Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: 0UstBbaWKe3OAuUmwROY0HdPucJo0m+D1a3OH/tGl0k=
Subject key identifier: 4E:DD:0F:1B:0C:BB:C1:36:72:90:21:8D:F6:AD:5E:3B:F4:14:3E:51
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 01A0E92D66774B89BF0C68644370DA3DAE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0439
Signing time: Mon 28 Sep 2026 18:01:01 +0000
Manifest this update: Mon 28 Sep 2026 18:01:01 +0000
Manifest next update: Tue 29 Sep 2026 18:01:01 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: fZO47fxOZYgaaWfNBs2YQIABAYgnWEL1a8wY+uZir3A=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:66:77:4b:89:bf:0c:68:64:43:70:da:3d:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Sep 28 18:01:01 2026 GMT
Not After : Sep 29 18:01:01 2026 GMT
Subject: CN=4edd0f1b0cbbc1367290218df6ad5e3bf4143e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:66:d6:63:8c:5d:42:17:62:24:0c:14:3c:
ba:a9:3d:15:c4:4c:22:6e:89:de:99:0b:0a:30:b1:
64:45:50:3e:fa:ad:ba:66:13:e2:a9:f0:59:37:ab:
be:1c:d5:8b:36:22:ba:b5:d3:f9:b6:53:b8:6d:07:
45:c5:49:7e:05:d8:51:37:0d:9c:f6:a0:4c:d1:61:
28:88:96:20:ab:a7:69:94:4d:22:59:d4:67:45:cf:
3a:4e:6c:b7:e9:34:0b:b1:61:0e:a5:a6:1a:8b:02:
bc:32:de:84:38:48:77:15:05:6b:5f:b8:b5:17:36:
eb:d9:d8:33:c8:6b:f5:5f:86:10:7c:13:c5:fa:44:
9e:f2:7d:1c:98:b9:68:22:aa:27:74:4b:b4:f4:aa:
4d:3a:af:4e:84:50:5a:22:ae:93:05:d8:20:ef:04:
92:db:90:41:a0:0b:4e:b4:99:08:56:96:65:df:a4:
b4:60:31:4c:26:1c:0a:6c:16:65:e3:a5:cd:d2:f7:
e1:0f:c2:39:8e:42:00:aa:0f:cf:a0:b0:ff:e7:8f:
6a:6e:ee:32:12:d3:f1:ba:70:08:87:50:60:0a:24:
38:d2:d4:9a:15:da:19:78:7c:d9:57:09:36:15:b1:
48:c9:6b:e8:35:1c:39:fc:41:a8:4a:3a:42:5b:4e:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:0F:1B:0C:BB:C1:36:72:90:21:8D:F6:AD:5E:3B:F4:14:3E:51
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:da:ce:1c:10:e3:83:d7:b4:83:3c:23:9d:72:a6:d7:67:56:
fe:f1:7e:66:a8:53:ed:71:46:6f:df:de:14:93:a9:4f:99:43:
03:a4:b2:18:73:88:d8:cd:1e:42:de:b9:34:de:f3:1c:9f:9b:
e5:ea:e3:2a:64:12:bf:12:dc:c0:b6:65:73:c4:44:a7:ea:3e:
42:2e:84:29:f3:42:57:b9:7e:a8:83:4e:82:2f:cb:b5:95:2c:
e0:c8:45:09:76:23:83:10:e0:1a:fc:37:e5:e8:01:17:a5:28:
77:14:c1:03:b4:6b:19:84:1d:f1:24:21:8d:69:74:a6:8c:02:
c4:d7:61:f1:5a:e5:9a:fa:34:3d:58:76:83:92:8d:89:a4:26:
5a:81:5d:8f:55:a9:c1:e9:a4:92:02:ef:73:29:31:2a:f6:fd:
1f:a9:01:27:91:4c:15:7e:28:71:61:8f:ab:5b:89:95:4d:da:
53:ca:e4:7c:f9:75:ba:2d:d5:ac:32:98:49:5d:35:e2:6c:d7:
41:75:22:8a:6a:35:f9:80:93:62:84:c0:cb:95:51:9c:32:dc:
6a:a7:d3:3b:50:1c:93:46:ce:9a:7f:d8:48:85:0d:30:e0:fc:
0c:61:63:62:8b:03:58:f7:9b:92:9f:50:d9:a4:fd:cb:56:0e:
09:31:c0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLWZ3S4m/DGhkQ3DaPa46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzI1NjIwMzhmMDgxZDE4ZDg1MjY5NDA3MTMxYzk4NDAw
M2U1NzUwHhcNMjYwOTI4MTgwMTAxWhcNMjYwOTI5MTgwMTAxWjAzMTEwLwYDVQQD
Eyg0ZWRkMGYxYjBjYmJjMTM2NzI5MDIxOGRmNmFkNWUzYmY0MTQzZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTRm1mOMXUIXYiQMFDy6qT0VxEwi
bonemQsKMLFkRVA++q26ZhPiqfBZN6u+HNWLNiK6tdP5tlO4bQdFxUl+BdhRNw2c
9qBM0WEoiJYgq6dplE0iWdRnRc86Tmy36TQLsWEOpaYaiwK8Mt6EOEh3FQVrX7i1
Fzbr2dgzyGv1X4YQfBPF+kSe8n0cmLloIqondEu09KpNOq9OhFBaIq6TBdgg7wSS
25BBoAtOtJkIVpZl36S0YDFMJhwKbBZl46XN0vfhD8I5jkIAqg/PoLD/549qbu4y
EtPxunAIh1BgCiQ40tSaFdoZeHzZVwk2FbFIyWvoNRw5/EGoSjpCW04v5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7dDxsMu8E2cpAhjfatXjv0FD5RMB8GA1UdIwQY
MBaAFPfCViA48IHRjYUmlAcTHJhAA+V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDIt
YWQwOTRiMzE0ZTBmLzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDItYWQwOTRiMzE0ZTBm
LzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdrOHBDj
g9e0gzwjnXKm12dW/vF+ZqhT7XFGb9/eFJOpT5lDA6SyGHOI2M0eQt65NN7zHJ+b
5erjKmQSvxLcwLZlc8REp+o+Qi6EKfNCV7l+qINOgi/LtZUs4MhFCXYjgxDgGvw3
5egBF6UodxTBA7RrGYQd8SQhjWl0powCxNdh8Vrlmvo0PVh2g5KNiaQmWoFdj1Wp
wemkkgLvcykxKvb9H6kBJ5FMFX4ocWGPq1uJlU3aU8rkfPl1ui3VrDKYSV014mzX
QXUiimo1+YCTYoTAy5VRnDLcaqfTO1Ack0bOmn/YSIUNMOD8DGFjYosDWPebkp9Q
2aT9y1YOCTHAsw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:58:08 2026 by rpki-client