
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: 0qWKw7oLrYnY5+f1WkyiFFFYmDZGuWfWhzHtL1jg8D8=
Subject key identifier: B8:00:5D:95:65:71:3D:97:E4:68:FA:24:63:FA:D5:43:5C:C4:78:A2
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019E1C7DD4132B97708E895680CEBED83847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 09D9
Signing time: Tue 12 May 2026 14:01:08 +0000
Manifest this update: Tue 12 May 2026 14:01:08 +0000
Manifest next update: Wed 13 May 2026 14:01:08 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: M8xcb3uHlvCkkHFCDv3QOMEJuCWbQDU2wMlOlDASnz4=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:d4:13:2b:97:70:8e:89:56:80:ce:be:d8:38:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: May 12 14:01:08 2026 GMT
Not After : May 13 14:01:08 2026 GMT
Subject: CN=b8005d9565713d97e468fa2463fad5435cc478a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:c6:d1:cf:cf:b0:05:76:3b:f1:9e:fc:c3:
6d:4e:9d:7d:32:ae:72:14:93:e9:69:d5:41:8f:00:
e3:70:45:22:86:f1:fd:bb:42:32:2c:87:63:a6:a9:
62:ae:a6:f4:5e:ad:26:67:6b:11:be:23:38:d2:cf:
04:70:7e:ae:ad:56:a3:fc:f5:9b:de:08:f5:0b:aa:
96:1b:48:99:ed:e7:99:81:82:1d:73:9c:57:ca:da:
ca:64:9d:11:3e:a0:d4:8c:42:41:20:32:6e:c9:98:
9b:d2:34:3f:10:78:e3:69:5d:98:c3:de:f5:08:d5:
e0:60:9e:8d:bc:09:7f:18:59:c8:4d:2e:b8:79:2f:
0b:f2:98:9e:53:84:a0:60:4d:dd:c3:4e:5b:07:7d:
a4:bf:dc:90:b2:09:18:6f:aa:3b:8e:a3:69:3d:05:
4f:aa:13:c2:d7:6c:0d:f9:72:a0:20:c2:54:c9:5e:
a5:ed:39:e7:15:5b:ef:bc:49:bd:5f:9a:ff:9f:0a:
c0:a4:b1:a7:f8:7c:0c:a3:f4:70:43:c2:0c:c8:e7:
81:02:81:6d:f9:83:46:d1:04:2f:8e:b4:1d:e9:74:
34:e9:3b:88:6b:19:8f:0c:80:83:7b:a4:be:47:2d:
08:c2:7c:11:42:25:f7:16:18:2f:fe:b8:ac:2e:25:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:5D:95:65:71:3D:97:E4:68:FA:24:63:FA:D5:43:5C:C4:78:A2
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:d8:a5:9d:72:3f:4e:e3:2d:7c:13:8c:88:af:81:6c:11:
b2:0a:eb:de:ac:f4:a3:14:a7:12:3c:f1:42:83:80:f1:9e:4c:
7c:26:50:b1:e8:79:5b:0d:f7:23:96:0f:c6:51:12:0f:0b:19:
d6:73:90:1c:78:8c:60:b7:63:8f:65:06:88:0f:cf:25:2f:9f:
28:7c:e4:45:c9:69:b7:0d:fa:fc:1f:d1:4a:33:2e:aa:f1:6d:
16:49:16:a0:37:f5:f9:74:33:5e:97:69:38:64:ee:aa:72:a5:
9b:ff:d5:bf:18:ab:5b:58:8c:d4:92:0b:89:31:5f:65:b7:61:
c2:fa:e7:f8:88:ca:01:e0:d4:28:08:14:e0:07:ca:2c:f1:4f:
cb:19:26:67:ec:4a:bc:23:07:a9:53:65:ec:44:74:00:16:d3:
53:cc:15:42:c8:9e:21:2b:4d:5b:a7:7b:0b:6e:82:fe:f2:16:
28:61:98:84:f8:ea:22:e2:a7:6a:7b:30:b0:a0:21:f4:2b:eb:
87:7f:38:0b:04:54:58:68:69:a6:f7:55:0f:cb:44:37:ee:30:
44:bf:fe:f6:88:59:03:ee:f9:79:9f:d5:f8:82:58:66:dc:85:
1c:74:41:32:9d:35:a0:ea:45:a8:5c:b5:75:72:a6:f0:ee:1d:
4b:ae:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:13 2026 by rpki-client