Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: g0fhg/vFj5m/KKwP1mtqaMyy56aKp6wSSwn7YxO82Rs=
Subject key identifier: 11:1A:4D:61:DB:C1:54:EF:B7:5D:DE:A2:E9:C0:9D:56:4D:F7:B7:57
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 01A0C7B3CDCE38B2B267C4C24D87FA173294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 06:00:44 +0000
Manifest this update: Tue 22 Sep 2026 06:00:44 +0000
Manifest next update: Wed 23 Sep 2026 06:00:44 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: 4b0lMGA+V27HNjP3nMG7PzYHhg6wBvaSGtvjL0vwiRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:cd:ce:38:b2:b2:67:c4:c2:4d:87:fa:17:32:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Sep 22 06:00:44 2026 GMT
Not After : Sep 23 06:00:44 2026 GMT
Subject: CN=111a4d61dbc154efb75ddea2e9c09d564df7b757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:7f:3d:d6:17:9e:f4:23:d1:a0:dd:e5:84:
f5:26:2e:14:e0:0d:6c:aa:35:1f:c8:54:ea:dd:c5:
67:91:4d:ba:98:04:b5:47:c7:e9:d8:2a:78:e2:6f:
8d:c8:91:78:9e:1f:3d:38:14:f3:16:4e:bc:20:3b:
31:02:4e:0a:5f:4c:f8:7f:16:83:c2:be:42:ab:24:
f1:3f:d7:f7:c6:4a:cf:4d:bf:37:92:63:ef:bf:c7:
ef:8f:72:bf:fe:f4:8b:bb:72:bc:20:b0:de:1d:f5:
76:41:29:21:be:05:db:e1:ee:2e:e9:1d:7b:ab:10:
0a:8a:b9:09:81:b5:59:34:d8:f2:43:3a:d0:f1:36:
59:75:b3:2f:21:d9:f1:a3:67:20:67:48:06:59:d2:
d0:e4:2d:da:03:a4:cc:22:e3:30:be:57:b0:0d:91:
7e:c8:d0:ad:a2:b3:1c:fd:70:78:9a:95:81:3f:c4:
2e:4a:ac:ff:72:d6:04:0c:6c:03:4b:c0:98:a5:49:
cb:3c:3f:0c:37:a6:68:e0:e2:ee:55:60:84:16:da:
ad:4d:93:fb:21:df:23:9e:67:40:43:0b:64:a2:62:
ad:8e:6a:48:c4:f3:fb:d2:2b:dd:5c:11:1d:ed:4f:
2d:7d:c6:2f:df:ac:f9:2b:7d:69:56:a3:26:6c:38:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:4D:61:DB:C1:54:EF:B7:5D:DE:A2:E9:C0:9D:56:4D:F7:B7:57
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:35:20:54:09:e9:94:09:a1:31:66:7c:69:d3:07:ac:96:bd:
1b:c4:1f:3e:4b:0a:78:13:d4:a4:f9:5c:6e:6a:69:c2:c8:5a:
66:62:3a:e5:03:f4:f1:78:09:7c:fd:39:f6:76:8b:f4:06:80:
98:d7:a7:c3:ba:92:16:f1:45:15:d4:f4:f0:7a:fa:3c:69:9c:
39:29:00:b9:9c:dd:6a:40:42:c4:02:b7:81:b6:dc:be:84:af:
41:0d:41:61:17:06:32:5f:b2:68:ba:6a:0c:b0:9c:81:de:60:
94:56:44:79:13:f4:b1:2c:b7:52:6b:2a:40:88:9b:09:a1:01:
12:4b:2a:ab:7d:b4:7c:bc:3c:d5:c1:3e:dd:1a:1f:c0:b6:17:
17:5a:84:56:69:46:ca:46:a9:4e:30:5b:27:fd:7b:56:9f:02:
ea:8a:66:8b:54:f0:ab:db:26:08:a9:36:59:67:fe:63:93:d8:
c1:ac:ca:7d:81:87:f5:67:50:78:49:46:a8:af:3e:8c:fa:63:
27:7a:27:4f:cc:4a:bc:63:60:45:5c:46:a8:4c:44:7c:ce:e0:
65:5d:37:6f:be:90:fd:a7:19:38:ed:ad:f1:de:eb:a3:5b:25:
da:83:d9:29:79:db:0a:b8:a3:a3:70:3d:0a:75:c5:b7:03:fe:
e9:28:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:29 2026 by rpki-client