Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: /yaehqxV06VgbAqQC0859SWYHCANM68SRiAj4K/mQGg=
Subject key identifier: 96:8C:BC:28:41:12:CE:5D:99:AF:0F:BA:09:76:91:8D:21:19:91:68
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019E2A39A30FD5C144B1C3DC11448BC7B67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 02CD
Signing time: Fri 15 May 2026 06:01:20 +0000
Manifest this update: Fri 15 May 2026 06:01:20 +0000
Manifest next update: Sat 16 May 2026 06:01:20 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: 48ouhrUHJWxE9mMlXI61AT9cl4SeMemvmgg7gdVyeyA=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:a3:0f:d5:c1:44:b1:c3:dc:11:44:8b:c7:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: May 15 06:01:20 2026 GMT
Not After : May 16 06:01:20 2026 GMT
Subject: CN=968cbc284112ce5d99af0fba0976918d21199168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:57:ab:2b:b8:87:d4:50:dd:e4:4a:b1:d0:
e1:2b:f1:dd:7c:ee:d2:0d:0d:4c:1e:e7:68:87:3f:
e2:78:bd:4e:68:ec:8d:96:08:cc:4c:44:49:d2:ef:
fb:11:1d:2f:92:5f:09:9f:65:cb:a6:f7:af:8b:d3:
db:bd:ca:be:1a:04:4d:29:70:b2:28:38:b7:2c:94:
e7:07:bf:e8:16:20:56:9a:db:e5:a9:0e:62:93:90:
7f:01:7a:05:71:2e:16:dd:12:00:cd:15:fd:04:f4:
c7:4e:20:e9:fc:e1:dd:f7:fd:be:ca:a4:82:a4:d2:
4b:30:01:6e:6a:40:f7:45:9d:9a:e2:b0:fa:b3:26:
0a:40:f4:5e:83:4f:f4:e5:49:a1:67:94:d3:b3:3b:
02:88:ea:de:3d:56:b7:f3:37:c4:83:ce:b9:bd:92:
c7:17:b2:7c:d2:77:76:5e:16:fe:87:7a:d3:d8:d0:
2f:33:25:e1:ef:19:c7:59:63:6c:5d:c4:00:bb:6b:
5e:dc:c6:0c:86:5c:19:31:b1:1a:de:6e:28:33:d0:
0b:39:10:79:24:f0:51:d0:38:fc:03:8e:35:fc:d0:
83:84:c0:9a:8c:d1:33:ae:14:fe:fc:4d:5e:a2:ee:
eb:a6:1c:7c:5d:72:71:59:5a:7e:35:2f:5e:ff:2a:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:BC:28:41:12:CE:5D:99:AF:0F:BA:09:76:91:8D:21:19:91:68
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:80:a9:1e:9e:cc:3b:d2:86:ac:86:9b:f6:1c:9a:f9:80:
20:f0:23:16:cf:3e:74:b9:3b:cd:71:11:9c:6f:a3:bb:c2:96:
95:c8:58:0f:58:77:b8:83:ee:9d:50:df:c4:5d:20:dd:16:4b:
b6:b2:fa:1c:ab:aa:38:c9:a1:81:94:af:24:f8:91:e6:de:f7:
e2:b7:e3:c0:9b:54:87:6e:13:89:1e:99:a8:4c:a8:67:ff:36:
6e:7c:14:9a:61:b1:96:02:c7:8d:17:f9:00:cc:4e:b4:35:9f:
d8:37:78:68:7e:68:10:74:93:17:89:5c:44:02:22:f4:7b:b5:
63:79:bb:eb:f9:be:73:17:bf:f2:62:3c:f7:9b:c5:55:b0:67:
82:25:01:8c:1f:2a:da:5d:75:d1:60:de:66:cc:e6:6a:b3:db:
87:93:c3:7a:c3:81:0b:02:0c:4d:5a:c6:c4:f6:a7:ff:94:64:
07:cc:4e:d0:b3:7b:2b:70:c9:13:1b:ac:43:85:e9:41:8b:d3:
ef:a7:b5:da:05:20:a5:cc:8b:40:14:3e:11:b8:e8:98:df:b7:
83:43:96:55:17:e9:8d:9f:70:fb:5c:48:e1:e8:1b:7d:ee:9a:
fa:17:6b:92:cf:68:88:f3:92:8a:a8:4d:c4:ed:06:20:ed:a8:
ad:0a:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:04:13 2026 by rpki-client