Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: wZTFlldNj20zDHD9098yTq1FXXtCypnONaxPkaLxQKs=
Subject key identifier: 50:88:93:67:6A:D2:A0:EC:98:34:9A:4B:B3:0E:68:EA:70:01:51:A5
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019CAC47831EC674A7993616B2E3FDFA433D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 090F
Signing time: Mon 02 Mar 2026 02:01:33 +0000
Manifest this update: Mon 02 Mar 2026 02:01:33 +0000
Manifest next update: Tue 03 Mar 2026 02:01:33 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: cg9Sxy9ircPauG1sWzGD1tuv0SE84le10cZmhVbcTdM=)
2: I-cmXuRRTQgMauzqhYZq1qS7jd8.roa (hash: +mhQlm2zpG1YAxHqc5888PjYzkQLufmoxeIELPBtTRo=)
3: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:83:1e:c6:74:a7:99:36:16:b2:e3:fd:fa:43:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Mar 2 02:01:33 2026 GMT
Not After : Mar 3 02:01:33 2026 GMT
Subject: CN=508893676ad2a0ec98349a4bb30e68ea700151a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:9b:11:c4:23:e9:68:97:66:9a:22:72:ca:
d6:83:1f:87:61:03:9b:f3:26:f2:f8:20:36:46:26:
22:7c:15:d0:39:22:3e:21:ca:f6:92:c6:66:2d:e5:
5a:87:cf:c8:9c:3e:c9:85:8a:af:5d:1a:ee:3e:bc:
b7:c1:e7:b3:31:8f:2a:0c:91:64:27:d1:ec:56:e7:
3d:54:74:8f:2d:af:d7:d0:50:8d:9b:37:6a:16:95:
e4:e0:0e:e8:b9:7f:00:9b:d8:52:03:bf:31:34:35:
95:6a:8c:4d:16:22:c1:c9:61:a0:01:4b:a6:26:83:
0e:4c:ad:02:22:8f:d7:5d:70:89:93:47:58:9b:0c:
c4:91:bf:4c:24:79:d5:43:86:01:a4:02:e6:5e:13:
5f:e4:56:7c:47:ee:93:b0:65:5b:52:2c:b8:da:ef:
17:38:e9:8e:c1:43:4e:b3:9e:3b:e8:88:aa:35:82:
e3:3b:e1:0b:c7:ac:42:91:c2:ba:28:04:38:d8:97:
70:72:82:bd:d4:94:f0:a7:d1:18:68:e4:ae:e8:b9:
dc:2a:a9:3d:6c:d1:bf:cb:f2:07:cd:27:11:87:01:
90:83:09:2f:85:49:a3:0b:18:e6:4f:aa:c5:85:be:
f7:89:f2:9a:5f:d6:6c:2f:e2:3b:3d:ec:99:b0:2c:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:88:93:67:6A:D2:A0:EC:98:34:9A:4B:B3:0E:68:EA:70:01:51:A5
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8e:fe:f3:cd:ff:2d:5c:95:78:72:fb:1b:30:b5:f4:8b:86:
20:a2:ae:9b:5f:29:ba:4d:3c:27:3f:49:c6:3c:eb:f6:52:95:
3b:25:2b:7b:a7:11:8b:f6:d7:46:2d:e8:4c:d2:c2:ca:f7:ac:
50:d1:62:82:16:45:ee:5c:d0:91:11:cf:47:cc:9b:28:d3:72:
14:d3:f7:05:59:63:89:a5:a0:d4:b8:6d:3c:ad:ea:e5:42:cf:
be:77:a6:30:21:f8:d8:09:d5:6a:ee:b6:d4:c9:24:08:c7:f6:
8c:3a:92:86:4a:b8:67:74:46:c8:08:9f:81:4b:e9:4e:f2:93:
91:30:b5:bf:05:4d:17:15:2b:e8:35:0b:9f:5e:2d:de:7b:25:
21:25:06:bc:b9:cb:2b:35:ac:eb:b0:90:a4:70:28:02:63:51:
b8:c3:a7:e0:3f:c4:27:fc:e3:5d:26:d5:d7:f1:b8:16:7c:89:
ca:ed:2d:b4:5b:1a:78:94:43:b7:14:f2:4d:46:d0:9f:62:d1:
76:bb:b5:c6:43:d3:94:e7:b2:b6:86:fd:88:1b:3b:02:59:f1:
cf:d2:05:ab:51:08:52:14:b3:2a:41:22:03:8f:5c:1a:6f:68:
40:81:a5:e1:d6:af:8e:70:1f:07:8d:60:9a:33:1c:e3:30:ff:
1b:2e:10:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4MexnSnmTYWsuP9+kM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm
YjBjZDgwHhcNMjYwMzAyMDIwMTMzWhcNMjYwMzAzMDIwMTMzWjAzMTEwLwYDVQQD
Eyg1MDg4OTM2NzZhZDJhMGVjOTgzNDlhNGJiMzBlNjhlYTcwMDE1MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiqbEcQj6WiXZpoicsrWgx+HYQOb
8yby+CA2RiYifBXQOSI+Icr2ksZmLeVah8/InD7JhYqvXRruPry3weezMY8qDJFk
J9HsVuc9VHSPLa/X0FCNmzdqFpXk4A7ouX8Am9hSA78xNDWVaoxNFiLByWGgAUum
JoMOTK0CIo/XXXCJk0dYmwzEkb9MJHnVQ4YBpALmXhNf5FZ8R+6TsGVbUiy42u8X
OOmOwUNOs5476IiqNYLjO+ELx6xCkcK6KAQ42JdwcoK91JTwp9EYaOSu6LncKqk9
bNG/y/IHzScRhwGQgwkvhUmjCxjmT6rFhb73ifKaX9ZsL+I7PeyZsCxhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCIk2dq0qDsmDSaS7MOaOpwAVGlMB8GA1UdIwQY
MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt
NDdmMDQzZmJhMTNiLzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi
LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY7+883/
LVyVeHL7GzC19IuGIKKum18puk08Jz9Jxjzr9lKVOyUre6cRi/bXRi3oTNLCyves
UNFighZF7lzQkRHPR8ybKNNyFNP3BVljiaWg1LhtPK3q5ULPvnemMCH42AnVau62
1MkkCMf2jDqShkq4Z3RGyAifgUvpTvKTkTC1vwVNFxUr6DULn14t3nslISUGvLnL
KzWs67CQpHAoAmNRuMOn4D/EJ/zjXSbV1/G4FnyJyu0ttFsaeJRDtxTyTUbQn2LR
dru1xkPTlOeytob9iBs7Alnxz9IFq1EIUhSzKkEiA49cGm9oQIGl4davjnAfB41g
mjMc4zD/Gy4QTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:00 2026 by rpki-client