Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier: tEA1/9Ozw+Whlp4PakIbycZlUm5BsATXRfPk0yg3U7E=
Subject key identifier: F8:95:22:E8:39:77:8E:64:9B:FD:0A:5A:1B:6F:06:49:29:AE:9C:4F
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial: 019D25BA85D5D43DFB367E7B9CC038986008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number: 057B
Signing time: Wed 25 Mar 2026 16:01:13 +0000
Manifest this update: Wed 25 Mar 2026 16:01:13 +0000
Manifest next update: Thu 26 Mar 2026 16:01:13 +0000
Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: RFM+B7mPFQ41mDXgPLHwBy0iz1160pY4FPjarhOnvvo=)
2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:85:d5:d4:3d:fb:36:7e:7b:9c:c0:38:98:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
Validity
Not Before: Mar 25 16:01:13 2026 GMT
Not After : Mar 26 16:01:13 2026 GMT
Subject: CN=f89522e839778e649bfd0a5a1b6f064929ae9c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:d7:f9:9a:97:72:ec:6e:0c:0b:b7:a5:40:
67:0d:61:03:a8:ea:ce:7d:72:2e:3f:60:fa:b1:e7:
a8:6e:ad:9e:94:7f:39:4d:3c:d9:03:4b:5d:26:f8:
cd:76:5a:1b:b7:54:b9:53:4e:47:3e:4e:9d:df:db:
99:ae:78:8a:33:25:99:84:ab:63:1a:cd:aa:4a:1e:
69:fd:a0:b8:77:2c:a4:0f:ff:8d:3e:51:c6:26:31:
fe:75:b3:5a:e7:59:3a:66:ff:ed:4c:7c:73:c6:9d:
e0:17:ba:68:1c:3c:f8:0c:63:cd:be:95:e5:0b:db:
e9:37:36:31:7a:eb:ac:cc:9f:39:bb:51:cf:1f:0f:
31:82:9a:fe:e8:69:b2:71:2c:c5:3b:cf:ed:03:9f:
e2:85:2d:d9:d1:e1:07:65:2b:45:bb:3c:75:eb:a2:
99:46:5f:3d:e4:33:13:f5:cc:b0:96:f7:aa:72:92:
58:43:8a:80:ce:06:98:4d:ab:f3:24:97:1e:18:9b:
8f:9c:b6:9f:70:03:7c:a4:d8:c3:11:e9:0d:cf:40:
de:69:54:cc:a7:43:e3:ff:bc:5c:f0:6b:7d:d2:c4:
cc:b6:7b:63:07:63:34:00:69:09:69:f9:35:7d:2e:
5e:1b:fe:fb:bd:da:96:58:9f:ed:41:cf:f6:46:af:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:22:E8:39:77:8E:64:9B:FD:0A:5A:1B:6F:06:49:29:AE:9C:4F
X509v3 Authority Key Identifier:
keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3a:67:e1:ef:c7:2d:ce:69:75:e0:0f:70:8e:44:5e:81:f1:
ca:13:de:24:7e:0d:fa:4f:10:d4:2c:25:ed:10:ed:e0:4c:8f:
b6:d8:9a:78:cb:5c:db:82:49:6d:c5:ba:55:c4:ea:82:2e:c1:
91:77:43:c9:20:81:7a:5f:cf:62:6a:96:fa:13:17:36:5e:88:
4d:26:6d:42:e1:bf:1d:f9:c8:26:34:56:1f:90:b1:83:39:4e:
0d:57:21:4b:68:e1:4f:08:57:2b:56:60:7d:b4:36:9c:ef:a0:
a1:e4:1b:0e:c5:98:0f:e6:15:0c:51:fc:13:6e:97:df:ff:bb:
6f:7a:f7:de:07:57:8a:ed:06:5e:f5:4b:e1:83:f7:a8:d6:0e:
83:cd:c5:83:1f:82:5b:d9:7f:3b:76:eb:c6:96:54:5b:37:04:
8c:5d:dd:7f:2e:ba:c5:5a:f6:26:c5:7c:45:1b:2e:f8:6a:f8:
de:1a:4c:54:2b:d3:c2:50:26:19:58:e7:48:b4:9a:95:48:63:
11:47:49:5f:a5:30:71:e0:b7:c4:27:e6:ad:83:9a:d5:08:6a:
40:4b:cc:45:7f:c3:40:ce:57:c7:96:4e:e8:67:c3:fd:98:39:
59:14:d9:b5:1d:fd:97:9f:28:3b:e5:5f:9b:31:c3:33:52:b9:
6d:e9:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:07 2026 by rpki-client