Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 2FCxKzVjyYQChPb+G+ZIdlpsvF+90fb1j+JS3ztTMtY=
Subject key identifier: 36:FA:99:76:22:59:6C:1D:46:C5:EA:9F:D3:7B:78:B0:EB:A7:15:58
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019F95B7BA0D1DF418C62A986A3AE954665D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0D0F
Signing time: Fri 24 Jul 2026 20:01:13 +0000
Manifest this update: Fri 24 Jul 2026 20:01:13 +0000
Manifest next update: Sat 25 Jul 2026 20:01:13 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: O6RPgaeUaE9tl9U4nndEqI7xhdAxOSNU7ZKG6mpx3rM=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:ba:0d:1d:f4:18:c6:2a:98:6a:3a:e9:54:66:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jul 24 20:01:13 2026 GMT
Not After : Jul 25 20:01:13 2026 GMT
Subject: CN=36fa997622596c1d46c5ea9fd37b78b0eba71558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:c3:5a:92:ff:d2:59:c5:5e:30:7e:38:9f:
ce:cc:97:db:0b:5d:a9:58:be:26:a6:c3:8d:73:ff:
9b:ff:2f:97:d1:fc:a7:89:2b:cf:04:b1:25:05:7f:
40:44:ce:1b:77:90:cd:39:85:c5:79:92:a0:64:d8:
83:40:8a:21:1e:e9:5a:66:bf:3e:4a:40:fd:66:5a:
63:e3:ff:8c:4d:c8:d7:27:17:cd:11:c3:07:36:7a:
d4:e8:3f:0a:eb:39:e9:f3:8d:bf:57:5d:a7:90:7f:
ce:57:cf:ae:d9:de:cf:80:53:89:da:45:27:1b:1c:
4e:76:5e:fc:98:22:ad:31:4d:07:32:04:98:ef:81:
8a:f0:a6:ba:0f:8e:61:7f:2b:f7:83:77:bc:82:bb:
f0:0a:30:44:6c:5d:44:f4:61:2e:4c:16:10:67:01:
e9:2f:f1:52:a7:8b:0d:11:d3:d4:a3:13:d1:7f:16:
58:c8:c1:04:bc:b8:5e:88:eb:b3:df:50:15:f8:ce:
d5:bc:12:b6:6b:1d:c5:33:7c:eb:0c:2c:12:74:d9:
26:31:28:c6:af:32:1a:3f:8f:a9:c1:41:75:51:7a:
44:68:db:02:ea:c6:84:84:0c:2a:07:0a:bd:9c:f9:
fd:f6:e9:66:72:f3:56:0d:77:f6:fa:91:20:0a:3e:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:99:76:22:59:6C:1D:46:C5:EA:9F:D3:7B:78:B0:EB:A7:15:58
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8d:57:34:0c:b9:68:66:d7:01:4f:85:70:ae:6c:74:37:19:
85:95:05:20:85:1c:39:b0:94:02:dd:6e:03:78:8a:e6:41:91:
cc:62:7e:af:59:20:7c:dd:49:32:aa:61:f8:ca:02:7c:7f:be:
b8:53:a1:87:bf:fa:2b:da:7f:14:86:02:6c:66:f1:5c:4f:eb:
57:6c:41:11:c7:81:53:65:23:f2:37:7c:fe:73:ef:14:c1:7e:
75:ac:85:32:bb:81:3d:1e:87:27:47:fb:64:b6:a8:bb:0f:f4:
8e:c2:6f:af:03:15:67:f5:d1:9b:9a:06:80:b4:9f:9b:e1:85:
e2:71:08:d8:e5:d5:13:cc:0e:b3:30:6f:da:cd:c2:72:12:55:
4e:4f:b8:a0:3d:06:b5:23:57:ec:65:a4:b4:25:f0:e5:b0:4d:
44:d0:91:14:be:77:fd:68:6f:92:36:88:43:d3:be:0d:a3:4d:
91:e0:8d:23:cd:0c:3e:f3:7a:01:f9:14:35:71:3a:ea:ce:44:
01:f3:25:fc:9b:71:aa:22:33:79:1d:a3:c7:e5:c4:9e:72:84:
79:e4:5f:cc:39:93:f9:3e:9c:a4:19:60:82:ea:08:9c:b3:fb:
91:9a:9e:ee:62:64:be:2f:b7:39:19:36:d2:f0:78:63:72:78:
21:43:33:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt7oNHfQYxiqYajrpVGZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw
YWNkOTcwHhcNMjYwNzI0MjAwMTEzWhcNMjYwNzI1MjAwMTEzWjAzMTEwLwYDVQQD
EygzNmZhOTk3NjIyNTk2YzFkNDZjNWVhOWZkMzdiNzhiMGViYTcxNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsjDWpL/0lnFXjB+OJ/OzJfbC12p
WL4mpsONc/+b/y+X0fyniSvPBLElBX9ARM4bd5DNOYXFeZKgZNiDQIohHulaZr8+
SkD9Zlpj4/+MTcjXJxfNEcMHNnrU6D8K6znp842/V12nkH/OV8+u2d7PgFOJ2kUn
GxxOdl78mCKtMU0HMgSY74GK8Ka6D45hfyv3g3e8grvwCjBEbF1E9GEuTBYQZwHp
L/FSp4sNEdPUoxPRfxZYyMEEvLheiOuz31AV+M7VvBK2ax3FM3zrDCwSdNkmMSjG
rzIaP4+pwUF1UXpEaNsC6saEhAwqBwq9nPn99ulmcvNWDXf2+pEgCj7elwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb6mXYiWWwdRsXqn9N7eLDrpxVYMB8GA1UdIwQY
MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt
YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2
LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY1XNAy5
aGbXAU+FcK5sdDcZhZUFIIUcObCUAt1uA3iK5kGRzGJ+r1kgfN1JMqph+MoCfH++
uFOhh7/6K9p/FIYCbGbxXE/rV2xBEceBU2Uj8jd8/nPvFMF+dayFMruBPR6HJ0f7
ZLaouw/0jsJvrwMVZ/XRm5oGgLSfm+GF4nEI2OXVE8wOszBv2s3CchJVTk+4oD0G
tSNX7GWktCXw5bBNRNCRFL53/WhvkjaIQ9O+DaNNkeCNI80MPvN6AfkUNXE66s5E
AfMl/JtxqiIzeR2jx+XEnnKEeeRfzDmT+T6cpBlgguoInLP7kZqe7mJkvi+3ORk2
0vB4Y3J4IUMzCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:12 2026 by rpki-client