Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: ZMd9xTKXsfSlFbdA6OtBjz6J/AIAPYZZGGFtsdDmH0Y=
Subject key identifier: 97:0C:54:3F:65:8C:7F:64:84:3A:33:E3:51:C8:D6:53:6F:45:4C:B8
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 019D99D02816382FF6974B57A52FC2D028E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 0AE7
Signing time: Fri 17 Apr 2026 05:00:48 +0000
Manifest this update: Fri 17 Apr 2026 05:00:48 +0000
Manifest next update: Sat 18 Apr 2026 05:00:48 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: daRR03sWyne4KZc7OwP1lURqEABpGBG4fdhg+dLrsQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:28:16:38:2f:f6:97:4b:57:a5:2f:c2:d0:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Apr 17 05:00:48 2026 GMT
Not After : Apr 18 05:00:48 2026 GMT
Subject: CN=970c543f658c7f64843a33e351c8d6536f454cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:55:e1:7c:cf:2b:cb:be:1a:bd:4c:5e:42:
7d:89:00:37:f5:40:0b:f7:12:ac:b8:68:b2:76:b9:
72:ae:e3:50:c3:8e:f5:58:b6:a8:19:8c:b1:70:df:
0f:06:84:fb:29:e4:8d:06:4e:f0:c0:ae:46:43:1c:
ae:e5:ee:d0:c2:2d:bc:bf:e0:30:e1:5f:02:14:b5:
19:2a:72:1c:72:ad:66:4d:83:97:7f:89:cf:20:c9:
44:b1:58:1c:05:b2:ea:51:64:68:98:fd:30:a2:a6:
13:64:d2:97:01:e5:df:e5:34:c5:97:bb:9d:e4:aa:
ef:b7:9e:ad:2c:1a:53:b6:58:89:3f:ca:c4:3d:df:
51:0c:f6:c6:98:36:31:12:40:3e:67:00:5f:7f:cf:
c7:34:5b:45:19:a2:2f:66:8e:15:05:49:91:dc:9b:
df:e1:6c:09:7a:3c:00:38:59:a0:8b:77:0e:14:5c:
f0:54:60:8a:45:93:60:91:ef:6e:e2:c6:5a:d1:26:
1e:c7:02:ea:96:0e:a7:33:a5:98:79:fe:33:c6:0d:
05:c1:11:5d:e5:55:51:ef:c6:c0:9c:27:1e:97:f8:
c9:74:ff:f9:b8:91:c0:73:b9:ce:bc:13:18:a5:73:
33:db:c6:d1:d2:94:23:dc:5f:cb:6b:8d:29:77:93:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:54:3F:65:8C:7F:64:84:3A:33:E3:51:C8:D6:53:6F:45:4C:B8
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f2:36:84:60:1c:dd:4a:9e:78:a8:55:c9:d0:c2:36:46:e0:
62:ba:68:e2:27:ea:6b:a6:76:a4:70:30:1d:0b:2b:15:54:69:
f9:5f:46:16:7a:91:af:8c:56:70:eb:c7:f3:57:0a:b5:9d:28:
47:29:82:8e:b0:ec:27:59:13:44:fa:69:2c:89:1d:2e:e4:2f:
c1:04:fb:8e:fe:e0:ca:7a:0a:ec:45:8d:36:e5:9c:1e:3d:c3:
44:f6:6d:7c:d7:21:ca:eb:80:f5:b2:6b:ee:38:c3:51:42:78:
89:5b:ab:9f:5d:93:af:cb:4c:e6:78:ba:82:3b:b9:85:f8:dc:
ab:9b:7a:12:5a:d5:cd:74:ba:ed:e8:6f:59:c5:11:4c:1d:d9:
8f:66:67:b4:c0:21:2f:02:dd:24:b1:d7:93:ff:0c:23:f5:d7:
cc:42:4e:aa:24:51:ac:bd:a2:fe:8d:4e:9d:41:22:f4:d5:1d:
84:77:88:c5:93:f0:c7:dc:95:af:21:74:08:b1:5a:f1:98:77:
2f:c6:d4:14:91:99:e9:c2:59:67:6e:b9:69:91:60:15:43:e2:
a4:f4:4a:4d:b7:69:4c:f1:cd:a7:e5:f1:26:5c:05:80:b0:e0:
15:2f:60:09:ae:b4:90:95:40:9e:9f:6a:7b:bc:34:b0:0e:78:
65:88:0e:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0CgWOC/2l0tXpS/C0CjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2ZlNGQ0MzRkMzg3NjQ0MDU3ZDI0MWVhYzZmNjlkM2Vl
ODFjMTIwHhcNMjYwNDE3MDUwMDQ4WhcNMjYwNDE4MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg5NzBjNTQzZjY1OGM3ZjY0ODQzYTMzZTM1MWM4ZDY1MzZmNDU0Y2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjRV4XzPK8u+Gr1MXkJ9iQA39UAL
9xKsuGiydrlyruNQw471WLaoGYyxcN8PBoT7KeSNBk7wwK5GQxyu5e7Qwi28v+Aw
4V8CFLUZKnIccq1mTYOXf4nPIMlEsVgcBbLqUWRomP0woqYTZNKXAeXf5TTFl7ud
5Krvt56tLBpTtliJP8rEPd9RDPbGmDYxEkA+ZwBff8/HNFtFGaIvZo4VBUmR3Jvf
4WwJejwAOFmgi3cOFFzwVGCKRZNgke9u4sZa0SYexwLqlg6nM6WYef4zxg0FwRFd
5VVR78bAnCcel/jJdP/5uJHAc7nOvBMYpXMz28bR0pQj3F/La40pd5MoyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcMVD9ljH9khDoz41HI1lNvRUy4MB8GA1UdIwQY
MBaAFPfP5NQ004dkQFfSQerG9p0+6BwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYzgwMDgtOGE1Mi00MTc2LWI2OTMt
YzQwNTQ0MjgxZWIwLzEvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYzgwMDgtOGE1Mi00MTc2LWI2OTMtYzQwNTQ0MjgxZWIw
LzEvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvI2hGAc
3UqeeKhVydDCNkbgYrpo4ifqa6Z2pHAwHQsrFVRp+V9GFnqRr4xWcOvH81cKtZ0o
RymCjrDsJ1kTRPppLIkdLuQvwQT7jv7gynoK7EWNNuWcHj3DRPZtfNchyuuA9bJr
7jjDUUJ4iVurn12Tr8tM5ni6gju5hfjcq5t6ElrVzXS67ehvWcURTB3Zj2ZntMAh
LwLdJLHXk/8MI/XXzEJOqiRRrL2i/o1OnUEi9NUdhHeIxZPwx9yVryF0CLFa8Zh3
L8bUFJGZ6cJZZ265aZFgFUPipPRKTbdpTPHNp+XxJlwFgLDgFS9gCa60kJVAnp9q
e7w0sA54ZYgO6w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:39 2026 by rpki-client