Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: 4uYaQoJsyb2+iaJCz7ZsK5owV6mYczTsLLbzL34myUQ=
Subject key identifier: 04:38:25:D7:83:61:63:42:32:96:63:ED:23:A4:95:89:DF:6E:28:5C
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 01A0E74049AD2801065C1D557DA85D26DC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0438
Signing time: Mon 28 Sep 2026 09:02:25 +0000
Manifest this update: Mon 28 Sep 2026 09:02:25 +0000
Manifest next update: Tue 29 Sep 2026 09:02:25 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: eB556QChAuVinZa3nNrU3hxW0SgbGhEfPvT+nPLTKYo=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:40:49:ad:28:01:06:5c:1d:55:7d:a8:5d:26:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Sep 28 09:02:25 2026 GMT
Not After : Sep 29 09:02:25 2026 GMT
Subject: CN=043825d783616342329663ed23a49589df6e285c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:86:7e:32:8e:01:58:61:fd:cc:c9:08:c9:
ff:aa:d0:c6:40:d9:1f:d4:28:5b:bb:ad:49:57:e8:
e3:f4:62:09:cc:a1:69:e8:ed:ea:9c:10:73:76:3f:
a2:bc:6f:c3:51:3c:92:d9:f3:95:27:95:81:a6:34:
e5:69:e6:58:40:84:b4:b9:0d:43:cd:85:c9:a6:d7:
81:e8:36:4d:6a:65:e8:6c:7a:96:fd:20:e7:33:51:
72:6d:f1:68:dd:f7:e9:dd:96:ad:ef:74:3d:68:6f:
6d:6c:58:6d:97:90:19:24:1e:1f:bc:4c:b3:7c:af:
14:88:87:0f:1f:a6:15:3a:0e:80:b9:2a:8d:36:81:
7d:f6:5f:04:a2:4d:1d:51:5c:f6:54:6c:1d:ba:a8:
65:e9:80:21:70:88:12:5a:71:ab:17:99:f2:0a:c8:
bf:7e:f6:00:c6:45:fd:d0:b2:9e:a1:ba:83:01:7a:
eb:e6:c0:ab:0e:41:0f:6d:88:ce:ac:06:06:95:a8:
d3:81:ae:7c:e3:96:70:d1:49:74:28:01:41:da:fa:
9d:3a:59:6d:9e:54:b7:93:5d:72:0b:be:27:d4:66:
e0:3f:17:27:60:f5:d0:bd:41:44:71:ef:19:22:45:
fe:72:bc:c3:04:5c:c8:94:d6:2d:08:6d:55:3f:ba:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:25:D7:83:61:63:42:32:96:63:ED:23:A4:95:89:DF:6E:28:5C
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:48:b0:30:9e:c5:eb:92:24:a1:ac:ff:20:af:9b:bb:62:3a:
2f:e1:c6:f4:2f:78:c4:96:40:c2:e0:50:d6:d4:a3:82:3e:5e:
b6:d6:0d:03:76:53:01:ea:0d:0e:7a:dd:25:f6:33:41:ca:af:
9c:03:39:9e:60:2d:4b:27:3c:a0:fa:92:ae:b4:f2:da:99:58:
ab:b8:f5:fd:66:b2:46:8e:05:72:26:eb:80:cd:9b:87:d6:31:
c1:c8:1a:78:bf:a8:76:2c:b8:e3:77:f1:eb:f1:f5:3e:f5:58:
b0:8a:8b:98:db:c8:ec:43:15:2f:4a:a7:e7:43:d2:03:01:9b:
f4:66:45:1e:97:13:72:7d:d9:0c:e4:4b:ee:e6:05:3e:59:c8:
94:0a:a5:2e:bd:21:df:6f:f6:85:50:72:d6:f4:7d:f9:ed:f6:
de:41:f4:a2:ee:12:69:cc:83:85:a0:92:a9:0a:c8:bf:1c:7f:
0f:02:4a:f6:09:53:3b:d2:c8:a3:41:ab:62:74:60:b6:17:c4:
c8:8c:2d:d1:6a:0d:08:16:cc:64:cd:10:93:7a:35:23:49:4d:
88:6c:1f:94:30:63:19:bc:7b:28:8a:16:00:69:39:05:26:b2:
5d:9c:6c:ef:19:0d:7c:68:49:0d:4a:a8:d7:46:1a:ec:93:9b:
79:26:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:40:59 2026 by rpki-client