Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: dA864y+y20x/NlQHIFIdrxl7HFf0B2L7yy4ksZcHZ+U=
Subject key identifier: 2A:A4:1F:CF:E2:F6:D9:0C:A8:AA:72:8A:3B:B7:A5:D5:60:89:EE:12
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019F946DDBBC39AD7570CD392AF305F93B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 08B6
Signing time: Fri 24 Jul 2026 14:00:55 +0000
Manifest this update: Fri 24 Jul 2026 14:00:55 +0000
Manifest next update: Sat 25 Jul 2026 14:00:55 +0000
Files and hashes: 1: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (hash: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: WOoBoaKnug3c/eTF+AftzpN49bDb5L6LMIqkSrE79gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:db:bc:39:ad:75:70:cd:39:2a:f3:05:f9:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Jul 24 14:00:55 2026 GMT
Not After : Jul 25 14:00:55 2026 GMT
Subject: CN=2aa41fcfe2f6d90ca8aa728a3bb7a5d56089ee12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:10:5a:81:39:5e:00:4d:bb:a6:eb:5a:ad:
4c:a9:a8:6e:5f:6e:e7:be:29:c3:6f:05:fa:65:59:
b7:ba:ef:e4:c6:df:ba:fc:82:66:f3:08:56:44:9c:
d9:68:b7:71:b8:a9:97:a6:5e:6b:a1:78:66:cc:e2:
90:41:d2:de:a9:90:d6:49:4b:d3:1e:0b:61:2f:fd:
c4:74:8a:62:54:78:35:e7:7a:ed:11:d9:fc:58:85:
65:ba:5d:6a:93:87:29:ae:4d:e6:41:a9:1b:79:cf:
c2:fe:df:10:2e:27:b5:62:20:5d:a2:7e:e2:67:35:
91:65:2c:f8:fd:cb:37:8f:cf:4c:ed:a2:8c:d3:19:
3e:af:06:ae:f2:d6:f7:f3:9c:65:af:f8:74:84:bc:
a0:ed:08:e6:bf:42:89:4d:81:81:0a:1d:61:a1:4a:
b1:41:e4:3d:02:27:2d:80:55:5c:1f:46:3c:b6:d4:
31:5e:d1:c1:a4:0c:07:86:93:54:f9:b3:6d:e4:64:
b7:ee:48:9e:68:86:24:0c:69:e0:65:28:27:15:20:
e7:10:86:61:0d:88:75:44:fc:e3:3a:81:f6:10:ea:
14:98:ca:80:7b:d7:b6:ca:00:be:a3:20:ab:d5:df:
05:7f:f9:e6:c4:f6:38:0a:76:c3:c3:e2:f4:4e:18:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:1F:CF:E2:F6:D9:0C:A8:AA:72:8A:3B:B7:A5:D5:60:89:EE:12
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:35:a4:e7:77:2b:34:61:4a:cb:0a:4c:2c:60:fe:5d:01:95:
5d:6f:fc:ad:c5:79:d8:6a:da:c9:4a:ea:5b:7e:c3:77:1a:f7:
ec:52:3c:9b:50:44:fb:5a:42:10:0c:f2:9f:da:90:2b:2e:df:
78:fe:64:11:cd:99:0e:e8:fe:51:1d:c2:c0:52:fb:68:dc:1c:
37:6d:6e:b0:6e:83:8e:03:7e:d3:2d:1c:85:72:79:67:b6:a7:
e9:8b:a0:2c:39:ed:b5:91:e9:d2:81:b9:b1:1c:5c:1a:cf:fc:
ee:b1:59:2b:b6:75:ca:9a:2c:75:60:70:b7:4c:e7:c7:50:eb:
a7:78:40:54:36:2f:b0:78:64:37:1f:43:f6:69:bd:6e:c0:41:
17:a2:fc:70:bc:24:54:93:20:e3:1f:d9:74:b8:f4:ac:9f:5d:
57:7c:56:07:ad:1b:b1:0e:35:05:1a:0b:49:a9:91:5e:22:1d:
ac:a5:ba:c3:31:9f:a1:f9:1a:09:e7:52:6f:0b:93:e1:b6:aa:
5b:ec:c2:d5:4d:e8:10:d2:d6:a0:80:2d:35:3f:e1:84:8c:92:
7e:1e:28:21:a5:38:73:57:52:5c:39:fe:6b:25:35:6e:d5:7b:
76:e9:76:02:19:b7:f7:2b:2b:68:9a:a2:fa:4f:ed:02:c9:9a:
0a:89:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:52:08 2026 by rpki-client