Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: U4W2pty1QN/f13en4m+DHbsN0dxP7eMCGaEurgVMbmc=
Subject key identifier: BF:5F:06:6F:12:8D:79:00:95:7A:69:E3:91:1B:BD:2E:FF:67:26:53
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019D37F702ED1D958BB9DA4A73F446D57BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 077D
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (hash: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: SMSwfWC31ZQiPjc3L/RoPlGoccVEFCcGDTkhTJtEPFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:02:ed:1d:95:8b:b9:da:4a:73:f4:46:d5:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=bf5f066f128d7900957a69e3911bbd2eff672653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:38:7f:36:2e:13:0f:df:1c:4f:c2:fd:6b:
36:f7:e2:49:da:e0:84:41:61:b4:f6:f2:04:95:b9:
2b:f0:59:e3:53:c5:1a:8d:08:25:34:8e:40:48:8c:
fd:c4:5b:08:77:cc:a7:c6:6f:b5:40:74:bc:c4:dd:
01:e9:7e:fc:5c:a3:9b:c7:2c:be:26:0f:8a:88:5b:
a5:15:26:fe:37:8b:ca:6c:cb:11:11:0f:3d:82:1f:
ee:c6:21:a9:d7:83:02:d0:ca:3e:78:a0:6f:0e:38:
83:77:49:8e:89:81:ad:dd:33:7e:7e:7d:e5:ae:6f:
f3:2a:db:3f:bf:f2:38:3f:f4:e3:98:a6:c5:1b:a1:
1c:67:ea:7a:aa:4c:86:10:77:19:e9:6b:58:0f:b8:
2b:02:d7:b9:94:08:e9:c7:60:41:94:b7:30:4a:ea:
53:e0:16:70:fd:89:4c:e4:e5:5b:53:fb:a5:0d:13:
48:2c:2d:95:a0:06:7c:f5:e7:e5:66:43:af:55:38:
85:4a:58:70:ec:16:b7:2b:ac:28:24:38:c6:8d:b9:
8e:57:f6:49:eb:63:32:d0:71:2f:47:21:5b:35:4e:
0a:03:0e:9b:a8:1f:80:8b:c2:cf:42:c1:11:32:b0:
62:e7:9c:fb:79:cb:4b:59:d1:4d:46:07:eb:4c:dc:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:06:6F:12:8D:79:00:95:7A:69:E3:91:1B:BD:2E:FF:67:26:53
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:83:59:11:d3:59:ed:9f:5f:f6:0c:ec:a0:47:bc:e6:8c:
0d:b2:60:ff:c7:21:d6:3b:89:62:a5:6b:40:16:3e:89:be:8f:
47:7c:41:2a:1d:23:53:ac:03:8d:c3:94:e1:44:f5:f8:1d:2e:
a1:c2:d6:e6:64:09:9c:83:c8:c6:2c:92:68:11:bf:34:dd:c0:
92:d9:01:b1:d5:04:3c:1c:9e:a5:b2:46:14:45:4d:4d:26:94:
8d:77:ea:24:07:d3:27:c9:07:f7:b4:a5:86:51:3c:b9:b7:9f:
3f:87:75:91:e6:aa:3c:4a:48:58:6b:df:f7:cd:7c:28:40:31:
19:a1:82:19:3b:8a:b9:d1:95:5e:8b:4a:90:e3:15:f0:09:f5:
a9:bd:30:d6:41:30:61:86:c8:74:2d:40:d4:7d:fe:6e:cb:90:
9c:17:35:65:ca:c6:6e:77:a9:a8:7f:3a:68:b0:92:75:98:54:
af:1e:db:31:87:c2:c1:f1:08:94:85:26:4a:88:e5:b0:67:1f:
89:87:ca:21:e1:9b:a9:cc:c2:d8:3a:2f:af:9a:b6:f2:d7:f1:
8e:00:bd:8a:90:d3:19:03:aa:e4:0b:6b:ae:94:78:34:a3:96:
46:1d:88:66:36:59:2e:73:a3:68:b2:8f:2e:a8:8a:d9:c7:a9:
02:24:51:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wLtHZWLudpKc/RG1XvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzcyMmRhZTI3MDg2OGExOTgzOGE3Y2Q0OTlkNTljMjY3
OWQ4OTEwHhcNMjYwMzI5MDUwMDI4WhcNMjYwMzMwMDUwMDI4WjAzMTEwLwYDVQQD
EyhiZjVmMDY2ZjEyOGQ3OTAwOTU3YTY5ZTM5MTFiYmQyZWZmNjcyNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujI4fzYuEw/fHE/C/Ws29+JJ2uCE
QWG09vIElbkr8FnjU8UajQglNI5ASIz9xFsId8ynxm+1QHS8xN0B6X78XKObxyy+
Jg+KiFulFSb+N4vKbMsREQ89gh/uxiGp14MC0Mo+eKBvDjiDd0mOiYGt3TN+fn3l
rm/zKts/v/I4P/TjmKbFG6EcZ+p6qkyGEHcZ6WtYD7grAte5lAjpx2BBlLcwSupT
4BZw/YlM5OVbU/ulDRNILC2VoAZ89eflZkOvVTiFSlhw7Ba3K6woJDjGjbmOV/ZJ
62My0HEvRyFbNU4KAw6bqB+Ai8LPQsERMrBi55z7ectLWdFNRgfrTNxO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9fBm8SjXkAlXpp45EbvS7/ZyZTMB8GA1UdIwQY
MBaAFPfHItricIaKGYOKfNSZ1ZwmediRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2Et
MmVkZTY3MjdlMTM5LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2EtMmVkZTY3MjdlMTM5
LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkqDWRHT
We2fX/YM7KBHvOaMDbJg/8ch1juJYqVrQBY+ib6PR3xBKh0jU6wDjcOU4UT1+B0u
ocLW5mQJnIPIxiySaBG/NN3AktkBsdUEPByepbJGFEVNTSaUjXfqJAfTJ8kH97Sl
hlE8ubefP4d1keaqPEpIWGvf9818KEAxGaGCGTuKudGVXotKkOMV8An1qb0w1kEw
YYbIdC1A1H3+bsuQnBc1ZcrGbnepqH86aLCSdZhUrx7bMYfCwfEIlIUmSojlsGcf
iYfKIeGbqczC2Dovr5q28tfxjgC9ipDTGQOq5AtrrpR4NKOWRh2IZjZZLnOjaLKP
LqiK2cepAiRRLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:06 2026 by rpki-client