Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 1UMJIZOZSv4s7Mnz0xqRW+tV8t/NdSIwdyT/riL7jrQ=
Subject key identifier: 45:92:BB:41:F8:85:4C:09:53:2D:94:F4:EA:0E:69:99:85:DD:55:EF
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019D28F32615444699ACF1CDEB671F46965C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0BCD
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: 3SQ7DunGVmvR6RzVKqhfl1op/TXKeC2337//AwGHwPg=)
2: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:26:15:44:46:99:ac:f1:cd:eb:67:1f:46:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=4592bb41f8854c09532d94f4ea0e699985dd55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:b5:a1:c3:37:f5:ab:1e:c7:1f:d0:c7:03:
7d:46:a9:1e:6d:4d:69:9c:6b:53:50:7e:27:2d:04:
1f:6c:21:fb:30:21:31:12:98:75:3a:f1:b4:78:02:
1f:eb:f5:9a:a0:76:1e:20:4a:7e:48:0f:0f:26:01:
da:a2:9f:87:1e:99:4b:05:c9:1f:53:c9:d6:cf:9c:
03:e8:05:97:6a:11:02:b1:5f:3c:ff:dd:94:ef:31:
2b:37:d1:36:7f:76:c5:14:36:cd:47:76:8b:05:8f:
63:dc:a9:04:04:be:38:72:10:c0:8b:e6:3e:b3:43:
21:74:c1:3a:6c:50:6b:c7:20:56:d9:d4:48:b5:52:
7d:b2:5d:5e:67:e9:00:7e:ab:f8:3c:45:1d:c2:a3:
0f:5d:48:7d:fd:81:27:98:4a:af:c5:5a:d8:bc:30:
fa:c1:d2:c4:e5:1c:b6:a8:66:d8:4f:2b:b1:9f:37:
3e:6d:11:fc:c8:f3:5a:77:f3:04:1d:a9:11:a9:97:
ea:eb:94:09:a8:aa:6e:22:e6:d6:c1:bb:7a:a6:f9:
65:fe:12:03:f0:01:20:c9:71:a1:8b:5d:e7:9d:2d:
d2:6c:30:d6:60:7f:3a:00:33:f1:1a:35:56:c5:d1:
e5:82:78:92:69:f4:06:70:7e:6d:71:70:02:81:01:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:BB:41:F8:85:4C:09:53:2D:94:F4:EA:0E:69:99:85:DD:55:EF
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:ee:cc:60:3b:ea:77:31:a0:67:af:9d:2f:96:a9:e7:76:
1b:b2:fd:ee:24:4d:dd:6d:37:15:7e:35:f9:52:63:e2:94:06:
c5:48:9c:ce:a1:7c:f3:19:03:55:eb:fe:90:08:c3:12:9c:13:
ad:41:6b:71:f1:7c:dd:a2:1c:2d:cf:5b:d7:2f:1a:99:4b:3b:
60:f4:3c:7c:a3:c2:6e:e4:93:79:b3:bc:6b:bb:c0:67:80:63:
24:d8:7e:c7:91:30:d3:69:4b:11:74:a5:44:b8:95:a8:17:4e:
a4:12:d5:b6:e2:c3:20:0d:8c:25:7a:24:05:5d:bc:7b:f2:b2:
f5:7c:3c:54:52:01:61:09:e7:f9:a5:46:d3:3d:bf:a7:91:36:
b3:5c:d0:39:2c:94:0a:b7:ac:2e:60:9c:6f:bd:cc:16:c7:6f:
0f:2c:c1:46:f4:a5:f0:88:cd:2a:52:24:b3:18:1c:f2:44:1d:
8a:d7:bd:2d:06:47:0e:1c:0e:ad:bc:68:a8:88:0c:50:9a:9f:
1b:e8:64:a2:db:f7:d3:24:9d:d5:81:8d:1d:3a:a3:7e:78:27:
d9:37:91:cd:1f:6e:27:1b:f1:08:00:d0:72:7b:b6:f7:57:4b:
25:23:6e:2f:ae:02:26:39:86:67:a1:5a:79:cc:ab:d3:06:33:
7d:61:8a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8yYVREaZrPHN62cfRpZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw
YWNkOTcwHhcNMjYwMzI2MDcwMTU2WhcNMjYwMzI3MDcwMTU2WjAzMTEwLwYDVQQD
Eyg0NTkyYmI0MWY4ODU0YzA5NTMyZDk0ZjRlYTBlNjk5OTg1ZGQ1NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFW1ocM39asexx/QxwN9RqkebU1p
nGtTUH4nLQQfbCH7MCExEph1OvG0eAIf6/WaoHYeIEp+SA8PJgHaop+HHplLBckf
U8nWz5wD6AWXahECsV88/92U7zErN9E2f3bFFDbNR3aLBY9j3KkEBL44chDAi+Y+
s0MhdME6bFBrxyBW2dRItVJ9sl1eZ+kAfqv4PEUdwqMPXUh9/YEnmEqvxVrYvDD6
wdLE5Ry2qGbYTyuxnzc+bRH8yPNad/MEHakRqZfq65QJqKpuIubWwbt6pvll/hID
8AEgyXGhi13nnS3SbDDWYH86ADPxGjVWxdHlgniSafQGcH5tcXACgQHKUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWSu0H4hUwJUy2U9OoOaZmF3VXvMB8GA1UdIwQY
MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt
YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2
LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFruzGA7
6ncxoGevnS+Wqed2G7L97iRN3W03FX41+VJj4pQGxUiczqF88xkDVev+kAjDEpwT
rUFrcfF83aIcLc9b1y8amUs7YPQ8fKPCbuSTebO8a7vAZ4BjJNh+x5Ew02lLEXSl
RLiVqBdOpBLVtuLDIA2MJXokBV28e/Ky9Xw8VFIBYQnn+aVG0z2/p5E2s1zQOSyU
CresLmCcb73MFsdvDyzBRvSl8IjNKlIksxgc8kQdite9LQZHDhwOrbxoqIgMUJqf
G+hkotv30ySd1YGNHTqjfngn2TeRzR9uJxvxCADQcnu291dLJSNuL64CJjmGZ6Fa
ecyr0wYzfWGK1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:30 2026 by rpki-client