Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: 4PPyDMg8DrJKbsr+o3Pl3qzKYcnTOukQXoWiLqrdrcw=
Subject key identifier: A3:6D:DB:61:4A:39:AB:D1:23:22:48:7A:92:E1:8A:53:DE:40:01:A2
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019FAA195F7E08AF6D8BA0320476D9A79888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0A9E
Signing time: Tue 28 Jul 2026 19:00:17 +0000
Manifest this update: Tue 28 Jul 2026 19:00:17 +0000
Manifest next update: Wed 29 Jul 2026 19:00:17 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: dcoSP1xi4EVMB2m8YnYCYN29CN0WS02zqMdLH8PXEyY=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5f:7e:08:af:6d:8b:a0:32:04:76:d9:a7:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jul 28 19:00:17 2026 GMT
Not After : Jul 29 19:00:17 2026 GMT
Subject: CN=a36ddb614a39abd12322487a92e18a53de4001a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:0a:94:1b:bb:05:6a:4b:c3:cc:9e:1b:4a:
88:e3:41:78:39:ac:88:18:ba:e4:4e:8c:fc:23:32:
8b:27:db:77:01:de:43:2d:ec:cd:fb:a9:f8:9a:4f:
ce:b2:66:7d:88:0e:99:15:01:0c:be:6c:41:13:b6:
cb:57:aa:e8:5c:1c:56:e3:f5:e5:d6:fd:7b:47:d7:
b9:61:b2:6a:20:f9:b6:2d:77:0e:87:3c:2c:82:b5:
2a:d3:9f:bd:21:42:c1:3f:aa:29:57:ed:c3:87:7f:
0f:ab:fa:42:02:29:a6:57:b1:b9:49:8f:11:80:01:
d9:a8:7b:63:8e:ed:1d:0a:0b:af:1a:37:6f:e2:7e:
f5:95:0c:52:3a:2d:7b:a6:97:20:81:64:9e:b9:07:
20:40:d7:27:47:92:d6:2a:4d:7f:e1:99:b7:0d:e5:
bd:f4:f8:fd:1e:5d:bd:5d:90:6b:a0:62:ef:7d:20:
b0:8d:2f:51:b3:19:76:51:5a:f4:e1:7e:cb:ba:4f:
bc:28:1c:59:c2:ba:f6:92:d5:10:0f:9b:4e:44:8f:
3b:30:67:05:60:40:1e:e6:e9:53:a7:b4:35:c1:68:
4c:5e:fc:84:b7:1f:8e:20:e2:f5:72:dd:36:d9:0a:
65:9d:54:05:81:ca:8f:41:9e:aa:97:b7:03:17:83:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:DB:61:4A:39:AB:D1:23:22:48:7A:92:E1:8A:53:DE:40:01:A2
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b8:79:2d:d7:df:10:68:60:d8:56:65:02:8f:66:fc:3b:68:
b7:1e:2e:89:7a:d7:89:d9:db:eb:25:db:16:da:ef:94:a9:a7:
50:3f:3d:7f:b4:65:6d:85:c5:7e:01:89:0c:1b:5e:70:6c:04:
67:31:93:e7:fe:05:7c:40:91:ea:5b:36:fb:09:a9:25:51:ba:
72:2b:65:a6:01:0e:94:8b:c7:36:db:35:0e:95:03:b2:5b:e6:
80:e9:c0:28:44:f1:70:5d:29:40:2c:ba:31:a3:f3:c4:0c:1a:
d7:89:e2:07:0e:e0:27:ea:af:d4:7a:4c:c2:be:23:9f:fa:81:
29:cf:a1:25:93:88:d3:28:2b:c8:13:ca:ff:d8:c3:d3:a8:d4:
50:a3:13:9f:cc:11:1b:86:c9:6c:e4:a0:5e:c1:ac:c4:a6:01:
4d:bf:4b:73:01:ea:52:5a:03:74:54:fa:08:fa:e7:65:98:b0:
2f:e9:6f:ad:00:9e:a4:30:f0:99:40:47:f7:e8:f7:ee:c5:64:
8e:2a:9a:83:6e:66:08:fb:f4:77:39:25:5f:57:b3:f3:08:e0:
0f:ef:94:ea:14:17:05:fd:b9:7a:e4:64:d7:4d:31:87:29:c8:
94:ab:e9:6d:e0:6c:d5:22:57:53:cd:23:6c:45:92:8f:9d:1e:
40:d3:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:32 2026 by rpki-client