Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: AN0uPTPNlpCuj55+bqISSyIm7x7UBQX56X38ECPRMII=
Subject key identifier: DF:0C:8D:5F:0C:9B:76:B5:21:87:49:B0:B3:68:77:AC:5A:DE:AD:24
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 01A0822E42404AAC504080141BEEDB923C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1A46
Signing time: Tue 08 Sep 2026 18:01:04 +0000
Manifest this update: Tue 08 Sep 2026 18:01:04 +0000
Manifest next update: Wed 09 Sep 2026 18:01:04 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: noF9fmV1Kut0whQ4iCIx4pCua3BnS/0k5CZlwIJtn4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:2e:42:40:4a:ac:50:40:80:14:1b:ee:db:92:3c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Sep 8 18:01:04 2026 GMT
Not After : Sep 9 18:01:04 2026 GMT
Subject: CN=df0c8d5f0c9b76b5218749b0b36877ac5adead24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:c6:b2:93:04:2e:8b:b7:17:fe:3f:11:c3:
be:3e:d4:53:65:7f:1e:6b:d1:4e:52:af:6e:4a:14:
57:5d:cb:5f:59:fa:2d:17:69:02:02:92:ad:33:9c:
9c:d7:74:ee:99:66:b8:fe:55:1b:9f:73:c9:5f:14:
bf:95:b6:18:18:66:cd:d9:e1:ad:76:27:04:d0:d1:
2a:45:d4:d5:7d:b2:f5:89:74:69:0c:1a:e5:22:29:
cc:89:9c:f9:67:b7:4f:ec:d5:02:25:f3:bc:ce:93:
e5:9f:50:8c:2f:8e:dd:de:d5:d9:a4:b3:f5:4d:0f:
f2:a1:f9:27:47:00:5d:1a:5f:9a:93:60:15:71:c2:
0d:4b:1e:e1:1d:82:50:11:e3:ff:60:72:52:09:37:
19:a8:31:d7:99:4e:73:db:46:4b:65:ec:a4:42:2a:
70:78:c9:b1:b9:63:c7:bf:15:8b:fe:4f:b8:ea:5c:
e1:4f:16:cc:8b:a6:da:40:40:44:37:22:7f:53:3f:
61:14:63:f0:13:01:7a:78:c8:2f:ed:66:32:00:2b:
cc:9d:26:ca:bc:b6:1a:98:f6:75:0d:bb:07:2d:c3:
40:c6:b1:db:50:fa:71:0e:f2:ef:69:3b:c9:f0:ca:
81:81:3e:66:7d:2f:aa:96:c8:89:61:4f:4d:14:96:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:8D:5F:0C:9B:76:B5:21:87:49:B0:B3:68:77:AC:5A:DE:AD:24
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:22:fd:9e:e1:63:0a:8c:02:8d:e8:b8:c4:16:50:58:22:
4c:04:ab:60:c7:23:88:35:54:40:37:d9:ec:fb:d7:86:65:53:
a6:33:f7:c9:c9:33:e2:bc:fb:c1:27:88:6c:50:13:ce:9d:d9:
5c:50:b0:6c:68:22:06:fd:dc:27:39:77:60:27:49:52:26:b4:
6b:6e:94:49:42:e5:5e:ec:e4:a7:4a:70:9e:c0:b7:06:67:5c:
12:27:15:b8:6d:a5:f2:67:1e:46:5d:81:15:2b:9e:b5:c1:6a:
84:fb:2a:33:1e:2b:31:e3:94:3b:9d:4e:40:12:0a:1c:b3:50:
8f:b2:5c:df:b9:43:8b:4d:b7:2a:e5:bd:dd:18:ca:a2:79:05:
48:56:83:25:43:81:1c:31:bc:bf:9d:cf:8c:73:f1:e6:75:42:
4f:31:63:c7:0a:96:71:4d:ec:67:1e:16:9b:af:21:38:5c:82:
10:c4:8f:59:e7:f3:85:02:ce:3d:98:43:52:71:ea:e2:5a:12:
22:bd:65:03:26:20:60:ce:9f:e3:58:b3:a9:fd:99:24:15:b7:
ad:14:12:1f:0f:48:e2:2f:26:2b:a9:8c:fb:d7:b1:e0:8e:d3:
23:15:90:1c:a7:fc:ed:36:e2:74:a3:fa:95:7b:3d:16:2b:58:
27:fd:62:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCCLkJASqxQQIAUG+7bkjxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4
ODQ5ZWEwHhcNMjYwOTA4MTgwMTA0WhcNMjYwOTA5MTgwMTA0WjAzMTEwLwYDVQQD
EyhkZjBjOGQ1ZjBjOWI3NmI1MjE4NzQ5YjBiMzY4NzdhYzVhZGVhZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYbGspMELou3F/4/EcO+PtRTZX8e
a9FOUq9uShRXXctfWfotF2kCApKtM5yc13TumWa4/lUbn3PJXxS/lbYYGGbN2eGt
dicE0NEqRdTVfbL1iXRpDBrlIinMiZz5Z7dP7NUCJfO8zpPln1CML47d3tXZpLP1
TQ/yofknRwBdGl+ak2AVccINSx7hHYJQEeP/YHJSCTcZqDHXmU5z20ZLZeykQipw
eMmxuWPHvxWL/k+46lzhTxbMi6baQEBENyJ/Uz9hFGPwEwF6eMgv7WYyACvMnSbK
vLYamPZ1DbsHLcNAxrHbUPpxDvLvaTvJ8MqBgT5mfS+qlsiJYU9NFJZkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8MjV8Mm3a1IYdJsLNod6xa3q0kMB8GA1UdIwQY
MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt
Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz
LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5oi/Z7h
YwqMAo3ouMQWUFgiTASrYMcjiDVUQDfZ7PvXhmVTpjP3yckz4rz7wSeIbFATzp3Z
XFCwbGgiBv3cJzl3YCdJUia0a26USULlXuzkp0pwnsC3BmdcEicVuG2l8mceRl2B
FSuetcFqhPsqMx4rMeOUO51OQBIKHLNQj7Jc37lDi023KuW93RjKonkFSFaDJUOB
HDG8v53PjHPx5nVCTzFjxwqWcU3sZx4Wm68hOFyCEMSPWefzhQLOPZhDUnHq4loS
Ir1lAyYgYM6f41izqf2ZJBW3rRQSHw9I4i8mK6mM+9ex4I7TIxWQHKf87TbidKP6
lXs9FitYJ/1iAQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 04:42:58 2026 by rpki-client