Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: HpS0FcENj8joUpbCjeM5UMEGIalVdDhL86l8qAumDzg=
Subject key identifier: DA:4B:DC:2A:38:64:19:E8:38:68:57:83:B2:59:AB:65:4C:AE:64:84
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019F8F7EC20D6F42379D3928909889701D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 0386
Signing time: Thu 23 Jul 2026 15:01:16 +0000
Manifest this update: Thu 23 Jul 2026 15:01:16 +0000
Manifest next update: Fri 24 Jul 2026 15:01:16 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: 5XCzUJxMp1+MX9GTN2B46qty2eeKTsU+bhC4M8o/UCc=)
2: JUWv0rlyaPSGEs9gaKm_m0SI6sQ.roa (hash: /ZWPp+W9ll77aX4GuQ5Awv1JLduE2QD1/P7IqlzZJFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:c2:0d:6f:42:37:9d:39:28:90:98:89:70:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Jul 23 15:01:16 2026 GMT
Not After : Jul 24 15:01:16 2026 GMT
Subject: CN=da4bdc2a386419e838685783b259ab654cae6484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:41:aa:98:25:66:ae:fd:70:1c:cf:db:39:
c7:e5:9c:9d:ff:fa:0e:e3:bf:63:c1:50:5a:b6:d4:
2a:c8:b0:ba:d1:11:d7:79:cb:26:61:03:a8:d4:b5:
cc:67:cb:09:a2:fc:cc:46:ce:96:eb:e4:8f:c8:b7:
a6:c1:a2:90:ce:b3:51:06:88:34:6e:03:05:0e:45:
a6:d7:11:35:cf:65:e2:ad:7e:b4:71:2c:ec:9c:ac:
79:90:ba:71:f3:a3:fa:57:d6:a9:3d:cf:1e:c5:56:
13:c1:19:d5:be:92:08:0f:f9:a0:e7:28:21:c6:f6:
e6:c2:23:8a:8a:87:64:8d:2a:b5:ab:3a:ff:29:52:
5b:13:81:d5:d4:f1:1c:24:2e:3c:a0:8b:30:aa:1e:
84:cf:11:9e:cb:cf:51:e7:02:e6:e0:9c:0a:21:c6:
d4:6c:0c:91:ee:b4:2d:f0:fa:6e:ba:8e:fd:78:ba:
f6:9d:29:03:ce:e0:2e:9e:87:50:e0:70:40:21:5e:
47:03:f7:5b:38:d4:8e:fe:2d:b4:ca:1f:9a:0d:e7:
6d:a3:ed:cc:11:b8:50:26:8d:33:bb:d7:14:a7:ac:
cf:8d:da:86:47:83:8e:81:63:87:74:74:68:db:f0:
26:5e:b2:1e:93:5d:f2:78:fa:40:b9:a1:a4:ee:d3:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:DC:2A:38:64:19:E8:38:68:57:83:B2:59:AB:65:4C:AE:64:84
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:81:c2:b7:f4:e0:b8:a4:ff:4d:27:a5:a7:d0:9a:d9:8d:d2:
9d:b9:82:ea:57:7a:d8:1d:3e:b5:42:05:00:b4:3a:a2:b0:01:
a6:72:c0:26:72:33:81:eb:c7:fa:6e:1e:6c:6d:56:67:f9:a5:
85:d1:3b:68:56:23:ea:93:c8:a0:13:02:84:85:13:3d:80:28:
39:c0:98:84:87:ce:a9:eb:44:97:18:89:1f:b1:a4:99:5c:0d:
5d:e9:ce:eb:ad:cf:08:74:d0:18:08:18:21:27:e5:c2:8b:4f:
44:d2:51:56:73:59:84:25:0d:da:da:ad:ea:43:53:42:1b:84:
87:a4:08:d7:30:77:7f:2c:95:74:e3:1f:5a:83:b0:2d:44:b6:
02:7f:22:90:d6:34:f0:93:4f:46:e3:e2:46:3c:20:99:44:3c:
ad:22:1b:57:79:6d:6e:61:a2:69:a4:b8:bb:5e:2c:d3:07:45:
ff:a7:05:4d:8e:2a:ee:83:5f:33:67:01:29:85:5d:72:7b:5c:
23:c9:1b:09:20:a0:e1:86:7a:c0:23:23:fe:a6:79:ab:4d:a9:
90:79:3f:f7:4c:b0:d7:b9:ce:b9:2d:6c:6d:49:1b:f5:62:19:
d8:68:6e:84:26:52:16:8b:84:88:3a:22:8f:3d:8f:b4:f5:7c:
c1:22:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:51 2026 by rpki-client