Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: OhZ3pCeqQ5/wZ82hFWlYP2x/QQH3XF53uJlbkYvJuoc=
Subject key identifier: 9D:E7:E7:A6:BB:01:DD:83:B9:91:29:00:89:AC:DD:8C:72:86:A1:71
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 01A119E2DEA9B5894E68378849A966B25777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0DD8
Signing time: Thu 08 Oct 2026 05:01:00 +0000
Manifest this update: Thu 08 Oct 2026 05:01:00 +0000
Manifest next update: Fri 09 Oct 2026 05:01:00 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: 3CHSdFZgVJzEVUW72T4mbH82wCWF04jYaQy9SI6WnuM=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:de:a9:b5:89:4e:68:37:88:49:a9:66:b2:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Oct 8 05:01:00 2026 GMT
Not After : Oct 9 05:01:00 2026 GMT
Subject: CN=9de7e7a6bb01dd83b991290089acdd8c7286a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:96:54:2d:31:1e:80:9e:17:b2:e3:dc:09:
b2:80:09:72:06:ea:58:cb:e4:8b:7a:03:48:0d:7e:
e4:af:23:e4:a2:d9:be:53:19:2c:90:e5:83:1c:60:
fd:2a:88:98:39:f1:26:13:9d:53:7a:3e:ba:a1:85:
70:6d:e8:b4:ee:28:62:f9:dc:e8:f0:77:91:90:0d:
4a:1a:ce:f5:91:f7:e7:82:b4:b6:fd:0a:c5:68:d5:
ef:85:65:8f:c6:eb:dd:1a:9c:48:45:47:14:93:18:
48:13:89:68:0d:ba:fb:c5:4e:3a:c3:63:34:a7:e7:
0a:2f:70:74:74:d2:ec:4d:dc:5f:6f:10:d7:82:1d:
62:2f:c1:65:45:ec:01:54:3a:23:27:b5:b4:d4:08:
65:9f:d1:e4:10:82:42:34:5c:37:3e:53:1b:36:64:
f5:aa:fe:81:2e:29:d8:ca:c7:e6:96:f3:c1:1f:77:
08:9d:7c:7d:d0:5b:06:8c:9e:77:e2:9f:3c:8e:75:
e2:fc:b6:3f:c0:78:e9:10:d2:0c:f6:82:26:4b:2a:
37:ba:cb:c7:8f:56:fe:3f:9b:82:ee:6a:6e:c0:73:
c2:60:8c:16:c4:9e:0a:59:ea:5f:4c:4e:f2:dd:84:
70:2e:97:17:b8:62:60:ca:c0:c0:a4:98:7a:02:91:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:E7:A6:BB:01:DD:83:B9:91:29:00:89:AC:DD:8C:72:86:A1:71
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:bc:2a:0c:29:67:54:c2:87:b7:b0:10:4c:5d:a5:28:f1:
41:5e:6b:a5:69:2b:0a:ae:e2:8f:99:92:ee:f3:9b:07:97:7a:
9b:b7:38:33:42:d7:e2:c8:bc:5c:11:8f:ec:b8:d4:cc:29:5f:
a8:eb:e6:41:38:67:7b:a6:b5:3a:14:fa:14:da:19:33:d9:56:
ae:18:d2:0b:3b:6d:00:f2:2b:e8:c3:85:7a:51:fb:a3:26:4c:
3f:ab:6e:60:63:d1:17:64:a2:b1:9b:7f:34:da:0d:48:8b:c0:
7b:e6:2d:c0:17:50:c7:47:25:36:5b:c3:ac:4e:d7:07:03:42:
18:5a:07:ec:8c:73:d6:05:2a:85:4a:43:11:47:a9:3a:c3:f7:
4d:8a:8d:00:8f:1b:93:b1:dc:98:de:98:76:15:e7:c3:0d:ff:
50:ae:d3:cd:d2:eb:d7:a1:87:c7:28:60:30:e8:aa:a8:49:4a:
0e:3f:e4:d7:a8:4e:12:99:4f:54:33:b2:82:41:d2:e0:5e:d3:
bb:ba:29:75:67:8f:2a:b9:4a:fd:60:28:49:05:5e:35:2f:c8:
01:79:6e:98:dd:7d:91:b2:70:03:1b:31:57:94:65:1e:6b:01:
48:25:eb:f0:72:3a:8e:c8:2d:5b:ee:1d:05:8c:b5:7a:12:cd:
1b:be:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:48 2026 by rpki-client