Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 9o9SzL8kLIya3c5ep4Qa78CpUJgfW+vTOh0ccwfaeEc=
Subject key identifier: DE:0F:F3:1B:2D:87:32:D9:09:6D:92:B8:CB:3C:C1:09:FF:89:1D:58
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 01A102B6BE3DD653835C97AD4EB568BCCA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0DCC
Signing time: Sat 03 Oct 2026 17:01:32 +0000
Manifest this update: Sat 03 Oct 2026 17:01:32 +0000
Manifest next update: Sun 04 Oct 2026 17:01:32 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: BV0eETkoxTx+JktIgype7xjsf/0DU8tnUlXeXLVSFHg=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:be:3d:d6:53:83:5c:97:ad:4e:b5:68:bc:ca:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Oct 3 17:01:32 2026 GMT
Not After : Oct 4 17:01:32 2026 GMT
Subject: CN=de0ff31b2d8732d9096d92b8cb3cc109ff891d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:90:d9:2f:36:20:2f:13:3f:53:e4:a6:99:
c7:38:9d:a5:32:96:24:3b:5d:b8:09:bd:f8:a4:ab:
eb:52:d6:68:4a:65:79:1d:07:e5:6c:1b:0f:7c:5d:
98:14:1b:0c:8d:69:20:f9:f8:74:42:07:2a:27:f1:
b3:ac:49:41:f5:28:bd:11:93:9c:ab:60:e2:9b:ba:
ca:91:f0:ef:46:fc:ba:0f:59:29:ee:88:09:90:47:
e0:1e:84:08:97:c9:6f:cb:46:67:30:b7:c2:91:17:
1b:4d:97:5d:b1:a4:79:f3:48:5d:d1:08:ce:e3:a5:
27:74:95:79:59:65:83:0f:02:13:c5:aa:ff:0c:8f:
48:dc:25:c4:16:ed:20:ff:07:7d:d3:7e:11:5c:d3:
08:1a:32:ea:de:41:2b:5d:4c:7d:8c:80:a6:63:6e:
10:06:ba:c3:96:76:d3:a6:5c:5d:c1:e4:01:91:83:
3c:6d:3d:76:6f:5d:6e:e1:69:3a:38:37:99:2d:f2:
47:b0:56:34:dd:4d:41:93:e1:cd:24:3d:28:2b:d2:
ea:bb:62:28:a4:19:6d:7a:5e:94:66:5d:42:d7:c3:
d4:65:b6:60:64:b8:a0:00:d0:eb:66:9b:1f:18:ba:
d2:b3:2f:c8:f3:98:d9:ab:8e:87:dc:d0:42:ec:9c:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:F3:1B:2D:87:32:D9:09:6D:92:B8:CB:3C:C1:09:FF:89:1D:58
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:51:94:e6:a0:46:ae:53:1d:76:ea:f0:2a:ff:55:b9:dc:
b0:01:9e:7d:a2:31:be:16:9a:08:f5:ca:48:3c:97:3e:c7:ec:
86:3e:09:44:85:40:96:29:24:55:08:6f:ae:ca:7a:25:c7:dd:
82:71:81:34:70:1a:0b:8d:68:18:7e:0e:d0:4b:c2:06:b2:71:
06:ff:39:88:ac:87:f1:f2:d0:78:70:41:b9:15:3e:79:4d:61:
4e:83:8f:0a:f8:8c:ae:6e:8f:a3:65:47:a2:68:fe:ea:76:68:
b0:51:f1:28:a8:b4:c5:04:ff:b6:56:19:5d:3a:ce:3c:dd:f6:
09:f7:30:a8:8e:16:4e:cf:37:58:73:df:3a:a6:33:44:53:c4:
bc:57:5e:0a:e9:4d:6d:ff:1d:84:54:46:a7:a2:b9:bd:71:52:
91:7b:4d:62:7b:a9:b7:28:95:b1:69:fb:f7:d5:f1:8c:f4:1d:
1a:7d:ec:03:65:23:1a:cd:72:9d:49:cb:73:b4:0a:05:74:a2:
f5:2c:08:b7:ee:b5:89:31:5c:05:f3:28:51:11:06:25:39:07:
fb:c0:f3:c8:9d:56:53:c8:ca:0d:e0:f9:3b:60:9c:cc:3c:1b:
8e:43:79:4a:08:4d:37:c1:13:2b:bd:fe:ce:e1:d2:d1:f1:e3:
b6:f6:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:52:58 2026 by rpki-client