Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: 0o07DpCe2z79389O8zvfF04FLHYshoeggH8OOu+QD6c=
Subject key identifier: 61:B0:34:DC:AC:DB:A3:54:79:D4:49:50:4F:7C:15:3C:0D:48:67:1A
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 019E1D229D4CC6F8F220669CE1752DF50623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 0B2B
Signing time: Tue 12 May 2026 17:01:08 +0000
Manifest this update: Tue 12 May 2026 17:01:08 +0000
Manifest next update: Wed 13 May 2026 17:01:08 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: yn/M2wqwV0uqkjyg1rwiyDvyI6H4rYZWdqGUxoNdHW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9d:4c:c6:f8:f2:20:66:9c:e1:75:2d:f5:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: May 12 17:01:08 2026 GMT
Not After : May 13 17:01:08 2026 GMT
Subject: CN=61b034dcacdba35479d449504f7c153c0d48671a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:2b:87:90:d2:6b:f0:5f:5a:20:93:8e:66:
cc:aa:c8:65:3c:00:3d:df:f0:fc:46:f2:2b:fe:09:
88:f3:d4:c6:68:d3:eb:52:45:29:1e:29:e4:43:e1:
69:e0:f8:fd:e2:b9:bc:aa:c8:0d:9e:09:8d:23:26:
af:8e:84:d2:9c:eb:7f:c3:d1:64:88:b7:d8:b9:4f:
88:64:bf:3f:ff:be:f9:e8:88:7b:1a:27:e4:54:f0:
7f:51:7c:f5:30:32:e0:d1:af:45:d2:dd:b3:cc:1a:
67:5c:b1:aa:82:93:7d:a2:14:5a:76:37:56:0c:05:
3d:3d:62:b8:64:98:30:8d:d1:ea:7a:bf:70:a6:49:
84:80:31:12:48:b3:05:d6:d0:a2:f8:c9:ff:12:cc:
a3:6c:cf:b7:46:96:84:f0:ca:c0:c3:4d:dc:84:cf:
21:5a:a1:64:ee:c0:1c:93:c7:a3:e9:d9:31:53:0a:
85:7e:a1:7b:8c:23:22:69:40:7e:3e:31:f3:c7:62:
57:68:31:4f:f7:34:ea:94:53:dd:85:dc:2a:89:58:
3d:de:57:6b:6a:5e:c4:5a:b3:69:d7:79:2f:d9:99:
bf:09:af:e9:b2:7f:cf:a8:8d:9d:e7:3b:52:5d:e5:
ac:2b:c5:e0:a2:0b:06:42:67:84:ef:24:b9:9d:d9:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:34:DC:AC:DB:A3:54:79:D4:49:50:4F:7C:15:3C:0D:48:67:1A
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b7:06:55:0c:02:3c:9a:65:94:70:f7:56:b5:5d:da:c4:de:
db:55:f0:c1:50:d5:cd:4e:be:18:ad:48:09:a0:9f:c6:5b:ec:
68:c0:8f:ee:09:f7:dc:f7:c6:be:a1:00:cf:8c:53:12:24:ab:
fc:7c:75:12:08:82:62:e1:a6:cc:c1:96:fd:17:cc:47:53:57:
ac:83:92:84:54:28:76:59:28:54:d3:01:81:2b:52:4a:e1:5c:
d5:bd:27:27:c0:03:6d:07:0d:82:6a:ed:bf:dd:d1:9b:30:62:
84:dd:97:ca:7a:22:cc:2c:8c:88:22:cf:64:ec:57:57:ee:f2:
c6:4c:2d:b6:4e:f2:77:c8:2a:71:39:f5:33:13:e7:c5:14:ee:
12:d4:05:39:f8:dc:82:5b:e2:9e:25:fb:73:83:5d:fe:2c:60:
37:b9:49:5b:34:e0:33:f1:5b:15:83:ec:10:86:4f:b0:c9:52:
34:fb:23:b9:5c:81:f2:13:5f:f1:b3:66:b2:69:f8:8d:4a:c8:
06:49:2d:c8:8c:65:8c:03:46:2d:56:b5:54:09:17:49:4b:29:
7b:87:a9:40:79:a3:bd:78:61:e7:c7:af:65:28:cd:67:4a:2b:
f6:ad:fe:e2:39:b1:90:9c:64:bc:42:05:4c:cc:7b:9d:6a:9a:
d9:1d:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:26 2026 by rpki-client