40:5f:a7:f7:2d:10:c2:f8:5b:ab:e8:11:d5:2f:b6:d0:55:26:
1b:7a:c4:c7:bc:46:36:4d:c1:70:28:06:12:4e:95:76:95:23:
44:a8:0f:80:66:e6:f3:75:0f:72:bb:26:46:74:16:c1:06:56:
cc:a9:db:b2:9f:2d:ef:16:3e:80:95:ad:cb:e2:54:bd:94:a5:
4f:ff:5a:a2:5d:90:0c:59:3d:1b:ba:12:2d:e8:a4:42:f0:d8:
9f:9e:d3:34:a4:f4:99:81:99:6b:13:71:2d:01:ad:8d:b0:ef:
80:3d:cc:8c:92:80:d7:c3:d5:0c:9a:46:ae:6d:03:20:7a:32:
f4:75:6e:ef:82:c7:19:1f:75:f0:5a:ea:e9:20:aa:f0:41:9f:
ff:0d:d4:ef:9f:a7:02:dc:2b:30:00:58:a6:74:d9:0a:7f:ad:
7f:f9:03:2c:42:24:0a:d3:36:b7:3c:01:44:97:d6:b3:ec:3f:
f2:27:1d:e0:8e:cf:19:b3:9e:62:22:26:9a:bd:93:73:60:b9:
e8:16:2b:89:ec:34:ac:22:4d:37:8e:93:4b:5e:e6:83:6a:de:
ca:eb:94:3e:82:b4:38:ea:73:53:fa:69:cb:c6:4f:cb:93:b6:
09:0c:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:19 2026 by rpki-client