Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: A7kTVLHCAPZqEsIId9A5++yQ5pcl10vhtVJywRa6+OA=
Subject key identifier: 39:09:26:58:60:A8:D5:17:D6:CA:22:FC:B2:5D:46:12:08:FC:FA:F6
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 01A0CFA42455552A6D4CFB1DC96D4536D0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 0B36
Signing time: Wed 23 Sep 2026 19:00:35 +0000
Manifest this update: Wed 23 Sep 2026 19:00:35 +0000
Manifest next update: Thu 24 Sep 2026 19:00:35 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: 57aioQOvUG2ZQfGzP46Ji9NWFWdfdocOWmzC4iEKejs=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:24:55:55:2a:6d:4c:fb:1d:c9:6d:45:36:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Sep 23 19:00:35 2026 GMT
Not After : Sep 24 19:00:35 2026 GMT
Subject: CN=3909265860a8d517d6ca22fcb25d461208fcfaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:6e:6a:7a:27:8c:a7:87:de:3b:62:c7:e4:
41:05:91:47:98:05:09:5f:d5:fb:1a:2b:a8:f8:b1:
a5:06:81:eb:59:6f:cb:e8:d2:4d:6f:73:4c:ce:09:
1a:cc:29:64:2e:2c:97:0c:64:ed:15:84:a4:4e:7f:
47:f8:dd:44:47:a8:60:14:34:48:2a:cf:28:c2:3a:
7f:e7:63:e6:f9:d0:a7:73:44:ae:88:c8:2b:2d:02:
c9:03:f3:c0:8b:5c:fc:35:05:fc:1a:9b:02:dc:d9:
d0:54:bf:8e:5d:9a:74:1f:64:2c:af:99:9e:0f:86:
d8:34:4e:52:c2:7c:0c:b1:82:ab:85:e1:17:c7:19:
e5:1a:3b:c8:9a:fe:09:eb:f2:c6:c9:fc:f3:5b:cb:
34:9b:8c:8f:fb:2d:9c:d9:44:0c:ad:c4:ef:23:30:
dc:0e:29:f6:e3:89:fe:1b:d0:a4:a4:12:e9:20:2b:
0f:d5:36:59:11:7d:38:8b:24:92:8b:b1:7d:f4:5d:
62:e2:0e:f9:e1:9f:e4:e7:fe:cb:50:1d:4a:8a:1d:
d4:fd:69:aa:83:ff:0b:37:bc:43:bc:be:a9:7b:4e:
53:cd:ad:10:a5:04:27:e4:dc:5c:0a:a1:69:a9:79:
54:4d:93:6f:39:a9:a1:96:52:3b:a4:7b:80:a3:24:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:26:58:60:A8:D5:17:D6:CA:22:FC:B2:5D:46:12:08:FC:FA:F6
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:68:af:c7:62:c2:37:08:09:39:6f:ed:dd:87:28:4d:b3:7d:
34:ba:a0:36:56:90:e9:11:a5:b4:5e:3c:5e:52:ca:90:73:5b:
53:da:af:aa:3a:91:4e:33:f1:0a:3d:1a:cc:ab:ab:55:df:0f:
b7:ae:6b:58:42:22:62:b8:0d:a5:d0:11:da:28:ec:1e:0e:c5:
7a:04:a9:9d:0b:79:79:53:06:2b:c0:b8:c8:73:8d:31:6f:32:
fd:2b:b7:bb:f6:61:cb:49:bd:40:ba:4c:6b:69:40:9e:c2:00:
30:8e:4f:74:7c:03:80:40:35:70:a3:2c:17:ca:cf:e9:1b:eb:
b6:29:3f:d1:f2:7f:5c:c9:3a:bd:c6:55:74:75:a9:25:90:65:
89:9a:2d:c6:07:e7:db:82:7c:24:f7:2a:17:78:09:0d:f1:fc:
bb:ad:18:6e:69:af:f7:20:22:28:8f:2a:de:61:0d:02:98:cd:
2a:7b:f0:05:3f:96:47:e2:c3:ff:91:81:1a:a8:31:ab:37:75:
dc:f8:62:b6:34:9c:96:b3:52:55:8a:54:4b:3b:b0:f0:4d:79:
c4:5d:02:d8:4c:d0:d9:fe:bb:01:b5:43:8e:a1:bd:2d:a1:c3:
e0:3a:3c:fa:ad:6a:94:38:71:ca:ed:21:c8:38:91:34:59:9b:
ca:50:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:00:21 2026 by rpki-client