Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: GVhTMrgJ4YyHI8ttButH3P4u2KNt2WG6qXOTLZKXfEY=
Subject key identifier: 7E:D2:AC:2D:50:3E:85:AE:4B:0F:AE:ED:E6:AE:6E:9F:14:0C:D9:63
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019CAD22FA032A1B49E17B2D5CA244180E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:01:16 +0000
Manifest this update: Mon 02 Mar 2026 06:01:16 +0000
Manifest next update: Tue 03 Mar 2026 06:01:16 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: yLvHp1WEeqKwOAeP5nc1EayPLXXAUn5mLnhARi/tOkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:fa:03:2a:1b:49:e1:7b:2d:5c:a2:44:18:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Mar 2 06:01:16 2026 GMT
Not After : Mar 3 06:01:16 2026 GMT
Subject: CN=7ed2ac2d503e85ae4b0faeede6ae6e9f140cd963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5d:ed:95:88:5e:40:b0:ef:de:94:6b:84:f4:
53:fd:d8:44:d3:8b:3c:38:ab:bb:81:49:de:b8:2a:
a2:6f:12:78:a1:0d:d3:a9:79:38:bf:19:b1:ed:c3:
1a:f2:15:86:e9:44:07:76:c8:97:a5:79:68:e4:12:
00:53:5f:04:63:24:34:43:07:b1:dc:a5:80:03:30:
0a:85:59:2f:39:d6:49:ee:d4:09:4c:03:3e:0c:40:
c0:f7:e7:39:bb:29:83:fc:5e:9b:c0:a9:49:19:f7:
d7:6d:e4:a5:9d:f7:72:1a:b2:79:b1:e2:14:ec:c0:
17:8e:39:7f:54:34:22:f9:57:d3:f4:75:da:66:d7:
be:9c:dc:e8:f9:20:de:21:eb:71:8a:5f:99:3c:9c:
3e:3e:41:da:f4:41:a1:ce:34:67:a8:27:6f:af:8b:
16:95:92:51:ca:f5:c6:30:82:c5:aa:47:1c:ff:7a:
43:9b:17:80:25:0f:b1:e4:49:a1:f5:c9:1a:56:10:
99:19:7c:64:60:c2:36:64:c4:15:c6:66:38:29:b1:
89:44:b6:d8:25:63:e9:d3:15:e1:76:7c:c6:e2:3a:
93:fa:ec:01:58:73:d5:45:64:15:cb:cf:4b:c2:26:
98:a0:6c:a7:dd:33:64:bd:eb:d1:5a:99:50:ac:42:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:AC:2D:50:3E:85:AE:4B:0F:AE:ED:E6:AE:6E:9F:14:0C:D9:63
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:3e:bb:28:dc:0a:48:ce:9c:01:54:e6:63:61:9d:f5:80:
7c:ed:f5:b6:13:fc:80:e3:f8:50:52:e1:f2:6d:11:9c:e9:dd:
77:55:b0:0c:b2:ce:84:1a:5d:e8:fa:61:05:4c:a4:3d:b4:29:
e8:9c:36:92:bb:67:29:81:95:51:3c:2f:44:c7:00:11:84:c4:
ef:30:c8:d7:aa:d2:3e:69:38:0a:c5:ea:75:05:75:96:60:94:
ed:ed:0f:b0:91:1b:b5:5b:9e:bb:82:df:7f:c8:6c:d7:eb:24:
a1:0c:aa:fe:83:b3:1f:d6:a1:fe:06:70:bb:a1:46:c2:20:46:
73:18:54:b3:da:72:d0:6f:56:96:07:f5:ae:3f:a9:27:1a:e1:
4a:8f:f3:94:7c:34:ba:d6:71:8d:fd:40:71:d8:72:68:41:70:
44:3a:99:64:18:94:a1:7a:5f:04:3c:a0:c5:a5:b3:4a:de:fc:
0e:26:b4:b4:45:c7:8f:4d:91:04:02:ad:cb:69:57:b6:0f:95:
52:f4:be:96:4a:29:ea:ff:67:9a:06:05:c6:e3:51:15:4c:b8:
61:77:d8:30:76:30:94:2d:ae:23:91:66:70:3f:cb:f0:83:c8:
27:27:68:1b:29:a1:9a:68:1e:ea:2d:ef:ab:6c:f9:60:60:52:
73:59:bc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIvoDKhtJ4XstXKJEGA4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4
ODQ5ZWEwHhcNMjYwMzAyMDYwMTE2WhcNMjYwMzAzMDYwMTE2WjAzMTEwLwYDVQQD
Eyg3ZWQyYWMyZDUwM2U4NWFlNGIwZmFlZWRlNmFlNmU5ZjE0MGNkOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA713tlYheQLDv3pRrhPRT/dhE04s8
OKu7gUneuCqibxJ4oQ3TqXk4vxmx7cMa8hWG6UQHdsiXpXlo5BIAU18EYyQ0Qwex
3KWAAzAKhVkvOdZJ7tQJTAM+DEDA9+c5uymD/F6bwKlJGffXbeSlnfdyGrJ5seIU
7MAXjjl/VDQi+VfT9HXaZte+nNzo+SDeIetxil+ZPJw+PkHa9EGhzjRnqCdvr4sW
lZJRyvXGMILFqkcc/3pDmxeAJQ+x5Emh9ckaVhCZGXxkYMI2ZMQVxmY4KbGJRLbY
JWPp0xXhdnzG4jqT+uwBWHPVRWQVy89LwiaYoGyn3TNkvevRWplQrEI2lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7SrC1QPoWuSw+u7eaubp8UDNljMB8GA1UdIwQY
MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt
Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz
LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoQ+uyjc
CkjOnAFU5mNhnfWAfO31thP8gOP4UFLh8m0RnOndd1WwDLLOhBpd6PphBUykPbQp
6Jw2krtnKYGVUTwvRMcAEYTE7zDI16rSPmk4CsXqdQV1lmCU7e0PsJEbtVueu4Lf
f8hs1+skoQyq/oOzH9ah/gZwu6FGwiBGcxhUs9py0G9Wlgf1rj+pJxrhSo/zlHw0
utZxjf1AcdhyaEFwRDqZZBiUoXpfBDygxaWzSt78Dia0tEXHj02RBAKty2lXtg+V
UvS+lkop6v9nmgYFxuNRFUy4YXfYMHYwlC2uI5FmcD/L8IPIJydoGymhmmge6i3v
q2z5YGBSc1m8eg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:30 2026 by rpki-client