Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: APGatNp0Yddw14vqo4JgBk3kt8JWVJTa3UEu9cm7Dak=
Subject key identifier: 6C:24:7C:15:D1:4A:F7:C1:13:EA:3A:CA:8B:C2:01:32:CF:93:8F:42
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 01A1938D0188D133E671E265B993E210118C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 1AB8
Signing time: Sat 31 Oct 2026 20:00:54 +0000
Manifest this update: Sat 31 Oct 2026 20:00:54 +0000
Manifest next update: Sun 01 Nov 2026 20:00:54 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: 6eG3aqyl+xlmlNP2Nh0UQH65G6AXqRCKqkI3r0UcUwc=)
2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8d:01:88:d1:33:e6:71:e2:65:b9:93:e2:10:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Oct 31 20:00:54 2026 GMT
Not After : Nov 1 20:00:54 2026 GMT
Subject: CN=6c247c15d14af7c113ea3aca8bc20132cf938f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:3a:be:f9:19:f6:3f:24:1e:e0:1e:5c:64:
29:4e:44:7c:6b:95:65:48:d9:c0:32:f2:76:e2:9c:
bb:29:7e:3b:ec:78:44:7c:34:6c:9e:80:5f:fa:41:
1f:cd:4d:14:58:7b:b2:a8:e3:f6:0b:9b:42:3d:5b:
ec:01:64:28:ff:e3:39:cb:69:2c:23:ce:df:f3:23:
4e:d6:e3:ce:6c:fb:b4:6b:a7:bf:ff:cb:7a:2f:61:
f7:b1:89:27:16:79:73:3d:3e:53:54:51:7a:9c:6e:
11:32:ea:7f:c6:a2:55:21:59:f2:ab:74:eb:5b:77:
72:7f:bb:81:ab:a3:ba:b2:5a:da:b2:f8:e6:c6:96:
77:b8:39:b5:9f:93:b0:43:81:c8:16:c0:7e:ab:a9:
5b:3b:c0:b4:26:32:0a:de:41:33:86:03:d7:86:16:
d8:9c:66:86:93:3a:cc:41:13:3b:bd:df:14:c9:13:
e1:24:3d:eb:45:4f:f8:a7:04:34:b0:32:00:69:22:
88:4a:1d:be:ad:a8:b6:38:c1:15:c1:4d:69:f1:f8:
d2:61:5c:7f:7e:ea:f5:aa:3f:05:68:f7:11:3c:c1:
f4:8c:62:3e:9e:b7:85:82:5f:c5:0f:28:87:12:9b:
85:0d:a8:1e:e3:c3:bb:32:47:35:9a:09:c7:5d:91:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:7C:15:D1:4A:F7:C1:13:EA:3A:CA:8B:C2:01:32:CF:93:8F:42
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fd:ce:2b:06:86:b7:3b:ea:9f:f2:66:34:21:fb:3e:a3:f3:
ef:5e:f2:3b:b1:f7:fa:3e:37:7a:9b:0f:84:7d:55:84:23:dd:
8c:5b:22:98:ab:db:87:d5:cd:5e:bf:cd:72:95:8c:84:3c:df:
f0:80:96:46:da:a9:44:32:91:3c:c0:b8:23:16:a0:c8:30:c3:
5c:6d:4e:44:c5:74:58:af:bc:1a:73:7c:c5:3c:3d:9f:65:6b:
e7:58:06:bb:63:7e:dc:ee:87:1f:53:7c:68:fe:5e:4f:c2:3c:
fd:e5:e0:02:55:ce:d7:39:08:5c:66:2d:7a:a5:c9:df:aa:18:
e1:ae:fd:3a:eb:c0:8c:55:94:4b:79:62:b9:93:4c:35:6d:97:
12:bd:13:97:0f:ff:b0:c2:e0:b0:0f:db:e1:70:da:c8:1e:c0:
35:e7:98:59:ba:3b:ec:ed:32:5d:c8:d3:61:78:ea:83:ce:fc:
11:b4:70:2b:a1:28:0f:9f:21:ca:b5:8b:3e:2e:32:a7:89:10:
eb:3a:75:cd:57:a1:1e:85:e0:f6:5d:9a:11:4d:0c:03:24:6c:
5e:ee:e3:e9:8d:dd:32:87:43:fd:4d:12:f3:53:c9:89:cc:77:
2c:84:1b:02:e5:93:da:9b:7c:53:29:46:39:69:22:0d:79:90:
d2:bf:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:15 2026 by rpki-client