Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: FB2yvAntHE/gbOVm1kT6vMOoFiZi8BR+uXGXqdfp3k4=
Subject key identifier: 02:69:58:B4:18:AB:BE:14:59:9B:03:F5:D2:D4:C1:B0:7E:23:AE:87
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019DD8AF5D73C6FBD9061AAA2C559854E7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 09AD
Signing time: Wed 29 Apr 2026 10:01:04 +0000
Manifest this update: Wed 29 Apr 2026 10:01:04 +0000
Manifest next update: Thu 30 Apr 2026 10:01:04 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: 8uTbnTFgq1DavuRFl0I1/N/IBp3cNFBmxq0R9c9xfuw=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:af:5d:73:c6:fb:d9:06:1a:aa:2c:55:98:54:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Apr 29 10:01:04 2026 GMT
Not After : Apr 30 10:01:04 2026 GMT
Subject: CN=026958b418abbe14599b03f5d2d4c1b07e23ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:87:83:e9:6c:21:df:83:e6:99:08:0a:b4:
72:21:04:b9:02:37:01:95:a8:1d:23:e8:bc:96:54:
ed:39:b6:5e:8a:cd:0a:57:b4:b9:c3:cc:f6:d4:bc:
0e:06:36:22:8c:d1:d3:e8:f6:83:9a:21:90:d4:d5:
1a:c8:f0:fd:96:7a:08:8b:7f:b6:35:1f:96:5b:d0:
98:fb:72:17:a1:0d:a7:22:18:01:55:40:d6:a3:37:
ac:bd:3a:64:2a:f0:53:72:00:79:79:1c:8f:18:30:
80:d1:4c:e4:ea:18:08:86:3f:b1:8d:6d:05:1b:a7:
76:60:3d:8d:2b:75:1d:ea:82:39:5d:a2:68:0c:a2:
e2:ae:51:8f:60:3e:55:e5:3b:9b:2a:d3:6f:3e:4a:
2b:56:f7:ff:50:da:15:00:b6:bc:c9:04:66:66:7e:
c8:71:1e:3f:1b:cb:4e:8a:d1:74:cb:98:af:8e:0a:
c5:8a:e8:7c:45:49:29:70:66:92:92:1a:f2:f4:d7:
d9:8c:b4:9e:fc:a6:14:6a:77:de:88:69:bf:35:6f:
7c:d7:42:26:33:37:0a:b5:24:03:84:70:41:dc:bd:
85:64:8f:b8:d1:73:8e:94:d3:5a:5b:02:d9:9c:98:
9d:99:f7:b6:37:59:98:56:c9:ba:6c:4c:81:01:52:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:58:B4:18:AB:BE:14:59:9B:03:F5:D2:D4:C1:B0:7E:23:AE:87
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1e:f7:93:77:2e:a7:58:de:cd:ad:c8:d8:05:54:d0:a3:ee:
e9:25:13:c4:93:4d:7f:d8:d8:9d:cf:5e:57:f0:43:b7:0d:b2:
5c:23:ca:ca:d2:d7:8d:fe:19:8d:80:c7:7b:93:14:44:65:4b:
0c:c8:47:09:c8:5a:e6:b5:54:c0:0e:68:b5:3f:a6:4c:21:b4:
9f:a7:91:de:49:d8:72:16:35:67:da:15:9a:06:b8:43:ca:6a:
65:ad:51:10:54:fb:d4:74:9f:df:7e:ef:c1:c9:af:21:af:87:
c8:d8:dc:a0:f6:04:13:b6:d2:5f:2e:17:e1:d9:0f:6a:ed:0f:
68:85:6b:36:00:70:0b:c6:dc:51:a7:40:16:14:04:4f:ac:e7:
2d:94:38:ea:72:5e:fd:9b:19:fc:c0:47:37:d1:4c:bc:d9:77:
fa:74:9e:3e:92:fb:fa:56:e8:c6:ad:7d:f5:bf:7d:f9:85:09:
28:50:d0:5f:1a:83:6e:f7:c4:99:be:47:d4:6a:95:e1:6e:c0:
db:27:58:96:36:4c:86:6d:d9:bf:7b:1b:17:3d:8b:38:58:0a:
aa:e1:1b:c5:bd:c8:c1:46:2b:92:f2:6a:63:11:92:a6:fa:2f:
b9:d4:eb:9b:32:13:72:85:3a:23:0c:fb:4c:ac:83:a3:db:b9:
70:51:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 18:09:16 2026 by rpki-client