Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: tdjffCZhx2W6qgeq2j5Z2klXVke9NnxAUQnZkq8gC1k=
Subject key identifier: 64:3B:D3:56:B6:08:EF:95:54:4E:D5:5B:24:DA:BD:2F:E7:38:B9:C1
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019CA97D7EAB27E777E595956B34CD014547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0B8B
Signing time: Sun 01 Mar 2026 13:01:39 +0000
Manifest this update: Sun 01 Mar 2026 13:01:39 +0000
Manifest next update: Mon 02 Mar 2026 13:01:39 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: Kur9Xai07czkJP42KOWLZb9UGPSfJPpEx2s7ELmkxVk=)
2: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:7e:ab:27:e7:77:e5:95:95:6b:34:cd:01:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Mar 1 13:01:39 2026 GMT
Not After : Mar 2 13:01:39 2026 GMT
Subject: CN=643bd356b608ef95544ed55b24dabd2fe738b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:99:4b:3b:01:66:84:7b:fd:51:10:a4:4d:
ae:10:f7:ad:08:ee:30:47:f1:43:2c:61:10:30:7f:
e9:4d:f7:24:50:11:45:d6:2d:73:0a:de:d6:d4:39:
7a:f3:7a:8c:af:41:9b:3e:b7:0f:ea:18:1d:6b:7a:
78:55:a6:70:9d:81:46:c1:97:12:34:46:00:4b:ad:
8f:4b:5e:6a:be:b0:a1:48:dd:19:d3:bb:14:cb:43:
db:0d:d5:f7:91:3b:31:95:fd:04:9a:24:52:d1:ea:
53:d6:cf:df:ff:98:7c:02:39:84:cb:89:98:f3:05:
26:d8:f8:d7:ce:3d:99:eb:41:e3:fe:a4:4c:16:8b:
7d:d7:b3:44:42:4a:1d:3b:33:50:97:f5:10:a5:7b:
a6:0a:de:c2:3a:04:f8:0a:f2:1d:fe:f7:b2:db:e2:
d8:b6:b5:a9:55:6e:30:b4:35:1e:2a:bd:ae:50:e7:
e4:cc:e2:cd:55:57:c4:c3:b3:c8:7c:de:dc:2f:3f:
e2:dd:6c:7b:b4:b9:45:e7:14:fe:8f:91:6f:2a:05:
43:17:63:be:ec:41:3c:a7:65:5f:df:b9:76:57:25:
7e:cc:c4:d0:21:be:cd:70:68:8b:e5:ad:d8:55:47:
ea:18:58:7e:6d:c0:12:81:94:e0:3e:ba:8a:77:44:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:D3:56:B6:08:EF:95:54:4E:D5:5B:24:DA:BD:2F:E7:38:B9:C1
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:9f:51:2a:61:10:07:f8:ca:78:d8:45:7e:10:2c:df:11:
61:2c:32:9d:c1:a0:85:2f:f2:c5:4b:bb:e3:b5:48:f0:71:a2:
e6:b9:fa:23:d4:c7:25:75:d4:97:ca:cf:67:fb:b9:60:d7:e2:
ae:26:09:95:50:0b:51:97:05:0c:8c:dc:0d:d2:ac:81:72:0c:
e9:3d:80:9d:9f:37:25:ab:1f:e4:01:db:4c:75:bb:af:e1:7e:
3f:b5:6b:41:07:14:b3:92:08:87:85:60:1e:00:3c:07:1b:19:
28:bd:23:29:0e:66:32:56:18:37:fd:ac:7d:62:3b:78:bf:14:
a3:dd:c5:1c:2e:0c:6f:01:d0:fa:54:6f:8e:51:19:aa:8f:e9:
8a:5b:e7:ed:fb:6c:51:6d:77:39:a7:89:11:93:8e:86:76:97:
48:9e:ec:99:14:56:f1:8c:ef:dd:6b:4e:f5:a1:37:57:b5:b2:
fe:2d:3b:a8:83:d5:38:2d:18:e4:6f:ae:8c:50:11:3e:fd:d7:
1c:53:51:a4:7e:3c:f5:7a:ea:a0:e2:74:50:c9:a6:87:38:ac:
1f:51:f0:f0:a5:82:03:72:b4:79:b5:9b:22:77:50:47:79:90:
aa:58:1b:e6:90:2b:54:22:59:16:f9:d3:62:ec:7d:dd:27:f5:
31:ec:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:56 2026 by rpki-client