Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: JHcozsLrdsJVr9IRsmEPOkj6H2jKIgv/K7jKgcCDa4w=
Subject key identifier: 61:25:E5:B6:8B:29:8C:3C:6D:15:25:96:AD:25:A2:E3:6D:F7:39:D6
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 01A0CA0FDD1E01234BF15CCC2B13A304C41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0E05
Signing time: Tue 22 Sep 2026 17:00:32 +0000
Manifest this update: Tue 22 Sep 2026 17:00:32 +0000
Manifest next update: Wed 23 Sep 2026 17:00:32 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: pltm9EqJEv/BycHMJc/r8UxuUbS4wnyOfE79W2s8IGI=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:dd:1e:01:23:4b:f1:5c:cc:2b:13:a3:04:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Sep 22 17:00:32 2026 GMT
Not After : Sep 23 17:00:32 2026 GMT
Subject: CN=6125e5b68b298c3c6d152596ad25a2e36df739d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:10:1e:3e:3d:14:17:c3:80:70:62:11:fc:
e7:4d:8e:c8:c4:b9:d5:81:1f:14:d5:16:12:e7:d4:
9e:51:e3:3b:16:54:1c:0c:52:f8:85:a3:69:0e:d2:
56:27:25:9e:c0:cd:7d:48:5e:36:90:3f:30:49:2b:
60:43:59:60:29:56:11:19:19:e9:84:0f:ec:f5:11:
e4:1c:62:71:92:ec:c6:9d:99:cd:a0:20:d4:97:ad:
ce:07:01:0c:e6:9c:50:67:11:45:eb:98:3d:f7:26:
9e:3f:a7:db:dd:79:4b:ff:40:a5:0a:9b:db:cd:61:
4d:65:1e:5c:a3:51:e3:e0:85:3e:17:a3:01:b6:0a:
ae:01:75:ba:e5:7f:8e:c8:2b:63:0c:89:02:98:31:
87:98:08:25:97:9a:8f:a7:aa:61:9e:aa:55:85:a8:
c5:3d:71:50:b2:85:fa:cb:71:45:41:9d:69:7f:6d:
59:c4:fc:6a:b8:58:29:ea:5b:27:02:d8:d9:d0:2b:
b6:cc:ed:9b:d5:2f:a9:01:38:50:e1:7d:ad:a2:74:
05:65:d5:5d:c3:19:99:18:36:47:28:45:4e:af:86:
cd:70:af:f0:b5:a6:73:b0:8b:41:09:6a:70:1f:b8:
db:33:22:87:cb:48:d3:0f:03:c1:86:eb:83:32:88:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:E5:B6:8B:29:8C:3C:6D:15:25:96:AD:25:A2:E3:6D:F7:39:D6
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1d:2d:87:a6:b9:c9:d9:2c:06:71:c8:ba:e5:da:79:ef:09:
9f:84:ec:d5:78:64:d6:09:9f:9d:93:cd:64:13:63:65:6e:b8:
45:6c:cd:7b:7b:f7:cd:4e:2d:03:70:23:cd:8f:e0:1e:94:32:
27:38:05:d7:2c:f6:56:0c:57:39:fc:a2:93:27:22:cb:37:4b:
98:a9:40:9b:18:83:16:1e:a8:26:64:39:6f:c9:fa:d2:c8:c6:
cf:ab:90:27:99:42:6f:14:bf:2a:a5:0a:62:6c:7f:b6:f0:13:
ad:b0:35:a2:f5:85:34:29:fc:99:f1:65:19:2e:1c:36:01:bf:
2b:97:83:5e:5b:d2:15:fb:80:2f:44:d5:55:dc:f7:d7:86:29:
de:1d:2a:1d:16:d3:9c:33:6b:38:35:ee:66:8a:0a:5a:9d:3c:
0d:1c:5e:37:ac:c9:a8:ba:a2:a8:18:0a:a9:9b:02:ea:55:d8:
cd:1d:c7:28:0e:3c:f0:32:50:a2:a1:49:ca:37:5a:6c:09:ed:
01:2e:82:81:76:c9:b3:49:c2:29:92:32:42:a8:85:5f:0e:8a:
8a:56:e3:f6:dd:b5:b5:60:86:37:06:78:3f:85:3f:f0:86:77:
d3:c8:b8:06:8a:ff:3e:5a:1b:96:62:57:fe:6d:3e:c5:70:21:
e0:f4:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:52:32 2026 by rpki-client