Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: mpuKXhveAN7tNbmrkNsGHjlxgn9gDankm+70ybde3tY=
Subject key identifier: 3C:52:3F:8E:5C:F9:AD:53:A3:55:7C:A1:FC:58:E9:96:73:AA:77:2B
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019ED3863DE6480576EDEAB8CD6084DFBF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1967
Signing time: Wed 17 Jun 2026 03:00:50 +0000
Manifest this update: Wed 17 Jun 2026 03:00:50 +0000
Manifest next update: Thu 18 Jun 2026 03:00:50 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: E1NyeDRtldgISSUt42FM9uvUCAQO/lGEiFffDCiEDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:3d:e6:48:05:76:ed:ea:b8:cd:60:84:df:bf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jun 17 03:00:50 2026 GMT
Not After : Jun 18 03:00:50 2026 GMT
Subject: CN=3c523f8e5cf9ad53a3557ca1fc58e99673aa772b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:99:58:59:4a:77:df:23:8c:a0:a6:28:99:
0c:f1:f6:ff:9f:9e:82:6f:98:2e:5f:83:dc:83:6e:
f5:bd:ed:87:1a:fe:67:ae:b5:2a:08:a0:c4:e0:9c:
b7:2b:0d:37:61:90:21:35:0b:45:36:86:1e:73:16:
da:df:12:94:e8:f8:57:5c:b6:94:81:3d:61:26:81:
ac:89:1f:5f:ca:a9:1e:6b:4b:aa:74:11:81:fe:8c:
48:ae:d4:88:65:9d:39:a8:4e:5f:07:b7:95:9c:69:
f2:01:6a:8a:e1:fe:93:28:f9:65:ba:f8:00:cb:07:
51:21:42:51:29:0c:2c:06:2d:fc:46:9b:23:d1:e7:
53:d0:66:ef:69:15:cc:9d:a5:8a:87:53:f7:95:20:
67:c6:06:58:bd:a6:de:94:d3:5a:3b:1a:93:9a:6f:
d5:11:da:c6:1b:05:8f:c4:1b:c6:06:d7:c7:85:2a:
79:a8:65:cd:70:55:9a:ef:7b:09:d4:40:e3:cb:9e:
dd:6f:c3:a3:08:09:32:9b:e2:52:e4:15:5a:a9:78:
34:e3:a5:ef:f3:4b:2f:bb:9d:4d:08:69:59:e4:87:
63:d7:06:47:e3:c0:45:a8:b7:ab:43:2d:58:38:01:
98:77:8e:39:2a:cf:15:f4:66:3c:27:d1:d0:9a:26:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:3F:8E:5C:F9:AD:53:A3:55:7C:A1:FC:58:E9:96:73:AA:77:2B
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:ea:8f:ae:d2:4c:b0:0e:2d:87:db:81:24:a2:31:20:00:
72:e6:22:f1:f1:00:16:67:56:78:b6:3a:76:9a:a3:e5:98:1f:
45:81:22:fc:76:fb:08:19:3a:a8:f7:53:b0:13:3d:7d:bd:dd:
bb:4f:b8:c7:70:e0:be:5e:7b:23:05:ca:09:98:c6:f3:1b:d7:
a1:06:e4:63:e0:ef:25:53:c7:a0:39:f5:76:db:fd:b0:f1:61:
01:ce:25:9c:12:22:26:35:2b:9e:8d:88:4a:3e:72:7f:d1:52:
d3:14:5c:75:2c:6e:ad:32:49:fd:31:15:da:9d:f9:19:72:c7:
53:61:5f:7e:c6:76:da:30:1e:b2:27:92:9e:c3:ee:17:a4:d7:
20:dd:93:47:14:6f:30:63:bc:00:45:78:9d:6c:3f:15:f6:cb:
9a:e8:64:22:27:6f:90:31:6a:14:e7:19:7d:1e:7f:06:54:fc:
29:4d:c7:b1:a4:e5:e9:67:51:e0:d7:d8:07:b4:84:63:f9:52:
ea:b7:d2:2d:af:69:72:32:18:9e:01:d7:08:3f:4f:2d:de:bc:
1d:f0:25:01:02:f9:43:c8:f7:ae:f6:21:b5:52:b8:9c:1b:78:
eb:03:82:bf:a9:1e:37:b7:fb:c6:78:a8:3c:ba:a6:3d:85:18:
8c:9c:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:42:48 2026 by rpki-client