Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: JVdOh/sbPaCzz45MBYj6Ve/ke6Ya93PqVZ/R5FkQoA4=
Subject key identifier: 0B:D9:54:AC:70:48:10:25:35:4E:57:2C:42:3E:F0:38:7F:D8:24:17
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019CADC825D3F32563E4435A33CAB4D9409D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0208
Signing time: Mon 02 Mar 2026 09:01:41 +0000
Manifest this update: Mon 02 Mar 2026 09:01:41 +0000
Manifest next update: Tue 03 Mar 2026 09:01:41 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: UCQK8JEq3WAGGN3negUldpVWRQtBm1yKsgm4xYdx15U=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:25:d3:f3:25:63:e4:43:5a:33:ca:b4:d9:40:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Mar 2 09:01:41 2026 GMT
Not After : Mar 3 09:01:41 2026 GMT
Subject: CN=0bd954ac70481025354e572c423ef0387fd82417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:9f:ab:db:9b:7b:72:c8:cc:dd:b9:0f:62:
06:80:69:a1:77:60:32:bd:1b:02:63:36:69:d1:1b:
24:69:cf:11:73:26:44:c3:27:89:56:b9:63:0a:0a:
41:4d:35:fe:b5:5a:8b:f5:e9:3c:5c:56:1d:09:29:
f8:71:c2:55:e4:d1:68:b1:69:08:53:83:55:5f:fb:
86:90:de:16:bc:99:fe:60:dc:3e:a4:b7:ae:cb:4f:
5e:6f:93:2b:5e:e0:d9:b1:c8:e1:be:1a:30:09:fd:
a6:47:27:49:5a:1d:de:e3:04:d6:b1:96:25:62:0f:
40:e2:41:fc:ad:87:e0:ab:a1:fe:71:1a:91:48:87:
62:6c:04:5c:ac:c6:b8:7f:cb:a2:72:38:a6:35:59:
68:7c:1c:17:fe:96:30:03:81:3c:db:99:e1:f2:86:
e5:52:03:98:fd:69:b7:e5:f9:10:39:dd:9c:d2:98:
e6:cf:2e:bb:29:15:ba:4d:90:f0:8a:cb:e3:20:cf:
ad:0f:25:5e:a4:38:1a:69:37:b3:9a:31:10:1a:d3:
8a:28:b5:8f:b6:98:e0:09:01:e8:52:8b:eb:10:73:
7a:fb:fe:1f:35:1a:22:70:15:a9:17:8b:5a:4d:9d:
98:d6:c5:84:43:d2:27:9b:90:5f:c7:e8:8d:5c:d0:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:54:AC:70:48:10:25:35:4E:57:2C:42:3E:F0:38:7F:D8:24:17
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3e:da:9b:34:77:85:a7:0e:35:07:2c:32:c8:84:f3:0c:b7:
4e:2a:e8:3a:44:46:7b:c5:61:33:a7:1f:a6:3b:72:c0:79:9b:
4f:0d:48:84:d1:b7:67:32:71:d0:0d:ef:13:5e:34:f6:92:1b:
ea:05:c4:91:97:ec:76:e2:f6:ad:5b:19:01:4e:97:0f:84:33:
00:fa:2a:84:63:26:93:e7:91:13:c2:40:8e:39:36:bb:93:6b:
6a:88:30:96:e9:58:8b:37:6e:0a:5c:2f:df:4d:4c:9c:33:8d:
1d:9d:37:67:bd:97:bb:a9:7e:f3:d0:9e:ff:c1:2e:3b:99:a4:
f3:57:44:62:d1:c7:fa:b2:dc:cc:79:5b:40:74:f3:63:9e:85:
95:0d:f0:91:bb:ec:37:25:d3:62:3f:71:b6:e6:ef:21:c0:2f:
b5:79:d3:44:b4:28:43:d9:ec:ef:c1:a4:c1:8e:3e:55:81:e1:
07:2a:bf:ba:a9:4b:6d:0e:a3:49:e1:f4:9e:d7:53:e9:d0:65:
65:21:14:76:2c:82:ec:9f:bc:67:ac:28:35:75:11:36:39:75:
86:37:cb:be:06:67:03:0c:bd:70:aa:4b:f6:85:f6:d0:7d:4d:
89:85:35:a2:7d:5c:bd:0d:51:f2:87:a8:b4:10:bd:03:e3:d7:
f9:56:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:36 2026 by rpki-client