Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: fYp468Kw1DDJerXyw6gczK76oOx4OvLL4lqhfGpiIdY=
Subject key identifier: FF:17:B7:E5:7E:9D:45:DC:0A:DB:07:0A:C9:88:5C:9F:57:D2:30:29
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 01A13F39543B4B78DACF8E250627E8442BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 0993
Signing time: Thu 15 Oct 2026 11:01:24 +0000
Manifest this update: Thu 15 Oct 2026 11:01:24 +0000
Manifest next update: Fri 16 Oct 2026 11:01:24 +0000
Files and hashes: 1: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (hash: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: Su5l0Ssh0POpQcKIS/HcKbNsa5J09nW/zfU9P+69Yko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:54:3b:4b:78:da:cf:8e:25:06:27:e8:44:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Oct 15 11:01:24 2026 GMT
Not After : Oct 16 11:01:24 2026 GMT
Subject: CN=ff17b7e57e9d45dc0adb070ac9885c9f57d23029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:46:3e:b9:ac:89:3f:ff:b7:97:d1:ad:ea:
83:5b:a5:74:ca:1e:07:0f:54:6c:e5:44:d2:8b:1c:
bd:89:3d:5b:e9:47:8a:62:aa:1a:20:3d:b5:56:66:
69:a1:44:fb:c9:98:a9:51:fe:8e:06:1f:7a:72:fd:
71:41:9f:a8:9b:0a:72:43:7f:41:87:90:94:0f:56:
8b:3e:a2:cc:bf:43:13:0f:f4:7c:5e:e5:ce:e6:14:
08:79:62:7c:47:48:4f:18:2f:eb:de:c1:28:47:55:
8b:ff:3a:9f:33:aa:0f:ec:47:22:37:f0:aa:75:0f:
5c:95:f2:23:db:f4:fd:fc:d1:9d:62:75:17:49:56:
2d:e3:91:64:af:b5:fb:d7:20:5e:8d:5a:fa:ab:6a:
84:fe:88:30:11:47:29:26:b5:87:c6:a4:6b:09:8d:
52:68:87:10:dd:2b:63:cb:37:6c:f5:d4:b3:8a:60:
63:d8:d0:e1:8e:d9:6f:f5:fd:6b:69:21:fe:e1:4d:
41:58:85:fe:f4:30:7b:5a:3f:10:57:26:76:54:65:
bc:7c:03:8d:9c:ac:b4:86:b8:e6:77:cb:5a:c8:68:
87:5a:f3:c6:de:54:bd:a7:bd:39:b2:3b:78:3f:60:
30:7f:45:a9:1e:c9:8a:26:ae:5b:a7:ae:02:e1:2b:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:B7:E5:7E:9D:45:DC:0A:DB:07:0A:C9:88:5C:9F:57:D2:30:29
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:69:4d:13:75:a1:35:20:45:41:b5:7a:e3:f6:c1:8f:f8:
6b:5c:3e:45:b3:88:12:ea:b4:c2:69:c6:63:6e:ae:74:49:e3:
b6:40:1e:c6:a5:1a:db:ec:42:d2:1a:ff:22:ad:4a:4e:0f:1c:
23:f8:8c:ae:e9:1f:b7:52:94:33:4c:4b:0e:e0:15:05:cb:ed:
f4:7e:9b:cf:df:6a:9f:fd:57:f0:07:b1:71:52:42:44:f7:f4:
ff:62:c7:d5:56:d8:52:13:e2:fd:7b:35:ed:63:38:8b:39:b1:
ba:95:ad:cf:3a:98:5d:d2:79:dd:30:6d:a0:62:4d:89:43:0b:
21:6b:9e:0b:70:8d:55:f2:ae:45:b4:69:e0:cb:ce:5c:19:44:
03:91:f5:7a:23:2b:cd:02:10:39:4b:50:bc:0a:2f:92:2c:ee:
bf:c2:38:00:98:09:a7:8c:02:1f:0e:bc:04:5e:91:d8:64:e6:
6d:c0:4f:59:e1:31:86:34:13:a8:9e:93:1c:21:c9:6e:e4:59:
4b:bc:06:19:c0:45:f1:e0:19:bb:ae:a4:b9:f7:37:48:cf:ff:
f1:80:63:a2:bc:38:e1:fe:ac:a4:15:37:1b:cd:b3:fb:83:2a:
70:8e:09:9c:db:44:51:2e:ff:3c:fa:6a:58:32:9a:9a:c2:91:
05:04:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:38:27 2026 by rpki-client