Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: jHMDfMLCeQdH2W7cMwrSWqogxS8yebavaGv/KZBPSgY=
Subject key identifier: 27:78:FB:AD:98:9E:CF:00:94:25:D4:D9:9B:CB:64:AD:DA:ED:47:CE
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019D273AB96E91E34932D6C6B0193ED44B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 095A
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: PBvBV8++KMa8IeD/+8/nWNYdT3TAUVTeIZPnS8dSFZU=)
2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b9:6e:91:e3:49:32:d6:c6:b0:19:3e:d4:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=2778fbad989ecf009425d4d99bcb64addaed47ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:50:f9:1d:bb:65:d5:1b:68:b1:5c:10:7b:
25:33:6e:1a:5f:8b:d4:7f:f3:fb:36:97:87:f3:69:
26:8c:ad:87:bc:e9:ca:3e:36:a4:f2:45:fe:16:8e:
cc:60:5b:7c:62:3e:c0:ec:d2:ab:b4:31:ee:24:3a:
e2:e7:b7:31:85:36:02:64:3a:a4:66:4a:b5:07:04:
86:a6:a9:46:e3:e0:d4:1e:bc:4c:94:47:71:81:e2:
dc:29:76:82:a9:72:73:0a:45:8c:06:b6:92:51:26:
70:c1:be:74:1e:10:ff:30:4f:eb:3c:8a:17:02:78:
00:59:e2:e1:49:8f:5f:83:52:9c:c9:5f:9f:71:8e:
10:39:46:69:2b:84:10:8b:ec:54:56:41:28:6f:db:
26:b3:ae:5c:3e:7e:f4:f6:f4:fd:0e:ea:9e:68:94:
33:72:53:cf:ba:22:e8:85:ec:e1:37:cd:e5:8b:c3:
5f:3e:f4:44:b3:eb:aa:66:17:d3:b9:9f:30:3e:2e:
86:fd:78:a9:b3:d2:52:30:65:06:17:42:b5:51:1a:
dd:d0:a1:86:38:7f:c3:bc:4e:79:b9:6b:f6:e7:29:
19:f2:96:0e:73:80:e9:02:37:cf:73:1b:04:b7:fc:
21:c7:9e:88:12:66:b1:e0:66:49:3b:0d:52:ca:07:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:FB:AD:98:9E:CF:00:94:25:D4:D9:9B:CB:64:AD:DA:ED:47:CE
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:09:52:d0:ee:e3:1c:56:43:e3:a0:60:31:dd:fe:56:19:99:
6e:ac:ba:c1:e3:f0:f7:55:d4:67:cf:4e:42:7e:eb:7d:85:1d:
c7:d4:80:33:19:93:d7:e6:b7:25:40:85:c0:5a:d8:20:95:89:
9f:d9:a0:b9:c2:85:05:10:0d:10:59:12:4c:e6:78:3e:62:56:
19:1a:b9:4d:15:c5:a3:ed:4c:32:19:15:a0:c2:79:32:ff:00:
45:81:27:42:f2:6a:2b:9b:7d:1e:19:40:e6:3f:55:94:71:15:
f3:f9:17:a8:7a:bf:47:98:96:fe:75:6f:8f:bf:c5:5d:36:50:
f9:db:c8:c1:bf:bd:6e:04:99:18:9a:61:d7:0a:60:ef:34:e9:
6a:87:0e:83:3e:ef:89:0d:87:42:92:46:8f:fe:27:ff:49:54:
ef:79:e0:ae:bd:d2:14:cd:44:68:5d:7a:49:d3:45:92:8b:d9:
ee:e1:68:66:e1:6d:17:ed:f4:a0:c7:8e:81:27:d6:64:99:fa:
d5:c5:60:3f:2e:e8:0c:b8:ea:e8:83:a2:84:c0:2e:48:4d:df:
46:67:1c:22:50:e0:1c:7c:01:38:20:02:7b:0c:d5:c9:3b:84:
2e:2f:dc:c1:a5:c6:91:c0:b6:07:48:42:57:3b:ab:64:ed:90:
a1:5c:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:57 2026 by rpki-client