Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: 2/xXhy43MEaZRgpTuqMiuM5KszRIRufGYwjrFOYCSZw=
Subject key identifier: FA:F5:3B:2C:D0:E3:8D:1A:C2:0C:FA:E7:64:99:22:0D:B0:4D:55:DB
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 019F8F479818DE7088FEE6C5B4583D08E74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0D62
Signing time: Thu 23 Jul 2026 14:01:01 +0000
Manifest this update: Thu 23 Jul 2026 14:01:01 +0000
Manifest next update: Fri 24 Jul 2026 14:01:01 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: 8l6P1ysusH7HNpnrbN3eSJkNjyejtkcJj3BLplgbx4g=)
2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:98:18:de:70:88:fe:e6:c5:b4:58:3d:08:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Jul 23 14:01:01 2026 GMT
Not After : Jul 24 14:01:01 2026 GMT
Subject: CN=faf53b2cd0e38d1ac20cfae76499220db04d55db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:52:d7:cb:94:c1:04:54:74:0a:05:fc:08:
b7:a5:4a:41:58:3e:b8:bb:0f:13:41:ce:c7:43:c5:
c1:97:ad:c4:80:d4:2a:e8:ae:15:78:09:ae:47:34:
f8:57:ea:ad:4f:65:c2:d9:21:35:56:79:06:a7:bf:
30:da:b7:11:be:d0:c2:13:f9:58:15:50:8e:35:7f:
bd:67:93:3a:d3:ce:48:4a:bc:40:2a:cc:d8:c0:1d:
de:de:47:fa:de:7b:f6:0b:af:6e:e2:0e:b1:a2:44:
2f:8a:bc:22:80:31:c5:be:2f:cc:f3:3a:41:b8:1c:
78:4b:ec:f1:4f:97:11:4d:7d:b5:f5:e8:0a:7f:6d:
95:00:57:81:cb:86:ab:bd:03:78:6c:9b:5b:36:bd:
0b:fc:ab:d2:30:8a:28:53:db:5d:22:1f:bb:5b:45:
3b:4c:74:b7:bd:d4:7b:70:e0:05:2d:ed:cb:62:72:
3a:7f:4a:6a:d0:c1:46:67:fc:d9:8a:58:36:58:bc:
3b:b8:e8:57:4d:a3:7a:37:63:4b:e4:06:32:b6:f7:
e8:6c:eb:7b:0e:29:c2:22:66:89:22:bf:ac:45:4e:
61:b5:73:3a:d1:55:cc:d5:3a:ba:42:22:3f:73:31:
71:79:0d:97:9a:e5:b5:bb:01:4b:e3:6f:71:e1:c6:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:3B:2C:D0:E3:8D:1A:C2:0C:FA:E7:64:99:22:0D:B0:4D:55:DB
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:38:f6:73:88:f3:4d:5e:36:9d:e9:9b:de:5d:4c:55:4c:
d2:5c:ea:07:e3:b4:82:af:b7:ee:d5:bd:13:58:7f:00:25:03:
56:52:db:7d:33:55:e9:f7:6e:d1:f4:e8:ef:82:19:27:24:42:
59:dc:c5:d6:b1:5d:03:92:45:3d:6e:a1:c8:7c:78:bb:a9:33:
15:e2:26:d8:77:ee:ac:5e:b1:9c:f5:8a:94:34:6d:8e:28:ff:
52:3c:dc:99:78:48:ee:1b:e6:fe:82:a1:00:4e:7d:c6:bb:89:
2b:53:3c:d2:25:9a:c2:5b:eb:cb:f6:84:f6:26:30:94:bc:9d:
29:35:6e:79:16:7d:35:0e:b4:c4:89:97:1e:98:82:c6:5a:7f:
db:5c:a4:89:82:4c:bb:3e:a3:6f:8e:c8:cf:c8:19:09:7a:f0:
14:ca:f7:91:fa:c4:cb:ee:a3:3f:57:bf:e3:b6:74:50:81:61:
3f:51:0b:dc:a0:f5:fb:ca:b5:14:0f:a7:c2:bf:b4:2e:4c:65:
fc:6a:9b:42:4e:cb:4e:4f:fd:bf:99:fe:e6:31:c3:c8:55:eb:
4d:ee:09:75:aa:67:d1:e8:74:1f:cc:ff:62:2e:4d:70:a9:8b:
c9:02:52:3b:18:0b:d5:bc:95:d5:1c:ae:1a:5c:fc:2a:fc:11:
92:e0:a9:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR5gY3nCI/ubFtFg9COdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjE0M2Y2NGQ1MTBiYTMxMjk3Y2JhZTU2ODJmZDQxYjJj
ODExOTYwHhcNMjYwNzIzMTQwMTAxWhcNMjYwNzI0MTQwMTAxWjAzMTEwLwYDVQQD
EyhmYWY1M2IyY2QwZTM4ZDFhYzIwY2ZhZTc2NDk5MjIwZGIwNGQ1NWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDRS18uUwQRUdAoF/Ai3pUpBWD64
uw8TQc7HQ8XBl63EgNQq6K4VeAmuRzT4V+qtT2XC2SE1VnkGp78w2rcRvtDCE/lY
FVCONX+9Z5M6085ISrxAKszYwB3e3kf63nv2C69u4g6xokQvirwigDHFvi/M8zpB
uBx4S+zxT5cRTX219egKf22VAFeBy4arvQN4bJtbNr0L/KvSMIooU9tdIh+7W0U7
THS3vdR7cOAFLe3LYnI6f0pq0MFGZ/zZilg2WLw7uOhXTaN6N2NL5AYytvfobOt7
DinCImaJIr+sRU5htXM60VXM1Tq6QiI/czFxeQ2XmuW1uwFL429x4cZOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr1OyzQ440awgz652SZIg2wTVXbMB8GA1UdIwQY
MBaAFPexQ/ZNUQujEpfLrlaC/UGyyBGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTJkOWQtMjFhOC00NTIyLTk3ZGUt
MGZiZTJkZTA2MzZkLzEvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTJkOWQtMjFhOC00NTIyLTk3ZGUtMGZiZTJkZTA2MzZk
LzEvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq849nOI
801eNp3pm95dTFVM0lzqB+O0gq+37tW9E1h/ACUDVlLbfTNV6fdu0fTo74IZJyRC
WdzF1rFdA5JFPW6hyHx4u6kzFeIm2HfurF6xnPWKlDRtjij/UjzcmXhI7hvm/oKh
AE59xruJK1M80iWawlvry/aE9iYwlLydKTVueRZ9NQ60xImXHpiCxlp/21ykiYJM
uz6jb47Iz8gZCXrwFMr3kfrEy+6jP1e/47Z0UIFhP1EL3KD1+8q1FA+nwr+0Lkxl
/GqbQk7LTk/9v5n+5jHDyFXrTe4Jdapn0eh0H8z/Yi5NcKmLyQJSOxgL1byV1Ryu
Glz8KvwRkuCpsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:40 2026 by rpki-client