
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: Vza1oKP0YbK22N8y3pwT6KWxintRtB7VHPNW5O0azns=
Subject key identifier: E6:30:F5:43:B9:0F:B8:C8:C9:8A:E5:DC:DC:AF:F5:2A:C2:2A:29:87
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 019CAC469BABC9E6F6F8A05168C6C6C6A450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 0A6C
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: 5Gy2+fvH+qh+NvbzJ/9tlufD3w/1n8hPGMJ5lpwvdnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9b:ab:c9:e6:f6:f8:a0:51:68:c6:c6:c6:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=e630f543b90fb8c8c98ae5dcdcaff52ac22a2987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:a1:14:cf:ab:c6:24:3e:b9:0a:ad:63:2e:
aa:36:92:93:d1:f3:b6:1f:fb:62:a9:6f:9e:b3:e1:
3a:49:f9:a3:40:eb:86:89:fa:3e:9e:d6:4f:fe:17:
ff:04:2b:57:44:1d:ed:3d:18:5e:09:08:e1:b1:79:
5a:ee:fa:64:0f:c8:ab:20:7c:8b:90:50:cd:9d:a0:
82:8b:57:b3:ba:3e:e1:56:d6:91:38:13:35:81:0c:
e6:51:6e:97:d8:6a:1d:12:61:d8:e1:eb:96:95:1a:
9f:27:a0:05:81:1a:99:d9:e4:6d:33:db:cd:a7:57:
41:16:7d:e4:c3:6e:3f:cc:7d:c3:0d:41:a8:c5:bd:
3f:54:95:e9:09:37:be:94:a4:0a:d0:5b:09:30:a6:
57:59:85:26:a6:c0:fe:3f:56:d7:d4:3a:89:2b:6e:
74:10:0e:97:89:9b:ad:45:49:ab:2e:a9:13:6a:57:
a5:c3:5d:28:f2:5d:d3:16:d0:c1:c8:ed:1c:3c:41:
a2:14:54:f7:50:a6:71:42:9e:8a:06:67:3e:9f:6e:
bc:a7:be:4f:00:a5:ea:3a:4e:ce:c8:e1:f1:08:68:
f4:df:ea:a1:8f:bb:73:a3:e9:e8:b5:08:de:14:f0:
83:44:6f:9d:2a:92:63:a4:87:17:54:fb:09:23:c1:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:F5:43:B9:0F:B8:C8:C9:8A:E5:DC:DC:AF:F5:2A:C2:2A:29:87
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0d:47:a3:83:83:d2:00:97:7d:33:6e:16:b0:bf:5d:5c:3c:
95:5b:a9:b5:5d:ba:65:87:7e:25:51:9d:81:05:23:7d:56:d6:
d7:38:6e:ee:80:51:e7:8e:99:58:d6:66:62:67:02:55:8e:94:
36:20:83:e8:dd:6f:d6:29:c8:7e:10:b2:4d:ff:db:2f:63:bc:
6a:37:fc:20:5d:23:88:cb:ca:03:c7:a4:06:82:16:1e:f2:8a:
ed:55:f1:75:6c:bc:5f:14:9c:56:de:68:a8:00:03:99:ee:33:
c7:b4:90:fb:07:11:3d:31:2e:e5:de:62:73:3f:14:b3:ae:85:
04:80:80:21:70:ea:e6:fe:26:97:5e:67:9f:ee:17:5a:ae:64:
c1:55:ba:7c:32:d0:03:e4:72:60:f1:fe:88:0c:a0:92:fb:fd:
65:c8:30:eb:52:51:54:bd:44:b4:d0:e5:0d:85:93:c8:30:34:
4f:40:dc:6d:9f:50:79:4b:8f:b8:7d:f0:b6:90:f6:15:af:82:
fe:30:67:35:0b:02:dd:4f:d4:17:30:51:26:32:9b:58:a1:dc:
a7:02:bd:16:52:54:7c:01:a7:02:0a:4d:c8:59:ae:25:67:c0:
0c:0f:5d:a1:f2:b7:0b:8d:00:c7:67:04:a0:66:a6:ea:64:f4:
6d:1d:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:14 2026 by rpki-client