Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: DPDuFEaBkckTLiS71iIdOZFiqfFk38T0jFo8XeO1bo4=
Subject key identifier: 90:8C:29:35:F6:D5:07:52:E0:A6:64:8D:9E:77:38:27:6D:42:5D:BB
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019EBE7EA7A0A7E378308F84273A2FF581C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0A24
Signing time: Sat 13 Jun 2026 01:00:31 +0000
Manifest this update: Sat 13 Jun 2026 01:00:31 +0000
Manifest next update: Sun 14 Jun 2026 01:00:31 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: y91vjyIq+w+icAqq3a7VXWklfllMJ2XjRYnj4Mqa5oE=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:a7:a0:a7:e3:78:30:8f:84:27:3a:2f:f5:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jun 13 01:00:31 2026 GMT
Not After : Jun 14 01:00:31 2026 GMT
Subject: CN=908c2935f6d50752e0a6648d9e7738276d425dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:2f:1a:27:0c:76:af:21:83:4c:79:87:8a:
b0:e0:2a:df:bd:98:45:7b:69:b3:fa:4b:25:fc:e0:
30:33:44:72:56:30:b2:8f:56:46:3d:cf:c3:78:05:
60:56:ec:d5:fa:c4:6e:8a:c6:40:96:ca:0a:d9:6b:
da:dc:6e:14:79:f8:35:bf:98:a9:00:29:47:fd:4b:
90:2f:72:99:72:8f:ae:04:ca:66:f8:2d:8e:5d:86:
9d:bc:e0:d8:f7:b2:c2:08:c9:37:1c:68:53:d7:23:
cd:ca:7b:3f:9f:3a:22:7c:30:f9:c7:59:8f:c3:7b:
8b:b2:52:2d:1c:39:84:15:d4:4f:2e:6d:02:97:bd:
3d:88:82:cb:02:88:b8:95:f4:0c:47:42:84:b9:fe:
f6:fb:eb:e2:0f:9d:a6:2a:ef:3b:c0:b9:d6:96:f8:
7f:84:c8:9e:01:b2:36:12:53:c8:82:f4:e4:8a:9f:
4f:50:fe:cd:c6:6b:64:01:88:30:e0:39:3e:af:3d:
8e:3f:f4:3e:df:37:33:bc:2e:35:46:9b:45:1b:0f:
b2:6c:80:68:e1:94:cb:d2:60:66:4c:c2:0a:77:87:
0f:15:e3:1a:23:1d:c4:08:5c:42:bf:93:98:5b:93:
32:9d:08:59:e2:e5:e8:79:2a:ba:25:79:52:32:3b:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:29:35:F6:D5:07:52:E0:A6:64:8D:9E:77:38:27:6D:42:5D:BB
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ce:16:21:9b:37:c3:a3:ed:92:42:49:6d:8a:36:9b:3d:62:
77:3d:bb:3e:ef:b1:1d:91:cc:50:99:47:ae:4b:85:e7:e7:9c:
59:f0:e3:1f:8e:d7:b1:cf:97:37:8e:ce:e8:5a:fe:a3:fc:e7:
77:eb:df:6c:85:81:c6:69:53:7b:a0:20:6c:ce:da:f4:ec:a0:
1b:1c:58:e2:a3:71:2f:79:6a:54:69:f7:dd:74:6f:ba:06:fb:
aa:60:bc:2d:78:49:2f:26:e7:34:d2:29:49:39:26:71:a2:f5:
22:2c:c5:eb:4c:38:7c:e6:07:06:fe:32:41:9e:2f:24:88:dc:
89:6c:16:e8:44:d7:ed:47:65:06:75:3a:31:c2:05:44:99:7b:
bd:31:61:cc:78:3e:21:bd:7f:ee:29:26:fd:be:64:9f:e2:dc:
2b:3b:a1:2f:bb:d9:d7:3f:ba:1a:43:e9:25:4a:a7:48:a4:70:
75:a3:66:62:1f:05:96:0e:db:0b:cf:66:3d:70:4e:49:fd:94:
0a:0c:21:4f:0f:be:7a:3e:85:d9:fd:dd:28:6e:26:ac:14:b6:
1f:f9:fa:58:28:4a:26:c4:b3:ed:43:06:6f:32:12:f2:d8:36:
6c:6c:fd:d8:8b:96:63:07:d6:be:91:ad:8b:86:7a:a8:18:6c:
e0:47:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:40 2026 by rpki-client