Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: onbumw67ulucwgxgrFKu43SYl3ulhF4yJ+vUJ3YY4o0=
Subject key identifier: 34:56:21:93:E2:48:00:B6:32:96:EE:F7:6E:85:C1:40:4A:2C:3C:14
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 01A11B63CCDAF8FD0CA5CB175A7EC258B9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0453
Signing time: Thu 08 Oct 2026 12:01:27 +0000
Manifest this update: Thu 08 Oct 2026 12:01:27 +0000
Manifest next update: Fri 09 Oct 2026 12:01:27 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: FLJPDwc1+3JcegRPdnnJr+ygi3nxoJxqO4/QzVMoXvk=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:cc:da:f8:fd:0c:a5:cb:17:5a:7e:c2:58:b9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Oct 8 12:01:27 2026 GMT
Not After : Oct 9 12:01:27 2026 GMT
Subject: CN=34562193e24800b63296eef76e85c1404a2c3c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:89:a5:1d:80:35:70:d0:d5:36:58:a6:c1:
19:da:e1:d9:b1:ff:e8:64:8f:1d:db:d7:a2:ec:03:
40:dc:d6:d9:3d:45:21:cb:62:f5:55:71:05:b2:5c:
e9:a2:a4:51:1b:ae:5b:c4:f1:ad:f1:b8:42:83:ed:
52:cb:ec:5b:26:14:04:30:e0:fe:80:f6:a0:87:37:
5d:f9:5e:51:03:8a:ab:8b:f7:89:03:b4:da:82:9e:
09:1d:6a:a3:d7:8f:62:69:2e:bd:84:34:6e:d3:7f:
68:8a:c1:44:2d:0f:27:d4:04:ca:2d:7f:54:24:d0:
5e:64:58:1e:0c:52:d0:69:f7:7d:e6:62:31:dd:5a:
2d:3c:b4:53:94:1b:4e:d7:a8:58:3f:6c:69:7c:36:
8e:7b:c3:5e:5f:93:10:76:9a:63:02:f2:f9:98:45:
8d:19:b1:d8:62:2c:05:f5:e9:c2:93:f1:46:53:71:
de:50:ce:ac:06:d6:47:9c:65:ae:95:10:73:f2:08:
ba:59:66:87:8a:76:4d:50:a6:17:48:fe:7c:d7:56:
07:6a:f6:9f:35:e4:48:c1:62:1b:d8:5f:a5:dd:d7:
3c:0c:5a:7d:84:55:02:cc:ca:ff:a7:5e:04:ea:d1:
0a:07:ad:4c:1f:0d:c0:0e:11:e2:8b:e8:36:e8:a5:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:56:21:93:E2:48:00:B6:32:96:EE:F7:6E:85:C1:40:4A:2C:3C:14
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c9:72:4a:24:34:2a:81:71:fa:ce:ab:00:af:a7:60:49:ce:
9a:76:8f:7b:51:43:fe:3d:bd:6e:56:0e:e8:d2:f0:6d:6a:55:
9a:11:22:de:cb:7f:ec:8d:fe:01:c7:72:be:f2:36:f1:d8:57:
01:ae:5d:7b:2e:29:84:05:f7:50:bc:b3:da:02:72:77:ba:8c:
93:e9:e0:d5:2a:c5:62:19:5b:c0:66:f8:47:b5:bc:5c:81:5c:
20:00:53:c1:97:30:40:db:44:ab:60:d8:24:ee:6f:d1:76:84:
b4:d9:bc:e0:73:19:83:bf:29:36:51:06:92:9f:c8:b4:83:95:
19:80:3e:88:a3:83:22:4c:b1:80:4a:af:6a:45:0f:ef:ab:cb:
aa:86:43:7f:a7:cc:b2:23:e3:2b:6d:44:a7:f4:29:aa:e7:83:
04:28:dd:6f:13:72:fe:ed:16:3a:6c:68:19:91:bd:24:b4:22:
2a:26:41:4e:63:7d:c8:ba:fc:49:68:c2:2a:b2:e0:b8:23:30:
e3:24:40:fa:d7:14:da:88:1c:e3:a5:6b:45:ef:e4:23:cd:57:
48:b2:73:b3:8b:e8:ff:78:93:b9:60:96:44:17:9a:00:71:1b:
2c:f1:0e:42:ae:dd:1b:a5:c7:ed:47:3c:c8:37:45:7b:d3:1f:
4b:0e:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:16:41 2026 by rpki-client