Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: dDRPDjgwI3hKpYdNfK9mgbjvGeXKJDDIVF2OlYped3k=
Subject key identifier: CA:97:9E:E6:6F:29:9F:5D:DC:8F:4C:1F:CC:4D:77:9A:F1:0F:C1:92
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019DA45370148291D330848F671A3CA868D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 06:00:24 +0000
Manifest this update: Sun 19 Apr 2026 06:00:24 +0000
Manifest next update: Mon 20 Apr 2026 06:00:24 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: R48/6MWtY+Ses8BQty3vtlBLmyCxyfc/mEWpFpOWXVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:70:14:82:91:d3:30:84:8f:67:1a:3c:a8:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Apr 19 06:00:24 2026 GMT
Not After : Apr 20 06:00:24 2026 GMT
Subject: CN=ca979ee66f299f5ddc8f4c1fcc4d779af10fc192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:5c:d1:1c:b5:f2:24:25:c0:e3:a3:b7:90:
58:3e:f5:f8:b3:cf:38:11:92:e4:ab:94:28:5a:9b:
f5:af:cc:36:21:7e:2e:aa:e8:57:d8:54:16:d2:bf:
e8:ea:e7:8d:04:23:0d:ae:b9:de:72:9c:b6:d5:25:
26:36:94:ea:2e:8f:07:9c:04:70:da:e6:8a:d6:ec:
fa:37:b2:0a:52:b8:3f:7d:64:20:bd:15:e4:3c:49:
8e:db:34:81:29:35:0e:dd:f7:da:4f:ec:94:fb:0f:
49:e3:61:d7:44:55:a2:95:10:44:93:81:d2:23:86:
2b:48:d0:34:c6:37:0e:f2:6d:ae:13:c7:c6:ca:0f:
38:32:6a:07:0e:ee:35:88:5c:23:0f:46:94:f7:68:
2c:4f:50:9d:f0:d5:29:1a:31:9a:3b:f1:c1:6f:81:
c9:5a:00:7f:8c:02:4a:c0:16:c8:e1:60:0c:4e:5c:
ed:a0:ff:90:f9:aa:e4:85:76:23:62:c3:3b:cf:e9:
c8:5b:e5:0e:99:45:0c:13:81:48:34:70:8a:62:41:
7e:3c:84:0b:e2:8c:e3:53:95:0a:85:fe:9b:ec:d2:
e0:38:4d:b0:c8:80:6d:59:97:25:ee:39:b0:d4:fd:
be:e1:61:9a:b0:88:6c:f9:c1:73:c1:b1:38:b6:d7:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:9E:E6:6F:29:9F:5D:DC:8F:4C:1F:CC:4D:77:9A:F1:0F:C1:92
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:77:ef:43:03:bd:3e:7b:b1:9c:a8:aa:a8:f8:66:42:a0:8a:
49:d5:6a:7b:ac:3a:6f:bc:47:ac:b5:7f:f6:9e:aa:2f:b5:08:
95:91:1a:2a:e8:1f:5a:f0:38:bb:ef:d1:2b:e1:bc:ad:d6:f1:
19:8a:de:62:ac:17:15:29:b2:9c:30:fd:a1:f8:14:7a:7d:29:
2d:84:6f:93:c9:3c:0e:c6:6d:67:fa:21:81:4c:34:a1:e2:29:
38:81:14:39:34:66:f8:43:86:d0:c4:d8:9f:c6:bf:39:c9:de:
fa:92:d7:47:cc:fb:d9:89:92:06:58:69:bb:22:b9:7e:f3:ea:
3f:e5:8d:9b:ac:50:c6:8b:1f:a5:be:bd:0c:a0:b7:62:b4:c6:
a3:ab:5a:15:a6:6a:72:89:26:02:c0:89:ba:2c:07:c7:c1:24:
76:38:eb:56:04:fa:d9:70:bb:c1:21:57:15:a1:b2:fd:a8:d2:
85:60:60:4a:cc:8d:fa:e4:6c:20:93:1a:a4:cf:d1:18:24:29:
4f:9a:61:8c:55:08:92:f0:58:4a:22:b8:86:08:a3:d8:13:e1:
67:e6:98:f2:6e:93:5a:36:f9:ba:32:e3:bd:b5:48:18:74:99:
ba:df:88:f4:69:25:41:4a:8f:2d:da:a2:54:5c:7d:19:46:f9:
09:0a:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:22 2026 by rpki-client