Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: fYK7dcTonFkeQiboYao7BO16WlxxZvsk79HpZ9HSAWc=
Subject key identifier: 7A:39:7C:72:D2:1D:0C:BA:C3:41:F3:37:C2:F9:35:2E:C3:58:6A:6E
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 01A1A7EFCCBA1ECA6CC8E3DB1B7027357937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0BA6
Signing time: Wed 04 Nov 2026 19:01:12 +0000
Manifest this update: Wed 04 Nov 2026 19:01:12 +0000
Manifest next update: Thu 05 Nov 2026 19:01:12 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: nNIl/8AJg8j6FeO77EU/TR4VDxYRJMyxMaMm75n2/9Q=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:ef:cc:ba:1e:ca:6c:c8:e3:db:1b:70:27:35:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Nov 4 19:01:12 2026 GMT
Not After : Nov 5 19:01:12 2026 GMT
Subject: CN=7a397c72d21d0cbac341f337c2f9352ec3586a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:3c:cb:7f:3d:d1:83:49:00:ea:91:5d:d5:
30:2b:ce:0d:23:4b:2e:0e:c2:d0:99:ca:d5:f4:67:
dd:22:d6:06:97:ac:ca:87:11:eb:33:4a:92:30:c4:
67:52:e8:e2:7a:a4:19:79:d5:cf:9e:11:8e:4e:9c:
68:a3:6a:88:82:c3:9f:88:f7:90:f8:7b:f1:c8:70:
46:d3:fc:95:1b:bf:cf:e3:2f:8c:c7:9d:80:1d:85:
74:1c:c4:ec:b8:20:0a:fb:8c:e4:77:3f:16:07:86:
52:63:e0:3a:83:33:14:5f:ba:a1:5a:09:42:60:89:
ed:08:3f:6f:a0:92:b4:a0:06:cf:da:42:0a:cb:ce:
e4:6c:40:c1:5b:46:d7:64:b7:cd:dc:9f:71:02:71:
73:ca:83:fb:ab:b5:91:b4:fe:b2:52:b3:f7:11:7e:
00:3f:50:2c:45:fb:1b:23:4e:ba:4a:cb:53:57:97:
6a:3c:f3:53:29:0d:66:c1:e7:65:a7:6f:3c:07:74:
f7:23:95:64:44:a3:1a:60:90:11:3e:72:40:cb:00:
f6:17:12:c1:3a:33:41:72:47:58:b0:41:53:22:28:
f9:5b:e0:43:d6:98:93:e4:93:0f:8c:d4:79:e0:72:
f9:d4:68:e0:0a:62:cb:7f:58:99:42:73:44:a8:25:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:7C:72:D2:1D:0C:BA:C3:41:F3:37:C2:F9:35:2E:C3:58:6A:6E
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:61:68:9b:38:dc:a9:9c:9c:e0:2b:cc:f6:83:db:d8:a2:5a:
b3:89:d6:1c:94:d6:2e:67:92:74:d3:3c:ba:7f:61:67:ab:be:
14:88:0a:c1:fb:6f:ef:7f:2f:0e:6b:5c:a4:51:78:74:e8:32:
58:22:60:5e:26:f5:ab:59:95:e9:5a:2a:d9:07:63:f7:f6:36:
38:11:3a:94:fd:86:75:b1:4a:38:7c:c6:2c:93:2e:5c:6d:57:
e3:ee:16:b7:83:61:eb:0d:e4:22:36:64:d2:4a:dc:da:dc:87:
ab:c3:99:dd:c2:81:8e:56:ba:63:6f:73:1c:d7:6d:f0:92:49:
85:34:9b:c3:fa:9e:e1:d3:fb:d3:fd:5e:74:9e:3d:5f:3c:b1:
55:51:01:ca:ab:92:da:cd:0f:ac:22:cb:6e:bd:e3:c1:b9:5d:
23:73:f6:d4:18:f0:a6:00:2b:d7:12:4f:26:4e:18:ba:6c:6f:
cb:36:b1:86:9d:5c:47:93:9f:24:10:9a:71:6a:35:da:54:4b:
68:ef:1b:31:f8:62:54:5c:b8:f8:f2:61:25:aa:b1:7d:67:6c:
fb:ac:57:ec:8d:9f:7e:b1:7a:d5:c6:3c:aa:05:07:00:dc:36:
e2:9a:6a:58:0d:01:c9:79:0b:6f:e0:9e:08:8b:f0:1d:ee:7d:
00:ab:47:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGn78y6HspsyOPbG3AnNXk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm
YjBjZDgwHhcNMjYxMTA0MTkwMTEyWhcNMjYxMTA1MTkwMTEyWjAzMTEwLwYDVQQD
Eyg3YTM5N2M3MmQyMWQwY2JhYzM0MWYzMzdjMmY5MzUyZWMzNTg2YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls48y3890YNJAOqRXdUwK84NI0su
DsLQmcrV9GfdItYGl6zKhxHrM0qSMMRnUujieqQZedXPnhGOTpxoo2qIgsOfiPeQ
+HvxyHBG0/yVG7/P4y+Mx52AHYV0HMTsuCAK+4zkdz8WB4ZSY+A6gzMUX7qhWglC
YIntCD9voJK0oAbP2kIKy87kbEDBW0bXZLfN3J9xAnFzyoP7q7WRtP6yUrP3EX4A
P1AsRfsbI066SstTV5dqPPNTKQ1mwedlp288B3T3I5VkRKMaYJARPnJAywD2FxLB
OjNBckdYsEFTIij5W+BD1piT5JMPjNR54HL51GjgCmLLf1iZQnNEqCX5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo5fHLSHQy6w0HzN8L5NS7DWGpuMB8GA1UdIwQY
MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt
NDdmMDQzZmJhMTNiLzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi
LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWFomzjc
qZyc4CvM9oPb2KJas4nWHJTWLmeSdNM8un9hZ6u+FIgKwftv738vDmtcpFF4dOgy
WCJgXib1q1mV6Voq2Qdj9/Y2OBE6lP2GdbFKOHzGLJMuXG1X4+4Wt4Nh6w3kIjZk
0krc2tyHq8OZ3cKBjla6Y29zHNdt8JJJhTSbw/qe4dP70/1edJ49XzyxVVEByquS
2s0PrCLLbr3jwbldI3P21BjwpgAr1xJPJk4Yumxvyzaxhp1cR5OfJBCacWo12lRL
aO8bMfhiVFy4+PJhJaqxfWds+6xX7I2ffrF61cY8qgUHANw24ppqWA0ByXkLb+Ce
CIvwHe59AKtH+g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 01:44:17 2026 by rpki-client