Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: aiOQbNnb1zgugJAGA/tIRjTz3BnAQ/YZycI/k4ihTuw=
Subject key identifier: 00:DF:EC:57:62:EF:D9:60:21:4F:E8:16:A8:C4:B6:5B:FF:C2:97:19
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 01A0FCEBEC9CC72789ABBA0E8F2B1D840062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0DC9
Signing time: Fri 02 Oct 2026 14:01:54 +0000
Manifest this update: Fri 02 Oct 2026 14:01:54 +0000
Manifest next update: Sat 03 Oct 2026 14:01:54 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: c2RCDK2KBj7+45h6qvi9o/9Rm1OrIBwkNmN0u4lThUk=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 14:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:eb:ec:9c:c7:27:89:ab:ba:0e:8f:2b:1d:84:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Oct 2 14:01:54 2026 GMT
Not After : Oct 3 14:01:54 2026 GMT
Subject: CN=00dfec5762efd960214fe816a8c4b65bffc29719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:3b:e8:e1:70:5a:df:9a:f4:7a:6f:d2:72:
80:4a:eb:0e:28:f5:30:e6:90:65:4d:95:12:db:a8:
f8:6c:5f:d7:b3:d9:04:4f:6d:78:64:67:0d:c6:bc:
6d:36:6c:57:c6:63:b2:35:12:82:b4:39:8a:7f:1d:
47:0f:f3:f0:5b:f2:f4:50:65:d8:73:04:22:ef:aa:
1d:5b:63:77:0f:f8:5c:74:a4:f9:f4:93:a3:a6:45:
c6:da:67:ba:b8:9d:2d:c8:f3:9f:4d:6e:f8:f9:be:
6d:b4:59:fa:b4:66:78:59:b1:c3:95:59:bf:d1:12:
9d:23:62:60:73:ed:8a:db:c9:af:5a:37:7d:2d:e0:
2c:7f:21:bd:8b:4f:83:3b:ab:66:b4:7b:64:a6:4f:
d3:ed:38:46:06:08:0e:90:e6:b6:b5:6c:43:85:80:
d4:da:81:36:d9:5d:31:e6:34:96:c5:c3:6f:8d:95:
a1:f5:1e:1f:5f:af:ba:b5:03:5f:02:83:a6:a3:ad:
c9:b9:21:e1:aa:0a:1e:f6:b3:03:a6:c4:f6:cd:0c:
85:b0:ac:9d:ba:40:77:81:7e:5f:e9:21:13:16:fb:
89:12:de:05:79:35:87:c7:40:33:11:3b:a2:3d:c5:
6d:3d:03:5d:a5:27:21:30:9a:e1:7e:8c:85:31:6c:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:EC:57:62:EF:D9:60:21:4F:E8:16:A8:C4:B6:5B:FF:C2:97:19
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:64:38:6b:ad:48:ed:bb:68:67:54:d1:95:f2:5d:d7:1c:73:
b5:90:d9:2d:49:30:72:3a:ca:b7:43:4b:d3:31:8c:e6:ba:b5:
fc:5d:2c:19:84:4a:41:a4:ad:08:d1:99:1a:55:64:1f:c9:ef:
bb:51:9f:3d:df:27:5c:65:23:83:20:ac:8f:6b:ae:b5:7e:b8:
1e:97:a4:4e:d9:89:a2:82:cd:c3:de:46:11:3b:42:f5:59:9f:
71:4d:17:c2:82:48:17:37:bd:97:ca:81:5a:4f:98:5b:81:e6:
ef:2f:1d:77:6c:da:9d:39:90:e2:e3:3e:c3:98:80:e8:13:e9:
9f:6d:7e:fc:a9:5e:f2:3e:01:b3:42:7d:e3:e2:af:37:e8:af:
1b:1d:e2:c2:8f:c4:b4:1c:cd:4f:a9:19:a7:cc:11:5b:a9:fe:
5a:8f:82:be:99:88:20:39:ea:9b:18:df:4f:03:94:94:62:84:
e0:0e:36:8c:3b:51:08:fa:e3:f9:77:a7:34:bd:11:7a:08:6a:
f5:b9:6b:84:0b:88:b8:aa:fa:0d:89:b1:43:7e:17:bf:8d:c6:
c0:30:05:2c:8b:71:45:67:15:be:eb:6f:ae:72:24:c1:5b:a5:
b0:5c:84:a4:57:e4:e3:b0:6a:96:0d:c6:ea:32:f7:2c:28:18:
6c:77:63:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD86+ycxyeJq7oOjysdhABiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw
YWNkOTcwHhcNMjYxMDAyMTQwMTU0WhcNMjYxMDAzMTQwMTU0WjAzMTEwLwYDVQQD
EygwMGRmZWM1NzYyZWZkOTYwMjE0ZmU4MTZhOGM0YjY1YmZmYzI5NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZY76OFwWt+a9Hpv0nKASusOKPUw
5pBlTZUS26j4bF/Xs9kET214ZGcNxrxtNmxXxmOyNRKCtDmKfx1HD/PwW/L0UGXY
cwQi76odW2N3D/hcdKT59JOjpkXG2me6uJ0tyPOfTW74+b5ttFn6tGZ4WbHDlVm/
0RKdI2Jgc+2K28mvWjd9LeAsfyG9i0+DO6tmtHtkpk/T7ThGBggOkOa2tWxDhYDU
2oE22V0x5jSWxcNvjZWh9R4fX6+6tQNfAoOmo63JuSHhqgoe9rMDpsT2zQyFsKyd
ukB3gX5f6SETFvuJEt4FeTWHx0AzETuiPcVtPQNdpSchMJrhfoyFMWz8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADf7Fdi79lgIU/oFqjEtlv/wpcZMB8GA1UdIwQY
MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt
YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2
LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGQ4a61I
7btoZ1TRlfJd1xxztZDZLUkwcjrKt0NL0zGM5rq1/F0sGYRKQaStCNGZGlVkH8nv
u1GfPd8nXGUjgyCsj2uutX64HpekTtmJooLNw95GETtC9VmfcU0XwoJIFze9l8qB
Wk+YW4Hm7y8dd2zanTmQ4uM+w5iA6BPpn21+/Kle8j4Bs0J94+KvN+ivGx3iwo/E
tBzNT6kZp8wRW6n+Wo+CvpmIIDnqmxjfTwOUlGKE4A42jDtRCPrj+XenNL0Reghq
9blrhAuIuKr6DYmxQ34Xv43GwDAFLItxRWcVvutvrnIkwVulsFyEpFfk47Bqlg3G
6jL3LCgYbHdjUA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 20:16:08 2026 by rpki-client