Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: Hb0ANBVxm8Vu5x+nVnMIPemwSlZAvUmBsNmjfoQ+5rw=
Subject key identifier: 21:DD:E1:4F:A4:CF:D5:7D:71:FA:A1:42:B9:B6:04:43:D3:9D:17:B5
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019EC63842AB8F5225917765A3FB32DE188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0A28
Signing time: Sun 14 Jun 2026 13:00:36 +0000
Manifest this update: Sun 14 Jun 2026 13:00:36 +0000
Manifest next update: Mon 15 Jun 2026 13:00:36 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: eaCtDokoekDJIDupCPzvq52iwYHRpkLScc6fVRd9+F0=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:38:42:ab:8f:52:25:91:77:65:a3:fb:32:de:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jun 14 13:00:36 2026 GMT
Not After : Jun 15 13:00:36 2026 GMT
Subject: CN=21dde14fa4cfd57d71faa142b9b60443d39d17b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:86:29:db:c2:93:ad:2e:f5:06:c9:6f:5b:
67:ee:3b:c7:47:b0:95:1b:cd:50:10:81:35:f7:a2:
6e:2d:e4:fb:d5:f2:e7:9d:87:15:24:7a:47:c2:44:
4d:38:0a:92:f9:87:8c:a5:a8:1d:24:12:a9:23:a5:
9b:2d:6d:38:46:64:b8:58:47:15:6f:23:93:f7:16:
ec:78:c0:5d:27:02:33:97:fd:a0:b8:90:17:3f:fd:
a4:83:1c:4d:15:82:d6:c2:03:d5:31:0f:0d:35:41:
ad:00:ee:d4:4f:de:a5:09:4a:a6:7e:b9:73:22:00:
ac:f0:87:ba:f0:19:ef:ef:c8:0c:7d:0d:44:f6:cc:
02:1a:4e:2e:a3:48:a5:86:e4:94:d8:b8:2f:11:0d:
60:69:91:88:6a:6a:a0:a8:b4:6c:2a:a0:1d:fd:e3:
91:ca:bb:a5:49:bf:55:44:ce:2b:a4:29:04:2d:4d:
87:ab:4c:9a:6d:7b:ea:0d:18:79:92:f2:15:e2:3e:
9a:b9:a9:ff:d4:b8:cd:fb:fd:37:86:0e:3d:c0:6a:
38:52:41:79:10:a2:34:42:63:88:7d:2a:d1:8b:1a:
b3:6b:3a:28:4f:15:a2:03:1c:3d:d0:2f:5e:f9:74:
2c:86:87:48:cc:37:09:fe:ff:05:d6:04:d8:72:f3:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:E1:4F:A4:CF:D5:7D:71:FA:A1:42:B9:B6:04:43:D3:9D:17:B5
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:42:f5:23:73:6e:94:ea:f3:6c:ec:5a:29:b7:e6:8d:e5:
9e:0e:a6:6c:ab:75:33:fd:7f:ba:76:9f:05:2d:d5:de:45:ae:
37:6b:ec:70:42:6f:00:b0:01:97:7f:f3:df:32:92:6a:13:5c:
52:51:41:06:cb:ac:cb:0a:d0:ad:a5:2f:5a:0b:cb:65:d4:d0:
5e:60:a9:36:03:98:d1:e0:a7:a8:49:c8:66:91:69:f9:b5:bf:
67:5b:08:d6:a6:c2:9c:4b:70:77:ca:6d:de:c7:0e:49:27:2a:
0c:0c:b3:18:83:37:c6:e6:b6:84:bc:a5:ad:20:d8:5c:ca:a0:
ef:79:29:5a:05:e1:4d:49:bf:24:ba:b1:47:81:bd:06:08:40:
a3:11:d9:7d:0f:14:f3:25:24:5e:04:f8:4d:2c:3d:a5:3d:b4:
98:b4:c3:76:f5:91:c7:bf:a3:7f:41:0b:fe:03:31:f1:66:e7:
0c:43:b1:33:17:c4:6d:ef:8d:33:8c:7b:cc:c6:b9:9a:20:95:
bb:39:73:1b:b0:eb:40:e5:65:2c:59:7e:62:2b:b8:57:27:94:
43:42:c4:d1:42:21:12:6b:14:63:5c:08:12:87:c0:a0:c0:83:
5f:5f:c3:62:17:b4:df:d9:fa:b3:7e:84:88:24:7d:b1:0e:56:
81:94:c2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 21:58:54 2026 by rpki-client