Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: JNHSq5pTu8ZTUMP0WA4OLeKSOVqUV/mzTn0vg+BA1O8=
Subject key identifier: C8:F5:0C:C0:C7:B4:10:26:F6:77:89:24:BE:16:52:46:CA:0C:B0:EF
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019D2772214118A5C6A1E3E3B1076A7817E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0247
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: qYNOYs6g5CnbrB5pSuX29epn7qtjViS0o/0JwaIGE4s=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:21:41:18:a5:c6:a1:e3:e3:b1:07:6a:78:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=c8f50cc0c7b41026f6778924be165246ca0cb0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:61:d8:0a:6f:dd:23:2a:00:e9:b3:34:2e:
d8:b1:b4:51:65:ec:b1:19:ea:71:a4:49:73:2d:b6:
cc:8d:5c:d2:58:2c:ee:70:3e:d5:ba:49:ae:76:49:
ae:80:e8:3d:89:d1:cd:31:51:48:7e:ce:c7:66:e7:
cc:d0:bb:80:53:58:8f:5d:ca:68:f0:1d:1b:ff:4e:
b1:1e:bb:48:07:a5:0d:64:7e:c9:85:30:98:a3:0e:
7b:0b:e2:7d:2d:5c:10:46:9b:2c:57:42:33:7a:74:
81:c7:ef:33:a3:d0:74:4d:9f:ac:c4:ad:4a:62:93:
bb:b8:21:24:96:a3:c2:73:e3:d8:fd:e9:16:e4:bf:
2f:42:95:7c:f1:33:2a:d5:23:9c:a9:d0:4f:02:70:
f9:fa:52:65:f5:5f:43:25:82:8b:33:ef:ee:15:8d:
e5:71:2f:f0:3a:5b:30:d1:26:59:a0:46:de:74:f4:
3e:f0:15:a3:f9:57:2f:2e:04:79:66:46:95:2a:bf:
0f:17:87:d1:14:7b:1a:ed:02:ae:ec:59:c0:46:6a:
ba:bb:2d:ad:42:f9:62:2d:82:ea:fc:31:2b:53:90:
6c:cd:0c:ed:3d:e0:f5:01:2f:91:fc:f0:e0:c3:e5:
6a:16:a8:26:fc:88:ed:e4:fe:0f:13:ac:20:23:8a:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:0C:C0:C7:B4:10:26:F6:77:89:24:BE:16:52:46:CA:0C:B0:EF
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:53:7e:c1:25:f8:49:ae:92:c4:c3:37:dc:7d:3f:7b:1f:c4:
b6:46:e0:58:ee:f2:04:19:49:a2:e0:92:30:44:14:27:f3:07:
1b:d3:bb:3a:49:05:5c:9b:2c:ed:7c:ab:84:6b:c8:77:62:0f:
f9:ad:d8:59:d9:07:f5:84:18:57:5c:b9:ff:a0:7a:c2:f0:9b:
c4:44:c0:db:0d:1d:de:4e:0a:1a:18:a3:6e:1d:0e:7d:17:55:
9b:6f:e4:51:4e:d8:f8:5a:8a:8e:60:ed:34:d4:2b:d4:09:15:
c0:6b:68:88:b8:51:61:85:09:cd:37:d4:2b:f2:5e:5d:81:b4:
ec:1c:f2:9f:03:8f:1f:33:ea:68:df:51:9c:63:87:ea:56:73:
f2:79:f8:47:2c:8c:11:90:de:b1:bb:8c:c9:25:67:b0:6b:61:
d0:31:dc:8d:31:cf:13:b9:74:54:6f:fa:da:a8:d4:5d:67:c6:
5d:be:2a:f6:65:97:e4:38:1a:c8:45:54:d8:55:12:06:91:90:
7a:94:80:ed:08:f5:e8:e5:6a:c0:43:c6:f1:6e:10:94:d3:0a:
ee:48:2f:36:08:11:8b:27:31:80:dd:09:54:9a:ea:f7:4e:b1:
b1:82:68:27:6e:2b:88:cf:8b:ca:b4:55:e5:9a:61:54:c5:d2:
fe:f5:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:21 2026 by rpki-client