Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: 4eD6eiOw4S+XxEvUq5woIDjE/OBSOH+JGaPikmmb3UM=
Subject key identifier: 32:C9:A6:F6:34:61:A7:B7:01:CD:45:A1:80:60:05:FD:CF:39:1F:81
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 019D2703E01304D0182354299A4E1C50FF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 12A7
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: tdFKm6CoPlUQhm0WALCMD/lw9Dz83SS3Mtbt7ZZv+eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e0:13:04:d0:18:23:54:29:9a:4e:1c:50:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=32c9a6f63461a7b701cd45a1806005fdcf391f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:79:63:1e:d5:32:59:e7:61:fd:90:ae:27:
66:4f:b0:fc:1c:85:b6:f2:f0:47:55:7f:b3:22:a7:
4a:c2:20:85:bb:78:68:16:67:bb:59:a9:a9:30:88:
f9:26:f6:5e:c3:dd:b7:3e:ee:89:e8:58:b5:b4:e5:
2f:dc:0d:83:2d:34:c5:f4:ff:b7:cd:c8:cf:4b:2e:
5d:0e:3c:93:d1:e8:4c:5a:e9:ba:4e:2e:3b:c5:eb:
fa:6f:b9:62:f8:88:18:31:7e:44:f3:ed:78:b1:da:
f0:c4:e4:79:bd:d6:c3:ec:cc:ac:46:fc:ec:31:ca:
a9:26:e6:28:df:ea:25:00:41:03:7f:d8:de:04:75:
a1:d1:bd:6b:65:d6:e0:9c:27:91:c8:99:43:06:61:
56:5b:e7:4b:95:f4:3b:03:d7:e4:5e:45:43:13:25:
9d:34:47:3e:d5:33:87:5e:99:86:db:e9:6a:76:9d:
f7:8e:f2:16:e7:48:dc:04:b4:5a:7e:90:9f:c0:71:
c9:10:e1:26:8e:72:a5:3e:1d:5f:5c:37:eb:eb:83:
7b:89:f7:8a:d1:3c:13:14:08:c4:14:56:0e:07:e3:
7e:34:8c:f2:79:16:aa:f5:d8:e3:9c:74:fd:9e:45:
6b:a8:5c:17:00:5c:19:da:37:ce:ee:60:e9:eb:82:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:A6:F6:34:61:A7:B7:01:CD:45:A1:80:60:05:FD:CF:39:1F:81
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ef:3c:0c:4c:18:b3:f7:81:66:99:71:f2:e3:2b:ae:8c:3a:
ab:da:12:d7:d7:8f:c9:3e:d2:7b:a8:ee:7d:b4:26:f9:1a:a8:
08:06:84:1d:d3:e2:68:ae:f3:44:d6:93:73:6a:db:76:3f:4e:
6e:65:4c:68:8f:15:ed:cf:8b:43:5b:d6:c3:fb:5b:d3:03:30:
a1:02:fa:02:ea:b2:bf:60:3f:f4:47:1f:91:87:ae:75:89:24:
50:89:60:2e:5c:3e:44:dd:9b:70:3c:80:2e:5a:fe:c9:40:e2:
9f:0c:6d:1c:84:07:9b:38:28:7c:9b:4c:34:50:00:5c:b6:7e:
ce:58:c5:51:8b:ce:cf:6e:ad:95:01:af:6f:e2:71:6b:86:67:
5f:b7:8c:01:c6:69:55:fb:1d:64:b7:ba:27:ff:e5:b3:57:55:
64:38:88:bd:19:9f:a1:e7:79:78:a9:fb:64:69:86:4b:6a:b3:
5b:bb:f1:9d:76:34:5f:6a:5a:2c:7b:a0:02:8e:b2:90:03:db:
93:24:6c:f8:3e:e4:04:96:41:a9:fa:22:1f:f3:19:65:b3:6e:
56:80:01:e3:78:c1:41:ba:16:dc:5b:8f:24:ce:67:46:42:82:
2e:ef:fb:a9:db:2a:3d:14:4c:17:04:22:34:f0:ae:37:28:5a:
98:48:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:27 2026 by rpki-client