Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 0b6OhH8tCPLXShGSyb7ZkE9J5RrurhfD1kpjm26Y6e4=
Subject key identifier: 03:ED:EF:61:01:DE:2D:77:3D:40:86:76:F7:53:50:2D:8F:A1:A4:6F
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019FACE4224A1B8E867F260B346636C8C096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0D1B
Signing time: Wed 29 Jul 2026 08:00:59 +0000
Manifest this update: Wed 29 Jul 2026 08:00:59 +0000
Manifest next update: Thu 30 Jul 2026 08:00:59 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: u7fONhLOl+4VzgOiDP9/Mbv18tIwHQDin4S2D4TwzPs=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:22:4a:1b:8e:86:7f:26:0b:34:66:36:c8:c0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jul 29 08:00:59 2026 GMT
Not After : Jul 30 08:00:59 2026 GMT
Subject: CN=03edef6101de2d773d408676f753502d8fa1a46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:a3:7f:20:5a:dd:40:31:83:2f:ff:41:07:
61:8e:bb:15:ff:17:7a:ad:3c:0a:3d:e7:ae:59:83:
72:17:eb:bf:ae:e2:f1:b7:d8:0b:88:8f:8e:65:99:
5a:b3:38:07:3c:eb:4e:48:4f:1b:04:eb:ec:bc:c4:
ee:83:e0:a6:2c:f1:71:54:b9:40:32:bd:76:6d:06:
c7:5f:f4:5d:37:cc:8a:67:4d:f7:21:b5:48:55:2a:
27:7e:11:b4:03:b5:68:80:3d:4b:cd:d0:37:05:e8:
74:55:a5:4c:5e:02:69:92:3b:8d:97:7e:c8:1f:7e:
0c:17:17:80:be:7c:6f:f8:de:18:1d:1f:33:44:fe:
f2:99:8a:49:9e:98:e9:6f:b7:d0:13:d9:72:31:f8:
c7:ff:66:ab:68:87:14:67:68:ea:1f:90:18:c9:74:
0e:48:10:c8:7a:96:9c:8b:3c:9a:c1:d6:90:29:e0:
18:92:44:39:05:4c:c6:8a:e9:b3:91:f2:4c:22:4c:
8f:51:d5:58:b3:d9:22:bc:fb:e7:5c:79:61:09:a7:
5b:c7:19:8d:7d:f4:7a:7e:07:26:56:b0:b9:20:73:
09:35:bf:79:60:d4:1b:4c:1d:34:62:c8:c4:92:db:
43:d4:69:4f:9e:44:4b:0e:5d:21:45:a5:29:9d:fb:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:EF:61:01:DE:2D:77:3D:40:86:76:F7:53:50:2D:8F:A1:A4:6F
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:df:a7:1b:76:c8:b7:61:0e:7b:7a:7a:7e:57:55:78:27:c3:
6f:a1:b5:ec:5b:82:e4:12:5f:ff:c2:7e:a4:37:97:ea:36:7e:
ef:79:9d:31:e0:4a:c2:3c:b8:96:3b:1e:68:e5:97:b9:f3:a9:
b6:4a:b5:9a:af:1d:83:01:e5:52:e2:1a:25:e0:16:5d:1b:9a:
8b:a3:f8:0d:eb:16:06:96:d5:c4:98:09:a4:5b:84:ee:eb:65:
f7:94:15:1b:61:b1:79:02:29:7f:a1:9d:11:25:6a:cd:1e:25:
42:33:7d:a1:69:2f:cf:66:8e:f7:34:63:af:08:6f:af:93:4e:
44:9f:50:d4:e6:d7:4c:cf:0e:6f:7c:29:30:87:a9:03:22:7e:
54:86:7c:b5:79:7e:d1:c8:c0:8b:13:c7:76:68:15:9e:a9:6a:
76:39:87:27:d2:c9:c4:85:c0:09:9c:b4:d5:a8:25:fb:8b:94:
bb:78:e9:e3:f6:db:93:19:39:5f:9e:9f:5a:b9:24:59:c0:d7:
98:c5:e0:02:de:9a:bf:13:b1:b4:cf:9b:69:e4:da:22:55:7e:
21:f4:b1:a7:29:27:97:00:aa:0b:f1:7b:ec:51:a6:2f:7a:3e:
8e:a6:ca:cc:3a:50:0a:e7:3b:ef:3b:c0:01:ff:89:1b:39:b8:
ac:5e:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:29 2026 by rpki-client