Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: QH89peUTTESmGOuoH4HWdaXTPNFBxue4bPtSad/WaLI=
Subject key identifier: A0:53:FE:19:37:6C:E0:76:03:BD:13:DA:F7:C3:1E:A3:89:31:58:7E
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 01A0F5322FA00116CC865F1373DAE93C7C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0DC5
Signing time: Thu 01 Oct 2026 02:01:41 +0000
Manifest this update: Thu 01 Oct 2026 02:01:41 +0000
Manifest next update: Fri 02 Oct 2026 02:01:41 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: MCRPSWTfns+AkYXRYES+dbDeHed5ZUcgusWVf+r9jyM=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:32:2f:a0:01:16:cc:86:5f:13:73:da:e9:3c:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Oct 1 02:01:41 2026 GMT
Not After : Oct 2 02:01:41 2026 GMT
Subject: CN=a053fe19376ce07603bd13daf7c31ea38931587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:3b:6a:90:64:48:5d:63:9b:6b:fd:4f:8b:
ba:eb:b9:17:25:2e:fe:73:f2:97:e7:df:5b:27:11:
6b:92:53:26:5f:b5:52:cb:84:66:64:29:26:39:1c:
d6:98:51:a3:c5:c5:aa:e1:ea:f2:65:ce:61:36:ed:
bf:60:87:55:dd:52:21:ee:a9:a3:51:47:bf:eb:04:
15:4f:e3:ae:7c:ac:a9:69:19:6c:85:d8:67:9e:d6:
a6:5f:a2:c0:53:1d:99:8a:3a:18:6d:a6:08:fc:0b:
d1:21:d6:4e:aa:05:e2:fd:50:7b:5f:ca:87:a4:6c:
76:b5:97:ba:c3:03:61:dd:17:7d:40:02:8a:a1:7c:
01:a9:90:e3:58:47:c2:6e:d5:b1:f1:b0:88:60:b6:
c9:56:c9:e3:a8:36:75:70:6f:1d:95:72:40:cd:f7:
95:ad:d5:63:f3:bb:d9:d4:9c:b5:9f:c7:0e:53:f5:
0a:6d:52:3f:a5:b6:e3:7c:d4:dc:a3:b1:9d:7b:48:
53:4f:f2:2d:23:35:70:86:11:22:cd:18:3b:64:3e:
6e:73:3d:5d:59:35:a5:8d:bb:a4:66:c6:86:e1:07:
3c:7a:02:d4:7c:3a:fd:4d:87:3c:5d:24:fb:62:90:
74:31:47:cd:08:63:9f:52:2a:93:67:b8:e6:c8:87:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:FE:19:37:6C:E0:76:03:BD:13:DA:F7:C3:1E:A3:89:31:58:7E
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:04:ed:a5:b0:69:64:28:ad:94:32:20:59:79:ee:5b:65:38:
66:11:79:0d:6b:7f:27:2b:31:06:c6:dd:51:a1:ad:b6:dc:33:
4b:4e:3e:6b:58:e2:50:b2:71:df:91:cd:5a:4b:a6:dc:36:46:
7e:9c:19:19:30:13:90:e6:05:ab:65:f9:52:c6:f1:d4:2b:f3:
43:57:65:0c:c3:53:e0:f0:46:23:58:a9:e7:cb:c1:bf:b8:2f:
c4:3b:4b:a9:eb:65:34:44:de:50:dc:25:b5:2c:db:07:62:06:
f0:2b:47:1a:b1:80:1f:6a:cb:74:14:3d:11:5c:fd:89:5b:b7:
1e:16:9e:c3:80:dc:b8:12:b2:3f:2a:22:9f:8f:13:1c:e6:fb:
65:78:db:49:04:62:f8:b8:93:3c:fb:ad:72:a4:5d:d5:c8:bf:
e6:b6:2b:bb:dd:89:1a:a1:f1:04:16:8c:d1:74:94:4b:33:3e:
38:1c:44:7a:7f:81:b1:35:5f:06:35:ec:01:ca:c1:a5:a6:46:
8e:ae:62:04:29:ce:2a:2f:fe:21:b9:e8:6a:1f:0d:35:df:65:
aa:29:f0:8c:3c:11:20:3d:fb:ef:d3:ff:80:84:c1:c1:6e:49:
79:aa:ae:9e:50:c6:5b:aa:13:68:fe:17:27:b1:fa:91:2d:7a:
ec:a4:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:15:22 2026 by rpki-client