
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: e6XUutZ9VU+V2oPlGfocHP7UItRUB6kfbwkc0vg9kcc=
Subject key identifier: 98:AF:05:98:7B:81:01:1B:5A:57:13:2C:20:3C:E9:29:1E:BB:EE:BF
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 01A0F41F49180874E27BB3C1B1195236E67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1A81
Signing time: Wed 30 Sep 2026 21:01:26 +0000
Manifest this update: Wed 30 Sep 2026 21:01:26 +0000
Manifest next update: Thu 01 Oct 2026 21:01:26 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: Bd2aWodU/ErzUmvwLJxHH/Wp6rZsEe+PcVMAxHDt9aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:1f:49:18:08:74:e2:7b:b3:c1:b1:19:52:36:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Sep 30 21:01:26 2026 GMT
Not After : Oct 1 21:01:26 2026 GMT
Subject: CN=98af05987b81011b5a57132c203ce9291ebbeebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:fe:d6:37:2c:08:e5:c1:dc:2e:8c:39:6e:
e0:00:d1:37:00:93:d2:3b:bf:aa:b5:04:b3:e4:85:
f4:b1:b5:39:30:04:c2:9e:60:9a:fd:fa:73:94:5e:
ea:e8:99:44:39:73:df:bd:07:f8:46:00:7e:2b:2d:
7f:6e:28:6e:d5:a0:0e:ac:63:49:b1:ad:70:04:a7:
b2:4e:7d:c8:53:24:6e:39:75:81:a4:32:fd:59:03:
0c:d4:32:3b:d8:7c:93:7b:7e:ad:aa:ec:5a:22:09:
e1:14:1a:57:90:8f:fb:21:1a:29:52:77:17:57:ab:
2d:f1:03:7e:e6:bc:3e:82:c2:4d:c6:f5:63:fc:c8:
fa:32:4a:ff:de:bc:7b:94:71:7b:d0:c3:d9:2f:aa:
b8:11:c9:4d:ac:9a:d7:1c:b9:43:d3:4d:a9:75:30:
dc:a4:23:3e:ce:af:87:5d:23:77:22:38:c6:61:5b:
7b:fe:40:35:3b:0d:90:f2:69:82:12:94:0e:81:5e:
31:fb:7c:c6:2b:82:f2:c2:93:d4:81:e7:17:49:ec:
44:21:05:78:af:0f:f9:58:b2:f7:e5:a2:12:2f:33:
25:d2:87:16:9a:3c:92:35:ef:d7:1a:4a:33:26:c0:
c4:2c:6f:fa:2c:ec:1e:3f:63:14:b8:80:4e:a2:53:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:05:98:7B:81:01:1B:5A:57:13:2C:20:3C:E9:29:1E:BB:EE:BF
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:dd:0c:27:58:70:16:aa:b2:8f:6c:72:72:e2:a0:ec:9c:
e0:0a:6c:44:ca:7f:e0:0e:02:9c:a6:32:c1:8f:e8:0d:66:74:
f2:ba:f9:1f:f7:b3:cb:15:5a:77:b0:06:36:27:0a:e1:c6:8a:
c4:66:97:a5:b8:93:6c:94:78:b1:af:46:3d:00:2f:07:79:17:
87:7b:c1:aa:56:fa:b7:3c:a1:7b:c4:17:8c:7d:8d:62:37:db:
75:5d:9c:9c:84:e0:73:da:ed:87:a2:e5:8d:c8:ea:2c:f0:40:
79:a2:e8:ae:f9:e7:fc:ae:95:03:66:5d:96:f2:9d:58:30:b0:
15:27:f5:cb:90:d3:62:2f:22:7a:69:ff:e8:d3:6d:33:09:29:
74:d9:bf:83:ff:42:91:da:2f:c4:64:d3:e5:3d:ab:ab:b1:c0:
03:b0:98:6b:23:c6:8b:41:98:72:77:f5:b2:8f:e7:89:94:cd:
05:e3:c1:e6:47:39:70:d0:28:4a:32:73:e1:37:be:af:15:46:
90:d7:71:f7:33:0a:db:8d:e2:2d:26:18:d4:23:33:3a:4f:aa:
08:a4:9e:c3:94:38:20:09:9b:eb:a1:f5:fa:19:c0:f1:9c:51:
9e:f4:71:d5:a0:ad:b7:fc:69:bd:39:09:9a:ee:0d:02:19:70:
96:63:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:40:21 2026 by rpki-client