Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: GO/OS/cBlzn6h3BqIAm1bPK65PEH8EmW3rK7MZSl5Hs=
Subject key identifier: 33:1D:F5:61:25:A5:A5:6B:F6:0D:D6:74:A0:28:7C:59:CB:BA:EB:15
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 019E1E3557692FD66E366292C5B60BCEF424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 1327
Signing time: Tue 12 May 2026 22:01:12 +0000
Manifest this update: Tue 12 May 2026 22:01:12 +0000
Manifest next update: Wed 13 May 2026 22:01:12 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: MiD8Pjz87FyZnxQUrq1Z0RXe5LL6oA+FXylTnzW/VMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:57:69:2f:d6:6e:36:62:92:c5:b6:0b:ce:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: May 12 22:01:12 2026 GMT
Not After : May 13 22:01:12 2026 GMT
Subject: CN=331df56125a5a56bf60dd674a0287c59cbbaeb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:75:9c:33:d6:a8:ec:f6:9b:3d:28:2f:88:
30:d9:a3:21:2f:2f:43:79:ba:17:e8:26:92:3e:8b:
e2:ca:66:82:59:3c:09:fe:81:0b:00:ab:ce:ef:f8:
04:73:b9:22:19:0b:38:59:b8:5f:90:54:76:19:ed:
26:c5:04:b9:3f:c0:9f:cf:95:3b:ee:17:0a:ca:4b:
2c:1f:db:74:5e:a4:68:92:96:7b:3f:89:f5:7f:40:
d4:46:e0:55:d6:13:b2:f7:dc:14:65:cf:32:c8:95:
98:22:fb:4c:1c:02:27:6e:11:e7:cb:61:63:f9:c2:
68:40:4c:94:48:69:c6:bf:00:64:08:b2:25:7f:28:
b8:35:c8:c1:4b:18:df:0b:a2:73:0e:01:8e:be:9c:
18:30:b2:df:01:b9:40:be:78:40:40:c2:c2:3e:ec:
4b:7a:2d:f0:23:6e:b8:d2:de:48:5f:c0:36:e0:0f:
d5:b1:da:6d:e9:0b:c2:d6:ae:56:a5:25:e8:98:08:
f3:ed:d3:f7:3a:d1:19:82:47:ea:d3:48:01:d7:89:
6e:d7:24:1b:6e:0d:c8:ed:f3:21:f8:53:82:69:e9:
48:38:7a:8f:d9:df:c5:5f:52:44:08:b7:70:00:5d:
16:37:5d:c1:90:aa:34:98:44:83:f0:83:ab:91:1a:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1D:F5:61:25:A5:A5:6B:F6:0D:D6:74:A0:28:7C:59:CB:BA:EB:15
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:73:ac:5c:e8:b4:7b:61:7e:4c:b9:a9:5b:9a:bb:1d:28:35:
16:00:45:8e:6a:62:80:74:c2:d9:9d:0e:9f:97:4a:ef:f8:4a:
c3:f9:d3:56:9f:ef:44:95:5a:47:30:a2:cc:13:8b:42:84:0d:
2c:50:eb:91:e8:ad:39:d0:94:3e:21:5f:2b:05:d1:87:23:b4:
67:9c:96:85:7e:7e:64:39:76:d1:30:9b:15:3b:2a:37:90:43:
d9:cb:8f:86:ab:81:31:7e:60:17:fc:ba:6e:60:47:59:25:ce:
0c:79:c3:34:b4:5f:f4:a0:7e:ec:4d:7e:50:4c:51:f7:93:c6:
3b:bc:68:98:7c:2a:d2:1a:a1:56:f3:44:cd:b4:ab:18:92:33:
95:ed:3a:84:32:65:6f:ce:52:12:9d:65:5f:64:0c:5f:ad:d5:
81:13:92:7c:31:85:d9:9a:6a:ad:73:38:b0:8c:9f:a2:84:9f:
08:67:7b:18:cc:9d:30:6d:e8:23:ee:97:59:a3:ef:ec:dd:13:
af:54:3b:c4:de:fd:53:fe:1d:75:4e:5c:dd:a6:3d:85:7f:50:
9d:0f:7f:d4:9b:4e:5d:23:49:b5:15:c1:08:01:fc:78:f5:73:
63:cf:df:f1:9f:2e:6a:36:5d:a5:6b:46:55:24:8b:08:f4:ef:
97:ac:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:32 2026 by rpki-client