Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: ee8M0nHgLUQCSoYpp4TPnGj/5FfR4rkYwKIodfJkCQ0=
Subject key identifier: D6:31:B2:B4:B2:B8:59:34:A4:8C:70:7D:DB:85:9C:A8:62:31:93:FA
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019FAFE49F572B892F9661EFBAD08CF06362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0AA1
Signing time: Wed 29 Jul 2026 22:00:23 +0000
Manifest this update: Wed 29 Jul 2026 22:00:23 +0000
Manifest next update: Thu 30 Jul 2026 22:00:23 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: jwnZoeZZGk7k1EbMCP+e9ItzC0TR59h1U4RlV6ql0jA=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:e4:9f:57:2b:89:2f:96:61:ef:ba:d0:8c:f0:63:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jul 29 22:00:23 2026 GMT
Not After : Jul 30 22:00:23 2026 GMT
Subject: CN=d631b2b4b2b85934a48c707ddb859ca8623193fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:19:4a:06:85:03:34:18:1c:a7:8f:98:64:
ac:17:a9:32:5f:9f:15:01:18:f4:95:12:56:e7:40:
a1:7c:c1:24:97:67:fc:0f:aa:1f:03:79:17:37:69:
d0:b3:05:5b:ae:6e:72:d8:5a:76:6a:ad:77:dd:03:
0e:b5:e9:3d:94:44:56:05:d6:d5:5c:fe:ec:cb:6e:
0b:19:88:09:e7:89:38:82:c8:6f:2a:67:a2:26:8d:
ea:56:4a:ee:45:0c:71:42:a3:e8:a6:27:ec:ac:e0:
60:e5:05:8d:ca:d0:1e:91:23:fc:dc:09:a8:c5:c2:
98:4c:88:fa:83:80:92:e6:24:2e:c5:4a:c9:17:e4:
24:fe:63:ab:fc:ab:f5:c5:55:c0:c6:a7:cb:6a:37:
5b:92:a0:47:7d:e2:ce:b2:ce:22:6a:e9:00:56:22:
61:52:81:71:93:4d:5e:9b:2f:13:f1:0c:af:e7:34:
4b:00:51:60:bb:20:22:cc:98:24:5f:01:38:51:49:
f4:26:72:f1:9b:82:aa:dd:d4:f8:29:f0:bc:eb:3a:
1c:eb:89:20:c0:b0:28:82:59:d1:64:9b:1e:71:14:
2d:0e:3c:b0:f8:a9:e8:e4:6e:7a:7a:56:15:46:90:
ae:ee:83:f2:17:33:c4:2f:fc:1c:60:ce:e8:b0:1c:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:B2:B4:B2:B8:59:34:A4:8C:70:7D:DB:85:9C:A8:62:31:93:FA
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:fd:61:ea:28:fd:6b:49:84:62:5e:0e:09:a9:63:c2:55:
45:18:c1:c0:6b:be:79:5f:4d:d0:36:4a:5a:12:9b:2e:27:74:
1c:61:be:64:68:08:70:82:f6:99:0d:c6:65:2d:3b:2b:30:cf:
b5:a3:2d:c0:3d:59:ea:c6:3e:f7:9e:a1:a5:81:ae:22:0a:90:
cc:d6:43:be:ef:1b:30:05:80:c8:8c:d3:19:12:e7:cf:01:14:
99:f8:42:e4:ac:d9:77:40:5f:8c:e4:ed:05:0b:2f:2c:fd:e1:
e2:8c:25:a0:f1:60:1d:23:7c:76:0b:fd:ae:4e:f0:80:c2:ca:
63:a9:85:19:71:b9:2c:dc:6c:72:e2:ad:9e:f8:a7:fd:bd:18:
cc:7c:31:3f:cb:f6:fb:3a:07:1d:02:c9:6c:e3:22:15:4b:e6:
40:f4:0f:a5:8b:78:5c:32:9f:0f:57:d4:9a:a0:d5:6d:d7:01:
98:75:69:30:ab:30:df:be:3e:71:4e:eb:35:f1:03:84:95:19:
3f:4f:29:a8:a2:6d:09:08:d6:52:06:39:3e:be:7b:2e:13:51:
f3:ff:d0:c4:ce:eb:c9:42:43:62:1c:80:ae:b8:e9:f5:19:b9:
41:38:06:97:d6:5d:72:93:b4:22:61:59:f0:39:21:fa:9e:87:
c8:c0:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:49:21 2026 by rpki-client