Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: oZrGMztwvRzhGwyT0Mrhv7jERFqfCHv/gHwn/jK7eLc=
Subject key identifier: 1E:47:E8:84:87:65:FC:6B:75:33:1C:F0:CB:9C:9E:BA:22:C6:F2:A7
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 019D3866879AE5E3A7C57B0C62CD113445C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0BD5
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: bHqw2f19jOUVFg3UXpsL3SOynliTj2e2LAuPZDFpr1Y=)
2: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:87:9a:e5:e3:a7:c5:7b:0c:62:cd:11:34:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=1e47e8848765fc6b75331cf0cb9c9eba22c6f2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:15:0a:e0:ea:e4:a9:b3:2d:77:5b:09:27:
8d:73:b2:e9:46:8a:23:3c:f3:cf:07:4f:74:cf:88:
09:99:f7:67:92:d3:34:db:07:06:e6:a2:dc:9b:81:
cb:58:eb:d7:74:33:4c:0c:54:b3:86:07:fb:91:a7:
92:06:65:d8:d3:13:91:9d:54:e4:06:12:99:fd:91:
5f:b9:bb:02:02:80:89:cf:53:7e:bc:b2:5e:e5:49:
b5:f5:b6:54:03:5d:38:46:56:89:1e:34:24:3d:8b:
6d:b2:51:77:e8:7d:9e:e9:12:84:58:47:17:47:10:
3d:6c:8c:13:e0:4c:1e:39:1e:89:0d:eb:c7:37:55:
ad:90:4a:e0:94:cb:73:72:9f:fb:85:35:39:0c:25:
18:eb:73:f0:3b:d8:f7:60:b3:da:1e:b1:24:cf:2c:
af:2b:db:46:f2:4f:64:d8:f9:62:4b:b9:93:0f:fc:
ce:6c:85:2f:5e:d3:89:dd:94:75:8c:79:ae:86:06:
71:19:b4:bb:f0:97:81:87:a8:0f:79:1d:c0:06:10:
44:25:f3:20:f7:a7:42:c8:52:8c:82:60:98:c4:a4:
a7:96:71:41:45:f6:be:48:43:d0:55:39:ec:ff:5b:
f8:ee:cb:fe:c8:77:dd:98:68:ea:0c:2b:22:ce:06:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:47:E8:84:87:65:FC:6B:75:33:1C:F0:CB:9C:9E:BA:22:C6:F2:A7
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:73:cf:f4:c4:a1:2c:9c:d4:a8:df:8b:14:e7:18:d0:8f:b9:
a7:49:7a:81:cd:24:e5:cc:86:0a:74:84:8e:e6:3f:f9:7d:dd:
ea:51:bb:1b:7a:39:ba:ce:56:5e:9a:af:33:cc:a8:68:05:95:
ba:43:82:51:14:d0:7a:73:1b:eb:19:32:c2:7e:f9:19:4d:ef:
25:ba:2d:f4:12:04:e4:c6:f2:b6:f1:4c:6f:a0:05:2d:84:b4:
c8:ff:d2:f3:2d:65:91:46:48:7e:f5:8c:44:0c:27:da:0c:7b:
56:4e:d6:11:3a:5f:58:87:bc:a8:77:b5:7c:f0:a4:30:d1:6b:
13:a0:e4:0b:d8:d4:fc:1e:ba:02:44:35:7c:95:7a:16:b3:67:
2a:4a:cd:4a:a5:8c:0d:d0:45:2c:07:33:7c:3d:36:f2:55:89:
ea:e0:db:10:5b:9f:7f:ff:e3:a4:61:a8:02:55:1b:43:d7:6b:
50:98:b8:d0:56:8f:2f:f6:95:95:fd:a5:16:35:03:1f:ab:6e:
b2:5d:ed:12:3f:9d:9d:1f:13:9f:98:79:18:1c:d0:54:19:a2:
a7:ad:15:15:a6:55:2e:23:ec:7d:94:ed:1a:a5:4c:15:34:6f:
ff:70:b5:94:c2:a5:6b:c2:de:7d:a6:a8:90:e2:56:90:45:fc:
20:c8:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:20 2026 by rpki-client