Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: YSN+X1WWZKuSn/bMmyRE1sVu6SBUheOWpKaKwFpQJuY=
Subject key identifier: 90:E0:F6:A2:7B:02:CD:CF:7A:7D:A0:C0:04:49:32:DD:67:45:2C:24
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019D38D3B124044CB54D7DD558AE1BB569A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0250
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: dPl8QN4QrQSiOLwY+CKH9QZExQfX4bSJmCdBaCgVivw=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b1:24:04:4c:b5:4d:7d:d5:58:ae:1b:b5:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=90e0f6a27b02cdcf7a7da0c0044932dd67452c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:ef:7b:a8:3a:1e:55:55:5b:a5:41:31:f9:
b6:ff:39:a7:73:c6:ef:15:bc:3c:a6:fa:15:8d:ff:
79:53:95:b9:4e:fb:1e:05:4f:74:29:15:9d:ee:52:
fa:99:1b:bc:f3:b8:e1:41:82:51:a5:f9:33:a5:5a:
37:45:a4:4f:94:47:dd:6d:43:6d:cc:e0:46:52:a1:
98:1e:bd:4f:c0:bf:d1:2f:ac:da:f8:03:a4:e9:0d:
44:66:ed:91:76:d9:15:04:a7:fc:4f:33:8e:f3:5b:
be:ce:c8:5b:e1:85:a5:65:78:1d:7e:6f:9e:ae:01:
01:cb:a1:bb:11:fa:7b:e6:5b:63:58:50:8e:f1:af:
41:20:cf:04:8b:52:98:4d:c7:81:92:dd:35:9c:ff:
94:e2:b7:46:2e:3c:0d:53:75:8d:e1:9b:76:13:c9:
b5:2c:ba:bd:b3:45:78:f6:3e:7d:37:75:90:7f:2d:
98:b7:f0:d7:a8:56:53:e8:0e:3e:48:a2:bd:0c:ee:
75:9d:0f:dc:72:48:bc:93:ec:cd:f3:70:30:df:fe:
df:23:9f:29:bc:30:a0:93:d2:8c:f7:f8:d6:9c:6e:
cd:8d:c8:80:99:d3:57:dc:07:d9:92:78:bb:5d:f3:
92:a2:21:02:b5:19:fd:0a:7f:79:82:83:85:cb:aa:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E0:F6:A2:7B:02:CD:CF:7A:7D:A0:C0:04:49:32:DD:67:45:2C:24
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:d0:66:38:e9:d8:d9:0b:90:dd:e7:1d:b5:60:04:01:2e:
1c:68:fa:95:68:a7:f9:c0:57:70:74:d8:6f:23:1f:24:ef:ab:
20:92:30:b2:14:8e:ed:fc:2b:96:78:90:0e:4b:3c:0f:af:16:
1c:fd:c3:96:dd:3a:71:8b:d7:3c:4e:60:29:4d:a8:3f:1e:b4:
d5:ee:33:39:ea:d5:f7:3d:15:f6:8a:f1:75:cd:f5:2e:85:92:
eb:5a:62:91:c2:ac:42:1d:86:c6:d2:29:35:a9:ea:b0:63:79:
8e:0c:33:53:dd:4a:1d:47:d2:44:2b:24:a8:e2:32:d3:6f:1d:
78:46:f4:4b:f6:64:f0:55:62:a5:7d:04:9c:f3:fa:39:e6:79:
84:19:03:45:9b:99:a3:75:ca:32:66:ba:d5:3b:a1:8a:f5:2c:
c4:13:e0:51:7b:7f:49:36:2a:41:77:2c:a1:21:92:fb:2a:84:
64:6b:bc:1b:fa:8d:c3:e8:34:ca:16:bf:22:8a:43:5d:c7:73:
ba:4e:75:67:60:e4:fd:2b:83:fe:2d:99:2e:58:8c:63:5d:f8:
58:0c:ff:1e:aa:44:a5:6d:3e:da:1b:d4:c0:c4:63:95:4b:5e:
cb:7f:a4:91:c3:cf:73:b7:46:5b:e6:d4:7b:5f:1e:af:d9:56:
09:7d:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:30 2026 by rpki-client