Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: 0MkiBNgFkGg/xbq0YsOoCNVjHMjtQCHycIV4jq2EIek=
Subject key identifier: 20:78:9A:FD:48:35:41:A2:1E:A4:77:14:48:15:2D:FF:A9:D4:4F:CA
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019E1CB545F05F87746B8DDD6290E2C8A8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 02C6
Signing time: Tue 12 May 2026 15:01:42 +0000
Manifest this update: Tue 12 May 2026 15:01:42 +0000
Manifest next update: Wed 13 May 2026 15:01:42 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: 5AFnM8vbukh5ocQLFAWb1vzKHG8bkNd7Y2Ox0PGtlUU=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:45:f0:5f:87:74:6b:8d:dd:62:90:e2:c8:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: May 12 15:01:42 2026 GMT
Not After : May 13 15:01:42 2026 GMT
Subject: CN=20789afd483541a21ea4771448152dffa9d44fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:02:b0:72:f7:a8:e9:e4:88:fd:00:39:e9:
e9:64:e3:cb:1c:62:ac:7c:13:3d:81:34:0b:d7:47:
5a:94:f1:83:45:48:d6:32:48:b1:05:2c:a2:51:02:
0d:16:a6:7e:8c:e0:d2:7d:3f:35:b7:8f:b4:7a:7b:
05:27:f7:af:bf:12:b3:23:13:4a:18:8e:86:b9:50:
b7:c2:44:09:46:26:ec:14:9d:8c:32:fd:37:05:5f:
da:5a:cc:5b:5a:cf:df:2c:c3:9c:bc:fb:23:19:c0:
b0:4d:14:e1:a4:63:c8:40:8f:88:06:96:a1:86:7a:
53:e3:1b:48:6d:7d:e7:06:dc:0a:8b:eb:f7:4f:93:
bd:3b:30:de:d1:46:51:66:9a:65:80:b4:3c:62:02:
88:56:bc:4b:9f:ba:d2:fc:8f:f9:6f:75:14:9a:3d:
0b:8c:43:01:07:49:ea:c0:c0:1c:af:c7:1c:a4:f8:
77:b3:ed:29:24:69:2b:f5:73:c6:33:05:ca:ac:1e:
ca:d4:a2:85:c9:92:5c:09:a6:7c:6e:f5:b6:19:f4:
10:73:3c:f2:99:eb:23:60:b7:ea:39:ea:40:0b:d4:
33:75:84:06:1d:85:f9:84:2b:18:56:93:9e:fe:9e:
71:2a:09:47:22:e5:9e:64:73:ab:c4:50:3a:79:da:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:9A:FD:48:35:41:A2:1E:A4:77:14:48:15:2D:FF:A9:D4:4F:CA
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5e:85:fb:bb:af:58:8b:24:b1:ba:b1:04:db:b4:ba:95:3d:
85:26:9b:83:2b:15:3b:f4:5d:e4:a2:60:66:87:d7:f8:d2:e3:
48:db:7e:e8:39:5b:a3:74:2f:d0:be:82:5b:7c:b1:52:bd:1e:
e8:c9:52:e7:58:0d:30:71:c7:ea:67:28:45:61:ec:f7:c3:d7:
b8:b5:a7:5e:41:3b:1f:92:96:30:a2:68:e6:d2:64:93:e4:ca:
6b:81:d3:4d:39:b2:de:af:8a:5e:7b:99:4d:49:91:80:f9:58:
3c:37:80:d7:fb:57:ee:ea:32:54:8c:e7:fb:dc:73:07:53:92:
9f:e2:9b:60:ed:94:38:31:31:f0:ac:44:e5:c4:4c:30:cd:61:
ab:d3:b3:7c:e0:a3:66:e5:c1:e4:6b:ad:c2:ed:91:9f:15:a9:
bf:de:b3:2d:65:7e:43:3d:27:2d:69:06:e6:69:b2:4d:51:a8:
23:a3:49:3e:9d:9e:e4:2a:e7:9c:9b:f9:da:d5:2d:70:37:c8:
3a:6b:e0:1e:a2:24:75:00:21:2f:49:5c:42:e3:f2:cd:9f:a9:
41:ab:4c:86:50:53:93:fd:1f:63:a8:1d:02:b8:e2:7b:0d:29:
df:1d:54:6b:13:5e:36:9f:34:2c:3e:51:c6:c6:0b:77:65:57:
e9:d3:13:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctUXwX4d0a43dYpDiyKjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzI1NjIwMzhmMDgxZDE4ZDg1MjY5NDA3MTMxYzk4NDAw
M2U1NzUwHhcNMjYwNTEyMTUwMTQyWhcNMjYwNTEzMTUwMTQyWjAzMTEwLwYDVQQD
EygyMDc4OWFmZDQ4MzU0MWEyMWVhNDc3MTQ0ODE1MmRmZmE5ZDQ0ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoECsHL3qOnkiP0AOenpZOPLHGKs
fBM9gTQL10dalPGDRUjWMkixBSyiUQINFqZ+jODSfT81t4+0ensFJ/evvxKzIxNK
GI6GuVC3wkQJRibsFJ2MMv03BV/aWsxbWs/fLMOcvPsjGcCwTRThpGPIQI+IBpah
hnpT4xtIbX3nBtwKi+v3T5O9OzDe0UZRZpplgLQ8YgKIVrxLn7rS/I/5b3UUmj0L
jEMBB0nqwMAcr8ccpPh3s+0pJGkr9XPGMwXKrB7K1KKFyZJcCaZ8bvW2GfQQczzy
mesjYLfqOepAC9QzdYQGHYX5hCsYVpOe/p5xKglHIuWeZHOrxFA6edr7uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB4mv1INUGiHqR3FEgVLf+p1E/KMB8GA1UdIwQY
MBaAFPfCViA48IHRjYUmlAcTHJhAA+V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDIt
YWQwOTRiMzE0ZTBmLzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDItYWQwOTRiMzE0ZTBm
LzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATF6F+7uv
WIsksbqxBNu0upU9hSabgysVO/Rd5KJgZofX+NLjSNt+6Dlbo3Qv0L6CW3yxUr0e
6MlS51gNMHHH6mcoRWHs98PXuLWnXkE7H5KWMKJo5tJkk+TKa4HTTTmy3q+KXnuZ
TUmRgPlYPDeA1/tX7uoyVIzn+9xzB1OSn+KbYO2UODEx8KxE5cRMMM1hq9OzfOCj
ZuXB5Gutwu2RnxWpv96zLWV+Qz0nLWkG5mmyTVGoI6NJPp2e5CrnnJv52tUtcDfI
OmvgHqIkdQAhL0lcQuPyzZ+pQatMhlBTk/0fY6gdArjiew0p3x1UaxNeNp80LD5R
xsYLd2VX6dMTCQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:42 2026 by rpki-client