Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: e0Pa4SJYrwbpDMoqGe96Bkdyl5ZoTddM79q9DUn+6aA=
Subject key identifier: 13:91:CA:39:5D:DF:6F:83:CD:05:5C:4F:03:2C:09:57:B9:26:5B:93
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 01A0D1C990381DB0B63BA65DF3BAEC044A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0B40
Signing time: Thu 24 Sep 2026 05:00:42 +0000
Manifest this update: Thu 24 Sep 2026 05:00:42 +0000
Manifest next update: Fri 25 Sep 2026 05:00:42 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: hu539k9iAxSIC9CAlIC81QRpaTtp2Ar5OLrJlxqc898=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:90:38:1d:b0:b6:3b:a6:5d:f3:ba:ec:04:4a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Sep 24 05:00:42 2026 GMT
Not After : Sep 25 05:00:42 2026 GMT
Subject: CN=1391ca395ddf6f83cd055c4f032c0957b9265b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:ae:49:ce:2b:94:af:cf:af:78:01:a6:89:
0e:5f:a0:e0:2f:09:0a:1c:a8:70:70:5d:59:0d:3c:
58:db:d3:38:3c:72:46:07:73:95:b7:63:ab:29:c4:
e0:42:9e:c4:6d:c1:ab:39:07:1e:1d:68:6a:fa:4f:
75:28:5f:71:ee:70:39:f9:07:5d:57:8c:cf:bc:d9:
09:0f:45:13:6d:76:8f:8d:28:7b:11:0f:fb:5a:f1:
6c:1b:29:4e:94:5b:54:f7:a6:76:3c:ed:6a:39:59:
60:c8:7a:37:15:d5:5c:81:c1:cc:ea:5c:63:02:e2:
8e:a9:a8:48:21:bc:1b:d3:15:94:5d:94:e3:48:a1:
7d:f8:97:d4:87:2b:88:80:e9:61:1e:08:96:d8:62:
41:9c:5b:ed:e0:29:4b:f9:6b:be:cd:40:9d:8b:1e:
36:59:41:37:9b:b1:e5:87:63:31:42:66:e6:b5:ca:
b6:0a:06:97:e5:a6:0d:d1:b5:a6:13:65:b0:a3:ad:
53:bd:65:8e:03:ed:55:dd:7c:75:0c:c6:7d:99:69:
55:47:85:de:2e:11:7e:72:bd:70:e2:d3:12:7a:60:
f2:4d:6e:7c:d0:4b:30:74:f9:87:66:3d:0e:81:1e:
ff:5c:10:81:3c:10:3e:c5:79:43:8b:7a:7f:2e:52:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:CA:39:5D:DF:6F:83:CD:05:5C:4F:03:2C:09:57:B9:26:5B:93
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d0:ad:59:1d:b8:66:cd:98:69:f5:84:28:7c:14:ed:4b:38:
62:b0:51:41:94:3a:f5:18:86:c2:5e:1d:8d:e3:71:4f:73:76:
72:7d:ae:7c:e4:9e:79:08:0d:a1:ff:2a:96:9b:81:46:33:de:
58:46:55:c6:f7:7b:12:bc:64:25:ea:d5:ae:3c:7b:da:e0:2b:
d3:57:e4:87:65:73:cc:0e:5c:90:0c:b6:de:70:86:7e:ab:98:
ad:a8:de:b9:7b:91:f7:17:15:d4:05:51:a4:58:1f:e6:e3:c5:
33:ef:04:5f:4b:96:2d:10:bb:6a:5e:41:94:51:03:69:2d:f8:
7c:5c:a5:9b:29:7f:dc:ce:30:f1:fe:a3:92:c7:79:33:95:12:
c3:db:70:a7:bc:f6:59:9b:5b:29:7a:32:b2:fa:c1:15:1b:9c:
b2:1f:ce:29:35:ae:7c:a2:d4:c4:8c:ba:9c:67:83:cf:bc:81:
2d:c9:6f:4e:78:b7:0a:e5:95:62:39:cb:75:55:f5:74:9c:ca:
94:0c:4c:98:51:a0:ae:17:ba:6f:d0:20:71:44:27:1a:35:0a:
35:6e:66:b8:7c:d4:56:57:83:41:3e:dd:2c:bf:87:f4:cf:f7:
23:cf:4a:71:a0:45:c9:75:90:ba:3d:1c:7c:c5:17:09:29:7c:
30:55:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:49:48 2026 by rpki-client