Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: kC6awe0k8vo5vl9QSNszUPAjDfIgCSm/xMDmQnUItd0=
Subject key identifier: 93:19:36:BE:A8:10:D1:6C:79:08:5E:C7:1E:DB:1B:8D:9A:9B:E9:21
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019F92B5DCECAB0A1F6264F79A98EA64A180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 06:00:19 +0000
Manifest this update: Fri 24 Jul 2026 06:00:19 +0000
Manifest next update: Sat 25 Jul 2026 06:00:19 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: BJ4hJxVs2y2RYgOvBLYNLcEkQUtEjhFazluNd7aWNeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:dc:ec:ab:0a:1f:62:64:f7:9a:98:ea:64:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jul 24 06:00:19 2026 GMT
Not After : Jul 25 06:00:19 2026 GMT
Subject: CN=931936bea810d16c79085ec71edb1b8d9a9be921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:c1:29:fc:20:3f:94:a8:8f:f5:69:f3:b3:
88:15:41:6f:a1:c8:c2:2b:fe:99:30:13:1d:9d:88:
7a:f8:5a:1b:e9:ed:54:60:25:65:ec:03:e3:03:24:
2d:bf:7a:2a:0f:f2:4c:33:25:35:36:02:c4:1e:20:
b5:f5:6e:9e:af:d2:7e:ea:3b:70:66:ae:bc:16:dd:
2b:1a:80:2b:e4:fc:cb:71:06:86:4a:8d:21:30:31:
ca:c1:47:f0:6c:30:fb:42:fb:be:25:f7:b3:ed:f3:
73:e0:55:06:e4:91:6a:81:ec:3f:78:51:58:69:4e:
a0:fe:11:40:6b:3c:85:52:66:64:87:dc:e1:67:93:
a2:d2:b3:fb:b3:82:26:5c:ee:b9:4f:0a:bf:4d:52:
f2:2e:92:85:20:ba:c4:2e:38:3d:ee:f7:4d:24:7e:
d7:86:34:31:80:24:12:e3:34:40:a2:19:94:3f:f8:
cf:a1:5b:b8:b3:ba:c8:d0:36:1e:c9:91:7a:21:be:
33:41:b8:17:4b:36:80:c2:1a:9f:75:7b:06:52:24:
c7:86:f4:50:13:16:03:34:75:2f:b7:bb:ce:56:32:
c1:ba:a9:86:5f:26:72:a0:01:00:3c:48:3f:6c:5b:
07:68:fe:ea:a3:e5:71:d0:df:34:f9:dd:45:34:81:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:36:BE:A8:10:D1:6C:79:08:5E:C7:1E:DB:1B:8D:9A:9B:E9:21
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:2d:42:5f:b9:db:18:59:13:37:79:90:02:e9:81:13:87:
93:2d:f4:c5:8a:a7:fc:51:70:0a:e3:93:44:63:6f:95:55:aa:
36:b7:50:78:1e:51:b4:8f:e8:3d:dd:f8:b5:74:75:6f:f0:9b:
26:d0:35:13:cb:13:50:6b:56:6c:6e:f0:1b:97:d0:c8:8c:2b:
c6:b5:18:4a:6e:53:25:a3:41:a2:3b:16:36:f4:cb:ce:cc:53:
f9:41:1f:8b:f5:85:a1:89:6e:e9:39:c8:7e:d6:eb:b9:6e:5c:
60:28:ae:36:91:12:da:aa:3c:2c:45:ed:9b:04:65:92:f0:89:
1e:f0:50:42:87:ca:a9:68:2c:d4:9b:6e:7c:78:87:2d:1a:dc:
7c:39:d5:bc:98:2f:89:c1:f2:4e:40:f7:48:b3:94:c9:bc:db:
2a:d3:f7:35:69:bf:a2:11:3e:f4:c1:3f:9a:58:c2:c1:57:30:
95:40:05:96:fe:e3:77:bd:3a:40:4c:17:20:ff:b6:5b:2a:10:
17:6e:42:e5:c2:1e:2e:bd:a2:e4:1a:72:85:4a:e8:1e:97:c1:
19:26:e4:64:51:22:d7:dd:df:61:a3:fc:c3:ad:71:fa:ec:e3:
5d:de:e8:d7:87:69:c5:69:34:f9:fb:74:fb:14:66:d7:20:db:
08:18:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:15 2026 by rpki-client