Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: oeT6S8sgQTzxVbIn/w4L2eTxii95y1PT8Lbw2HD89WY=
Subject key identifier: 0E:06:6B:C2:C7:BE:10:4A:47:1A:DE:07:0F:45:A7:8B:8F:D9:90:9E
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019D26CD7B688126DC783C554DAC861DABA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: nvFi6aBaufOdxgUFtjqvqFbP92wxUj4XWOj1uNO6hOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7b:68:81:26:dc:78:3c:55:4d:ac:86:1d:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=0e066bc2c7be104a471ade070f45a78b8fd9909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:e2:b1:5b:45:81:a6:fd:76:d6:3f:52:db:
b2:72:30:4d:34:ec:dd:9f:53:53:71:ce:ca:90:54:
71:e2:83:a7:2d:b5:23:d3:23:8b:57:47:50:2f:1c:
bc:19:9b:50:2e:d1:ce:6f:b6:18:0b:c4:74:5f:47:
dd:fb:58:41:0f:73:74:a9:7e:2a:42:e1:6a:b0:c7:
7e:d8:a2:bc:c1:01:ac:fe:2b:16:78:7e:18:56:3a:
9d:b1:82:a2:5c:7f:1c:43:24:31:e9:d6:9f:81:48:
72:a6:9c:ed:9a:ae:f9:74:66:79:93:5f:46:f6:a1:
fc:46:a8:aa:3e:da:11:0b:37:49:9e:b5:35:a9:2d:
13:d5:46:f2:c9:f9:4d:2a:79:0f:ab:23:e4:70:4a:
f3:75:59:74:d2:f5:6c:17:90:87:95:07:3f:99:cc:
27:64:ff:9f:37:72:95:01:63:3f:78:f9:0d:09:c1:
92:d2:94:dc:79:7e:26:e7:37:33:30:25:be:67:49:
3d:9e:48:86:1f:dd:41:8d:33:f1:14:ef:b7:65:59:
30:85:75:ba:a1:d7:62:77:2d:6b:b0:f1:5f:01:8b:
6c:b0:dd:2d:b8:aa:54:2e:40:b7:e1:4d:0f:87:bf:
92:55:01:c2:d7:c8:c2:1a:a7:17:ad:da:ab:7f:c6:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:6B:C2:C7:BE:10:4A:47:1A:DE:07:0F:45:A7:8B:8F:D9:90:9E
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:ba:ca:b0:24:58:bb:c0:3c:37:7f:85:04:bd:21:fb:62:
5a:cc:68:8a:0a:4e:1f:a7:b2:de:5a:b3:6b:67:71:2c:73:8f:
95:49:45:97:d6:25:3e:94:c7:4a:26:1c:86:4a:9f:5b:ea:e6:
16:76:e9:e4:1a:ac:bf:71:71:73:35:62:22:7d:49:3c:cb:54:
3a:89:61:2c:0a:72:d3:d6:18:a3:61:e9:26:96:99:4a:73:12:
46:78:5e:1b:69:26:eb:60:4f:b9:58:74:fa:12:a3:ac:6e:5a:
41:69:a2:07:4c:b0:cf:b9:c4:96:45:cf:0e:fa:db:fc:de:fd:
06:d0:22:51:c6:e1:2b:43:31:3c:d1:0b:c9:a5:60:15:ca:6b:
4d:90:f2:d5:eb:ab:b1:f5:46:24:a5:45:e7:b2:23:c7:73:23:
e0:95:2e:de:28:63:1d:3e:f0:1f:30:4d:e7:0d:94:00:15:0b:
14:e6:5f:36:4b:ff:d5:47:25:8c:44:1c:27:f7:be:0d:b4:48:
85:9c:06:68:b5:6f:21:87:da:b9:3f:9a:6e:80:de:87:15:ba:
af:97:be:c2:0a:b5:06:fb:5c:8f:b1:fb:a7:33:9a:61:f7:44:
5c:50:71:36:e3:2e:e9:31:3f:6f:e0:c6:63:1e:cd:ba:a7:90:
83:6d:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:08 2026 by rpki-client