Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: W1/2AOAlXmbga3auZEtmHB2pfLfUGVK+aZ1pWmgspK4=
Subject key identifier: 4B:8F:01:36:B4:BB:6E:93:CC:CF:19:DB:78:31:03:D4:21:26:E2:10
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019F1642B5681B7497A5A9E662DE3C09840A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0CCD
Signing time: Tue 30 Jun 2026 02:01:38 +0000
Manifest this update: Tue 30 Jun 2026 02:01:38 +0000
Manifest next update: Wed 01 Jul 2026 02:01:38 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: daAYmGUrwd8X3yNMplaAtXJMIYNTlcrWYERhZmFwzVs=)
2: essmluPsIrvtkSAXTqAoE5_3hTI.roa (hash: tODCkpAkT35OyrRtWTOWreHd/1cQjGKH73sJfiXX3Qg=)
3: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:42:b5:68:1b:74:97:a5:a9:e6:62:de:3c:09:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jun 30 02:01:38 2026 GMT
Not After : Jul 1 02:01:38 2026 GMT
Subject: CN=4b8f0136b4bb6e93cccf19db783103d42126e210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:44:ad:be:c1:26:90:44:9c:54:2c:aa:89:91:
a1:75:2f:26:ac:de:eb:ea:c8:33:d0:81:e4:07:c4:
0f:3d:aa:06:90:d2:ee:99:ad:fa:2f:d2:45:91:83:
53:ad:34:86:62:20:3f:c8:ef:34:2b:9f:39:9d:0d:
a0:98:70:ed:09:23:79:d8:45:46:04:0e:9c:d2:61:
7e:20:2e:d6:d2:19:e9:24:0c:67:66:60:12:80:5b:
d9:39:e8:58:9b:28:17:18:15:c4:0f:10:52:fa:e0:
41:56:c4:d8:8f:a8:af:18:02:c1:51:1a:a2:37:59:
58:4c:7b:ee:2e:c6:82:31:2c:1d:4e:a9:4d:d0:ce:
86:bf:15:f3:83:18:e2:11:f8:dc:14:e4:f6:d3:e4:
aa:bc:49:14:c8:b1:ae:58:2f:08:3f:f1:c1:0d:d3:
9a:c6:0a:d1:e4:c7:0d:ef:e5:72:a6:d8:21:66:d8:
98:cf:7e:cf:e7:13:a4:cb:be:59:0a:63:90:cd:0b:
4c:dc:3b:72:77:47:cc:a9:86:02:fb:ba:ba:12:07:
ce:92:c0:d3:77:c4:c0:4b:28:26:28:0a:ec:61:98:
94:a0:12:bc:9a:8a:48:c0:e5:dd:19:8e:28:ad:6c:
7f:e6:d4:6b:64:c4:d8:74:79:e3:b1:22:a9:26:6f:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8F:01:36:B4:BB:6E:93:CC:CF:19:DB:78:31:03:D4:21:26:E2:10
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:08:2b:82:5b:f0:09:97:f5:dc:36:7d:00:3a:56:17:96:
b5:ac:0d:aa:68:60:c7:e5:45:d5:37:5d:c3:b9:42:f4:17:dc:
9f:aa:11:87:b5:1e:4d:b9:5e:ca:b2:8d:33:7e:1f:ff:bb:67:
17:a0:87:39:c0:c7:4b:d8:cf:6d:d0:e2:f6:f6:0a:c8:02:3e:
2e:41:bd:c8:c5:fd:9c:42:1d:8d:ba:3b:c0:39:61:e1:18:29:
56:d9:55:31:16:9f:53:f4:f1:0e:7c:b3:6a:01:0a:86:b7:6c:
5e:f1:7a:b5:ba:d5:27:1f:7c:0e:bf:84:45:a2:45:36:df:6d:
1e:3a:d3:a1:c9:c1:97:af:b1:07:53:2b:08:8d:e8:0b:b4:c2:
1b:00:85:57:a7:76:4f:79:69:91:03:a3:26:c6:41:7b:ba:4e:
12:5b:1c:48:2d:20:4d:6a:14:84:06:0b:11:69:d5:dd:e1:71:
1a:13:d5:80:5b:14:d5:1f:61:5f:16:ba:2e:81:37:2f:4b:1a:
97:7a:0c:c4:74:d1:92:af:76:21:bc:78:f5:ca:f9:e9:57:7a:
7f:e2:e4:08:39:9c:65:93:97:b5:c3:3e:b6:d5:23:81:83:f2:
93:d8:b3:45:2e:df:37:8c:cd:d7:c5:65:20:12:6f:2a:55:a2:
64:bf:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 06:41:02 2026 by rpki-client