Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: F2marxLrGV3MO/HWiLB3B7BsLuvkQxdcDbaez+/HNKw=
Subject key identifier: D4:59:EC:AE:45:EB:6A:2A:D6:50:39:62:61:6A:D1:36:1A:65:1E:D1
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019EC148F6150C65D6EAC4EE5A86D2789EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0CA1
Signing time: Sat 13 Jun 2026 14:00:44 +0000
Manifest this update: Sat 13 Jun 2026 14:00:44 +0000
Manifest next update: Sun 14 Jun 2026 14:00:44 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: HDP7zfjvNrZAx8gso3HQIu3p8ypbbTK4FSoCsoMwvRI=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:f6:15:0c:65:d6:ea:c4:ee:5a:86:d2:78:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jun 13 14:00:44 2026 GMT
Not After : Jun 14 14:00:44 2026 GMT
Subject: CN=d459ecae45eb6a2ad6503962616ad1361a651ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:99:99:e5:3d:fb:ba:04:85:bf:67:74:9e:
91:90:67:11:1a:24:66:86:0a:59:8a:74:af:7b:a8:
b2:4d:91:d9:ff:11:bd:59:e9:d3:01:99:d5:58:5f:
b8:a7:2f:b5:cc:c5:20:04:e9:e8:ca:85:a8:b2:14:
00:e4:89:16:0d:09:16:06:5e:0f:e9:92:90:57:8a:
85:55:73:73:72:f2:c8:e4:68:fc:30:42:d4:80:96:
d8:0b:d2:e1:34:67:63:9b:0b:44:b6:06:c2:5b:de:
a2:0f:51:69:71:1c:e6:dc:cf:2c:65:81:88:3a:ad:
f8:fc:0e:71:1f:8d:e8:5a:86:71:73:12:da:3a:85:
e7:72:d5:e1:6c:1c:7d:99:fd:42:a8:01:23:00:ef:
46:20:16:47:51:81:6f:b2:bb:b0:59:32:52:cd:9c:
f9:d0:ff:df:e0:c1:1a:47:4c:83:0f:d7:80:ee:5f:
a7:98:2b:d1:a9:6d:c8:9b:3a:ff:38:9d:85:93:88:
9c:77:33:2a:68:3c:08:8e:14:fe:aa:f1:53:21:35:
09:96:71:cd:08:49:53:3a:19:60:8b:09:f9:3c:f0:
2e:4e:ea:53:1b:67:59:c4:47:26:1d:09:83:d3:64:
37:ab:41:c5:97:dc:d2:3c:ad:e5:ab:d8:7f:bd:e5:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:EC:AE:45:EB:6A:2A:D6:50:39:62:61:6A:D1:36:1A:65:1E:D1
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:95:48:cf:bb:57:8f:b5:a5:03:1a:2b:5d:cc:2f:17:1e:c8:
1b:68:97:4e:29:f2:e5:4c:42:65:d7:fc:01:fa:af:95:bc:db:
3b:70:95:d1:23:4a:c3:2f:20:ff:77:77:ed:16:17:ef:71:cc:
e2:d1:f4:e9:6a:7d:e4:7a:89:19:85:30:d9:b8:fd:05:85:c3:
30:ff:1d:d4:33:59:d2:84:cb:ac:76:60:79:3f:ff:6e:9d:e3:
a4:3b:be:ba:52:55:79:f6:20:a4:9f:4f:7e:1c:c9:a8:45:39:
2a:c6:ec:b1:68:32:6f:d0:7c:60:9d:12:b5:cd:a8:a9:3d:cb:
e8:18:1a:cc:00:68:e3:5e:ae:af:4c:07:fa:ba:32:ca:38:63:
36:94:22:06:f0:7c:13:e6:c6:f7:ad:cb:87:3d:e7:f6:64:3e:
e1:e5:68:6d:5d:92:2d:b7:da:c5:e1:06:80:64:2e:4c:ec:b3:
d5:b4:50:c3:d9:1c:1d:47:93:7f:ec:9b:22:83:d4:da:a4:b3:
6a:06:42:36:76:b5:2c:dc:27:2e:da:bf:84:21:6f:18:3c:92:
e3:fc:21:97:bd:c3:9e:b7:cd:b9:fa:b0:f4:e5:86:38:21:e3:
55:a2:4f:e0:b1:8c:31:e2:f9:54:65:5c:71:bd:0e:14:f6:62:
cf:e4:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:20:58 2026 by rpki-client