Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: f9u4wXBuWjFkZ7IGgKHGhuUP4rpqBtQQ4uggAJXNl2U=
Subject key identifier: DA:74:F6:FB:E1:C5:DB:4A:48:CE:BD:41:58:20:35:62:33:CD:85:0D
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019E1C479918FB4474FF70AFBFBB593DF794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 09D0
Signing time: Tue 12 May 2026 13:01:54 +0000
Manifest this update: Tue 12 May 2026 13:01:54 +0000
Manifest next update: Wed 13 May 2026 13:01:54 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: lF6OwDXvVdz/DNqkyNfediC+ovC6TdZyI1xg+yyTvnI=)
2: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:99:18:fb:44:74:ff:70:af:bf:bb:59:3d:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: May 12 13:01:54 2026 GMT
Not After : May 13 13:01:54 2026 GMT
Subject: CN=da74f6fbe1c5db4a48cebd415820356233cd850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:d0:59:4c:b2:7f:1c:2d:aa:c4:8e:76:84:
88:30:40:da:42:c5:1c:3a:b3:8b:79:87:33:eb:0b:
dd:46:e2:09:1d:04:25:c6:b5:35:98:2f:55:1a:b1:
68:a2:ef:e6:83:a2:8c:26:33:88:1e:6e:3b:4e:13:
58:2a:eb:5d:d0:b1:bb:07:92:87:91:b1:b5:d1:e3:
de:97:fb:d9:96:82:0b:a2:d7:89:7b:b9:1c:8b:24:
2b:77:05:d3:1b:aa:2a:d8:a1:2b:9b:52:4b:ce:65:
04:07:35:9f:94:86:01:0e:f8:ef:29:19:79:71:d1:
84:5c:e7:17:ee:b0:e6:41:50:f8:a6:76:83:c7:fa:
7a:cf:c3:f5:fc:90:28:8f:44:cc:88:21:a8:2c:1a:
54:d0:82:a0:cc:73:46:0a:d8:24:6a:88:1d:74:00:
97:31:52:66:4f:97:f1:e2:55:71:f5:72:51:61:64:
18:5f:cd:2f:44:d0:25:17:d6:8a:de:36:fb:7c:1f:
cb:d5:2c:b9:20:34:d9:47:b0:e2:97:0c:c0:e3:e1:
0a:3d:d7:86:50:fb:2c:9a:6c:98:0d:e4:1e:ef:46:
1d:72:56:fe:89:14:c1:39:dc:59:a8:fa:66:f7:0e:
a4:46:a6:e5:76:8c:cf:c0:04:1c:a3:2e:77:e5:d2:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:F6:FB:E1:C5:DB:4A:48:CE:BD:41:58:20:35:62:33:CD:85:0D
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:ef:b4:78:30:91:66:b3:53:29:a9:31:33:41:2b:6d:06:
1e:25:b5:c8:96:fd:1d:09:31:61:c3:06:0c:d5:07:9a:58:56:
6e:f7:a3:6b:76:c7:e1:35:8e:4e:c7:4f:d4:8f:ee:40:d5:24:
3e:ba:1c:2f:cb:8f:8d:07:8f:5e:ea:11:56:a8:26:71:65:23:
09:4c:08:03:f3:50:ea:9f:a2:74:d3:35:54:6b:7d:a6:a0:5e:
b7:ad:11:72:2a:c7:18:1f:c7:06:4a:ad:ac:bc:ba:44:d4:24:
cb:ae:db:49:e4:cc:93:05:08:e4:2d:b7:6f:c6:fb:b6:41:85:
1d:de:68:ee:e1:2d:20:b5:66:99:1b:ff:5e:99:9d:31:4d:a0:
62:11:0a:0e:a1:da:d0:7d:4e:4d:0d:35:a5:84:e1:26:bd:e5:
40:64:0b:8b:fa:9d:da:24:45:ef:3c:b8:ef:97:d2:59:73:0a:
f1:f9:6d:9f:cf:84:18:c7:97:f9:bb:8c:11:77:bd:ce:ce:74:
4e:59:f9:63:33:f8:72:23:72:2e:32:16:ff:8b:58:16:3f:f2:
c0:3c:74:13:ea:60:ea:52:ea:c0:01:db:ff:3e:64:f1:52:4e:
c0:ca:92:8d:12:d6:3c:4e:8e:9b:0b:5a:33:14:7b:68:65:2f:
d3:85:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:01 2026 by rpki-client