Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: TexULDik8s3LOaQRwNqE7BsR2ngk1uHDwgm8fGdfW58=
Subject key identifier: DC:C5:12:B9:AC:51:88:39:8F:6D:CD:32:A6:50:91:8F:2B:AC:56:A4
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019D98F4D987F90169A59ECA36F177961D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0C07
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: WxVco7fydG1+OmtFxr15b/vDy7mHcee0D8gcCich8n8=)
2: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d9:87:f9:01:69:a5:9e:ca:36:f1:77:96:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=dcc512b9ac5188398f6dcd32a650918f2bac56a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:6f:9e:6e:20:2e:2b:4a:a9:89:20:65:1f:
72:80:c4:21:be:b8:60:a1:19:c2:91:f8:03:fa:24:
fb:72:10:af:f7:4a:09:65:e4:ae:b6:15:fe:d1:dc:
c5:6a:f2:e5:d7:58:d8:38:ea:20:6d:84:ac:c1:c5:
5d:5e:da:24:10:d5:1f:25:7d:19:c3:20:d6:61:ab:
8a:c5:68:a0:11:12:36:d7:d2:1c:6d:0f:39:db:89:
47:59:66:30:d4:65:1e:c7:ac:57:fa:dd:aa:75:5d:
3d:d8:98:f3:43:fe:44:2c:ed:94:8b:4a:67:f2:92:
e4:ee:e3:47:36:59:57:4c:4b:4a:c9:28:8f:db:05:
92:93:14:d4:6e:0f:01:ce:82:19:7c:5e:35:5e:a7:
70:32:9a:53:d7:e0:94:30:e8:be:cf:03:cf:5e:b6:
d1:95:da:21:85:e4:0b:1c:fa:3e:8e:09:78:8e:4b:
b9:fa:23:8c:8c:b8:65:08:ee:00:02:40:b1:90:2d:
32:70:27:43:a2:49:8a:8d:67:6f:eb:41:3b:52:dc:
73:32:49:57:14:39:ab:d1:87:5a:6d:7c:e4:36:c5:
8d:ac:14:ca:f8:d1:78:3a:21:30:4b:9f:34:fc:b9:
30:ed:7f:3b:7a:31:fc:62:19:0e:b3:b4:75:ca:64:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C5:12:B9:AC:51:88:39:8F:6D:CD:32:A6:50:91:8F:2B:AC:56:A4
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:62:de:98:bb:2e:08:bf:c3:02:2b:7d:a9:ab:7d:f2:99:1c:
3a:b2:cd:df:f9:73:5c:2b:30:80:8f:82:ee:05:8d:ca:be:0e:
90:28:a9:f7:f0:2a:2a:10:06:95:59:ba:3c:30:76:bc:9c:c7:
81:13:ee:08:b9:1c:ed:c2:7e:db:51:da:d2:24:00:5b:a6:d5:
68:44:47:5d:79:52:3b:61:2c:ad:8f:5c:29:dc:7c:c9:5a:51:
96:51:88:2a:b2:65:c1:44:85:c9:4a:4a:7c:33:cc:cb:29:d6:
86:90:6c:43:a6:8c:7e:56:43:9b:c5:96:b1:f0:f4:cd:71:be:
ee:4a:b0:3b:8c:f8:47:24:5e:7e:da:16:a1:db:87:fd:4b:92:
52:0f:95:f4:58:98:ac:1d:cb:cb:3e:71:3b:81:c1:f4:aa:45:
9e:9c:8e:ee:49:5b:43:98:54:15:f9:f6:1a:16:a2:86:10:9e:
d7:9b:e8:72:be:73:d7:2f:a3:10:b6:07:22:1b:ad:46:43:0c:
35:1b:aa:7f:ca:c5:fb:e0:c3:b7:69:ce:75:d6:9b:3c:89:85:
8f:79:43:29:59:77:98:2a:31:da:a6:ce:37:33:86:4e:d9:b2:
47:f0:22:6f:0e:70:ae:83:82:a9:32:77:ac:3b:98:01:1c:88:
2f:aa:73:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9NmH+QFppZ7KNvF3lh0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw
YWNkOTcwHhcNMjYwNDE3MDEwMTE2WhcNMjYwNDE4MDEwMTE2WjAzMTEwLwYDVQQD
EyhkY2M1MTJiOWFjNTE4ODM5OGY2ZGNkMzJhNjUwOTE4ZjJiYWM1NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ppvnm4gLitKqYkgZR9ygMQhvrhg
oRnCkfgD+iT7chCv90oJZeSuthX+0dzFavLl11jYOOogbYSswcVdXtokENUfJX0Z
wyDWYauKxWigERI219IcbQ8524lHWWYw1GUex6xX+t2qdV092JjzQ/5ELO2Ui0pn
8pLk7uNHNllXTEtKySiP2wWSkxTUbg8BzoIZfF41XqdwMppT1+CUMOi+zwPPXrbR
ldohheQLHPo+jgl4jku5+iOMjLhlCO4AAkCxkC0ycCdDokmKjWdv60E7UtxzMklX
FDmr0YdabXzkNsWNrBTK+NF4OiEwS580/Lkw7X87ejH8YhkOs7R1ymQOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzFErmsUYg5j23NMqZQkY8rrFakMB8GA1UdIwQY
MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt
YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2
LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGLemLsu
CL/DAit9qat98pkcOrLN3/lzXCswgI+C7gWNyr4OkCip9/AqKhAGlVm6PDB2vJzH
gRPuCLkc7cJ+21Ha0iQAW6bVaERHXXlSO2EsrY9cKdx8yVpRllGIKrJlwUSFyUpK
fDPMyynWhpBsQ6aMflZDm8WWsfD0zXG+7kqwO4z4RyReftoWoduH/UuSUg+V9FiY
rB3Lyz5xO4HB9KpFnpyO7klbQ5hUFfn2GhaihhCe15vocr5z1y+jELYHIhutRkMM
NRuqf8rF++DDt2nOddabPImFj3lDKVl3mCox2qbONzOGTtmyR/Aibw5wroOCqTJ3
rDuYARyIL6pzmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:17 2026 by rpki-client