Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: h0aWtzm2bD70RJRXR3FmgtbgFmYl3r+49sBcfOyXRr0=
Subject key identifier: AA:CC:0A:0B:59:E7:6C:08:74:B7:95:C3:4B:E0:9F:36:4C:5F:79:CE
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019CAED9E54BA0D95706A4A380686A011DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 0736
Signing time: Mon 02 Mar 2026 14:00:41 +0000
Manifest this update: Mon 02 Mar 2026 14:00:41 +0000
Manifest next update: Tue 03 Mar 2026 14:00:41 +0000
Files and hashes: 1: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (hash: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: n0x+owKKsXl4z0iJ1fj5isTD7T3lG41iGYqro9Ko5S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:e5:4b:a0:d9:57:06:a4:a3:80:68:6a:01:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : Mar 3 14:00:41 2026 GMT
Subject: CN=aacc0a0b59e76c0874b795c34be09f364c5f79ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:85:2d:3b:15:8c:ee:5f:cb:f6:f6:b6:ab:
90:89:b7:c5:cd:c4:36:6c:8c:8f:71:e9:3f:dd:22:
b8:a3:64:0e:b6:f7:1b:66:a1:7b:7e:27:77:c7:01:
8f:93:d0:c7:68:24:6a:82:3c:f6:7e:b4:b3:bf:5b:
52:80:dc:4e:36:71:07:58:0d:87:07:ee:94:2e:4f:
d2:05:f6:c1:9c:ae:9a:48:d1:ff:c2:1b:45:23:43:
a4:85:5d:2b:0e:09:23:ae:7f:3f:10:d6:84:10:d6:
3a:07:b3:22:9e:19:08:71:44:68:d4:19:fd:d0:d3:
d9:58:85:2c:29:45:98:21:3e:04:94:24:2c:e1:61:
28:a2:d6:5a:07:c1:f2:fa:79:3b:75:c5:8c:0e:ce:
67:80:47:4c:59:4a:00:15:e8:5c:93:9a:60:e1:68:
2e:ae:74:13:c8:48:28:bb:57:4e:a4:29:84:49:f5:
57:03:8d:94:fc:bc:e1:de:87:74:44:f7:93:e2:ed:
c0:e3:4e:54:bb:31:a1:09:3c:f4:ed:41:00:8e:f4:
ce:73:cf:59:e9:a3:d2:e6:99:9d:7b:ca:a6:59:9e:
b2:ca:88:c8:85:66:22:57:eb:8a:55:f0:31:5f:bc:
ee:bb:39:50:93:38:be:96:7f:6d:13:f2:2f:17:bd:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:0A:0B:59:E7:6C:08:74:B7:95:C3:4B:E0:9F:36:4C:5F:79:CE
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:12:cc:f3:85:f0:13:24:cc:9b:ad:af:da:48:c2:5f:ed:75:
c7:19:0a:57:67:7e:61:9b:bf:0c:72:3a:35:1d:39:29:9b:72:
4d:6c:90:5a:5f:73:0b:80:5f:66:77:63:e7:94:56:62:dc:a0:
22:76:39:f8:f6:71:08:30:3f:16:ba:21:be:68:42:db:47:fa:
cf:b2:1f:86:b8:e0:80:c4:f6:9c:f9:0c:11:3c:04:77:3d:c6:
41:d4:e5:b8:2b:06:ff:b6:d5:2d:92:26:b4:c4:01:00:f9:89:
fd:e0:27:9d:91:61:a7:b2:c3:49:8d:68:6b:7b:14:d1:30:82:
c7:f8:4d:ba:a9:4f:59:b0:d9:3f:8f:b5:8c:49:97:a5:bf:0c:
01:70:73:6b:d8:ac:3d:c8:d4:3f:b0:ef:90:2b:88:4f:23:e2:
4c:91:ce:bd:e3:a9:39:bc:0a:06:a1:a6:3a:3f:20:e0:ba:f9:
a0:5b:a2:66:a3:d8:cb:69:de:8a:86:db:e1:69:aa:d7:a2:47:
b6:4b:71:c1:96:89:8e:61:95:d8:9c:54:0e:7c:7d:c6:4f:77:
46:84:6b:e0:4a:47:4a:cc:80:ed:98:f1:20:bf:55:27:45:76:
c1:5c:55:16:92:be:ed:2e:92:08:91:c0:1d:35:77:c2:a2:4b:
53:7b:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:52 2026 by rpki-client