Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: XRQA2KdmpgeRG3Q0FrBXGuKZhORxU5FC5yJssFUbcqM=
Subject key identifier: 6A:9F:B8:6D:DC:38:F6:67:29:D1:0F:70:C7:46:5C:B5:8B:AB:60:82
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 01A0C5FC16414FAE0C8F30DCFBE2680138E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0B31
Signing time: Mon 21 Sep 2026 22:00:27 +0000
Manifest this update: Mon 21 Sep 2026 22:00:27 +0000
Manifest next update: Tue 22 Sep 2026 22:00:27 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: SwrZ94NXJF1cJn9ZQmz+5R0nP8ue7BGswX5uBcqcWYg=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:16:41:4f:ae:0c:8f:30:dc:fb:e2:68:01:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Sep 21 22:00:27 2026 GMT
Not After : Sep 22 22:00:27 2026 GMT
Subject: CN=6a9fb86ddc38f66729d10f70c7465cb58bab6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:24:61:1e:57:5c:33:94:8e:f0:bd:ad:81:
49:b6:c8:f5:7e:ff:dc:6c:17:78:18:de:6c:f5:d8:
73:23:b5:c3:23:1c:e6:b5:de:a7:9b:21:5a:28:27:
29:46:5d:01:ae:44:09:1b:cc:c6:35:4e:dc:a8:a9:
7e:b9:58:6c:26:b0:7f:2c:6c:47:cb:04:ca:78:1f:
bd:7c:cf:b7:fb:d2:fd:30:58:1e:a6:99:1b:19:21:
1e:53:5a:65:c2:6b:58:66:b7:97:11:f9:66:26:9b:
1a:d6:ea:81:e5:0c:90:20:22:0f:61:28:cf:16:ed:
f8:7c:fc:b2:3c:51:b8:d7:1f:d9:0e:c3:b3:de:fd:
37:64:f3:04:82:f0:fc:41:4e:6e:87:74:81:40:67:
1f:46:c5:d2:72:cb:90:c1:0f:22:54:7d:12:e1:80:
c6:9a:d2:69:c1:1b:73:34:39:52:e9:3a:b9:34:24:
93:1c:fd:0e:11:a0:d8:5f:d9:69:d6:4c:c9:8b:d4:
7e:81:b7:14:0a:4b:32:24:13:8c:20:ac:9e:82:9e:
e1:eb:5d:50:22:10:68:82:4c:2e:d0:89:86:73:86:
6d:74:a6:2d:d5:6f:17:be:2b:ae:1d:6b:38:2e:f6:
cf:85:e8:03:3c:7e:87:bb:b8:e9:57:ff:50:d6:bb:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9F:B8:6D:DC:38:F6:67:29:D1:0F:70:C7:46:5C:B5:8B:AB:60:82
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:81:31:33:fa:98:ec:80:24:bb:19:6f:29:61:2a:68:21:
82:07:18:40:d6:1b:54:cc:53:4c:b8:ea:04:ec:1b:77:b2:e4:
27:a5:68:01:a3:32:3d:42:17:d4:45:4a:06:49:ed:01:50:0b:
95:e5:51:5e:5d:5e:d7:4b:ff:4d:61:c3:2e:ce:10:3e:1c:c4:
81:6a:d8:2d:d6:ff:0a:db:a2:a8:21:a2:33:0a:13:ed:0e:aa:
ee:bf:53:ae:0e:43:3d:20:2e:a5:40:9e:ec:b1:85:2e:57:aa:
dd:e2:ad:e4:b0:69:df:9d:b2:6b:f6:9e:c3:d3:91:b5:80:08:
94:25:e6:58:1f:98:f7:fb:59:c6:bb:d5:86:23:e9:95:60:5d:
94:ea:c1:56:90:9c:8a:74:93:90:92:f8:bd:ef:c8:b7:52:f3:
93:f1:91:79:60:6e:2a:3f:31:8f:ce:f3:9b:59:20:b5:01:9b:
1f:8c:bf:55:a1:8e:60:1a:b5:1b:1e:79:35:2e:f7:1e:ef:38:
e3:f8:fe:4b:9b:c8:f0:25:c6:12:56:5d:e2:98:1b:e3:d2:51:
b6:f3:7b:aa:95:a7:84:0c:47:0e:c0:3f:31:b0:33:41:a4:b8:
98:93:f1:fe:59:1a:37:c8:b8:bf:f7:a5:5e:c2:74:fa:22:c6:
d5:ed:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:19 2026 by rpki-client