Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File: 98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier: 1mitrDxDtDk0l4gaZs5u8xheE9lvAO6N67GRkXZF0dI=
Subject key identifier: 68:86:1B:37:72:1A:4B:C6:75:CF:4E:AF:E5:72:DD:AB:D5:14:D1:60
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 019D386621ABCF549499C59648B098ABF7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number: 1065
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: Yt3newWb0jt7S3b/pqpGE5A+Sr6KfMU1UtquiUxjNnY=)
2: PhYlTTJSDAG5ZShmlzAGSwIOBLM.roa (hash: v304FWDl/pr5++u+nRKS1u+LXVotGD3ulsE5/EGGhSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:21:ab:cf:54:94:99:c5:96:48:b0:98:ab:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=68861b37721a4bc675cf4eafe572ddabd514d160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:e2:d2:fd:8c:14:ad:a5:fa:24:b3:61:3a:
5b:2e:a1:e2:72:3d:7e:32:58:95:ea:34:36:bb:2a:
f1:ba:12:fe:20:73:c0:45:20:50:21:52:e0:04:df:
4e:56:4a:16:41:1a:05:53:c6:d3:0a:93:1b:e7:79:
0d:5e:e3:44:04:4d:83:3c:80:0b:03:55:e8:88:26:
0a:02:13:9f:8b:48:a4:f6:f3:4f:6e:31:65:b2:b1:
32:f2:d9:e4:fd:31:bd:75:45:fb:0b:4b:5e:c4:11:
80:2d:f3:2e:0b:68:94:c1:06:70:a6:51:85:fe:a3:
8c:c4:e7:52:d4:d2:00:b3:9e:b6:9e:5e:09:b1:10:
3a:52:70:03:b4:b4:22:be:95:70:67:9f:d6:49:70:
a8:73:9e:7c:72:b1:1d:0b:39:11:8a:a6:b2:29:d4:
8d:60:f9:3a:b3:84:33:49:18:6d:48:eb:17:73:81:
7f:2c:7b:66:07:c3:aa:5c:fa:e1:12:5d:64:49:7c:
56:79:82:e9:bd:fd:00:d6:fe:b8:22:36:37:c1:d8:
3a:01:fd:12:cd:c7:24:67:f3:05:ce:01:b6:df:d2:
42:4a:f8:b8:0f:25:1f:6b:41:fe:b7:dc:fc:33:68:
4c:e1:38:13:fd:76:27:0b:1b:69:91:14:96:43:e1:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:86:1B:37:72:1A:4B:C6:75:CF:4E:AF:E5:72:DD:AB:D5:14:D1:60
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cd:65:12:22:a4:80:2b:7b:08:52:de:95:7d:b0:62:b4:ec:
e2:ff:af:d6:e6:1f:fb:8f:e5:bc:50:5f:c2:f9:fb:27:53:30:
3e:93:11:8f:30:88:f0:33:8d:83:93:fa:7c:5c:18:cd:0e:45:
cf:41:e2:cc:19:19:4e:da:b4:90:87:92:16:81:20:c0:7a:a9:
de:77:60:1d:ef:cf:44:9c:89:78:ac:55:a7:b0:28:6a:3c:ef:
e7:a0:16:bd:2d:16:b3:ef:ad:22:08:51:f1:75:b5:2a:eb:b3:
14:f4:89:c1:0d:82:b4:f9:e7:a4:ce:11:6b:0e:de:34:5b:12:
11:26:75:b7:6e:e6:f0:ec:f1:08:0c:4f:3f:ac:9a:19:dd:be:
c2:8c:25:f0:0b:3e:23:8e:e8:6d:fb:e7:01:c2:59:36:95:29:
ac:5b:fa:b6:d5:15:4a:ce:32:a9:e9:89:d2:75:14:3d:3c:dd:
48:c8:4d:22:7c:c9:96:ad:40:00:16:76:3b:87:22:f6:a2:6c:
fe:1c:09:22:f5:ae:ae:f6:7e:83:62:b0:81:35:d1:6c:66:57:
b9:ec:26:ba:a8:88:70:a7:6f:e2:87:f1:00:10:bc:88:de:4c:
f6:df:6a:17:9e:3e:ce:ff:6f:ef:67:e0:32:b4:51:b7:15:20:
2e:1c:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:45 2026 by rpki-client