Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: HTeystb2uhOFkG8TprWm/r6W6hfBM15O1RpWOcXKhhc=
Subject key identifier: 9B:DD:BB:C9:E3:F0:48:51:CF:7E:8D:E1:1D:6A:87:11:61:74:53:BC
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019D382E2EE9C313E13A03BE9FCD36D6F4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: NB9d8Jh7dmDYvm9D4+/vMXjlJ0OUqcl+9g0iqefKsJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2e:e9:c3:13:e1:3a:03:be:9f:cd:36:d6:f4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=9bddbbc9e3f04851cf7e8de11d6a8711617453bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:7b:ff:b6:23:3c:87:9a:9e:67:c4:18:12:
8f:e7:26:70:19:66:7c:be:b4:6b:d4:84:f9:38:64:
b9:66:bd:a8:e8:55:cf:90:78:c7:37:2e:7a:99:87:
a0:54:08:ba:cb:bc:9d:14:b9:53:0d:17:49:ee:8b:
bb:bb:c4:0b:97:75:3b:d4:2b:51:ba:df:26:43:6b:
1f:04:ec:91:b9:13:4b:9d:98:89:78:c4:98:a1:2d:
24:a4:5c:92:82:a4:bf:a9:0f:22:e4:d5:97:c0:a2:
b8:8f:08:22:1b:62:c4:4d:a3:eb:be:be:c8:d7:c2:
6e:8a:07:e2:a0:e7:ce:7e:f8:69:ea:e3:54:4a:e3:
fb:ce:b0:e5:14:bc:9d:e0:67:ac:82:6b:e9:b0:d7:
38:71:59:7f:5e:9e:77:0c:b2:81:e3:d5:01:0f:58:
cc:01:e9:4e:85:a1:aa:83:9a:b3:f4:5b:1f:8a:1f:
69:ee:fa:be:77:05:eb:f8:59:8c:93:01:1b:0a:1d:
89:50:62:7f:fe:bc:3a:0c:bc:f9:e7:12:c8:d1:71:
e1:1d:63:16:a9:21:89:cc:8b:c5:1e:cc:f0:95:ca:
cf:53:61:ce:56:60:08:ce:19:df:c7:e9:ad:c3:6b:
8a:a7:26:45:f7:15:dd:83:41:d1:96:23:46:34:73:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:BB:C9:E3:F0:48:51:CF:7E:8D:E1:1D:6A:87:11:61:74:53:BC
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0b:2f:33:6d:7f:7f:08:07:a3:9a:db:19:e2:70:eb:54:2a:
9d:55:46:48:8f:04:86:5c:e4:56:a9:ba:a6:28:98:f6:67:ea:
39:f2:a1:cb:19:05:ae:84:1f:72:82:e8:90:76:19:b8:59:e3:
6c:fb:cf:11:de:6a:e3:a2:ce:6c:a3:f2:f8:df:06:95:a5:ef:
9a:f9:0a:89:8f:f0:74:78:fc:a5:47:c5:18:1a:c2:fd:c2:da:
92:52:99:41:35:d1:8f:12:4f:02:42:44:73:74:2e:f7:d0:d0:
cd:57:7f:64:e2:4a:d5:93:d3:aa:81:e7:f6:13:9f:a0:1e:07:
05:33:4e:2d:ea:11:1d:ed:b1:3f:64:45:da:1c:d3:fe:37:68:
8b:72:c6:b7:e7:18:4d:63:9c:6a:83:e0:e8:50:d1:51:e8:fe:
cd:55:69:bd:ff:9f:9c:f0:73:6e:ed:3d:26:f1:ad:0d:6f:3c:
12:c7:f5:b6:c6:f7:cc:2d:a8:8b:0b:a2:78:b4:8e:02:dd:79:
44:fd:33:1b:4c:92:f6:f4:37:8c:31:cd:de:10:9b:9e:8b:31:
5c:8a:5d:a1:7b:28:84:eb:e6:7e:94:52:ee:b2:06:f2:62:ed:
fd:eb:fa:29:2c:73:f9:c5:11:30:2e:b0:f9:66:f2:b3:90:eb:
18:17:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:22 2026 by rpki-client