Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: 6ERkm32JW3cvsRo0BhYQeTGIdHr4SREmxZ5jOMbFnfg=
Subject key identifier: 16:43:1A:47:04:80:C5:74:6E:7A:8D:74:F9:93:FF:E3:05:2C:57:B1
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019D281668831552A1D7AD7FFFAEEF982883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1898
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: sM1GmSLMkJ+eIJT4Du9bqaKALpWqG5ua32J8FRpHGJw=)
3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=)
6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=)
7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:68:83:15:52:a1:d7:ad:7f:ff:ae:ef:98:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=16431a470480c5746e7a8d74f993ffe3052c57b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:5f:8a:b1:68:9e:bd:70:4c:4b:bc:1b:88:
0e:cd:89:8c:e9:6b:5b:81:af:23:c3:0c:14:24:1e:
45:9e:98:9c:45:ea:84:fe:6c:7e:1f:2c:77:d8:af:
98:56:ad:64:d3:a3:51:57:55:70:88:b3:b2:07:b4:
02:16:0e:34:bb:8d:b0:fe:4c:00:ad:0d:16:7b:81:
5f:c2:12:57:d4:41:31:73:e1:de:d5:9f:75:4f:31:
92:db:b6:ef:9b:c3:48:65:63:4f:34:94:0a:82:aa:
19:ae:77:0b:70:1f:40:11:82:13:46:ab:1e:13:bb:
4c:7d:ff:ba:70:32:bc:d7:48:e1:12:4c:b7:8f:17:
1e:8e:5b:c8:b4:c6:6e:21:a6:c4:fa:7b:11:ae:98:
e2:f0:05:d4:cf:04:ca:84:09:a1:ba:4c:7d:d2:67:
ea:ff:12:41:cc:b1:e4:b9:28:d1:bb:b0:21:52:19:
a9:65:7a:44:da:1b:0c:f7:db:72:14:37:8c:44:6e:
e9:85:1c:e1:e3:80:63:a1:48:d3:9a:cb:7a:c2:8d:
84:31:93:b6:7f:15:54:dc:1c:1e:b2:12:e6:ff:f7:
da:c9:69:58:17:12:44:f2:db:4c:62:d5:f8:ae:28:
7b:33:95:51:7c:80:33:9b:09:b4:0f:c2:50:8d:23:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:1A:47:04:80:C5:74:6E:7A:8D:74:F9:93:FF:E3:05:2C:57:B1
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:37:77:60:74:13:21:a9:34:65:aa:ef:61:eb:64:e2:a5:61:
75:ec:c5:f3:95:8a:a4:31:ea:ca:d2:5e:27:ce:cc:6b:49:0f:
6f:fc:08:a4:c7:25:d7:ea:f9:24:eb:c3:92:c8:ef:d8:95:7c:
18:33:45:a0:bf:f0:fe:55:5c:25:50:41:c9:f1:bc:cb:c9:29:
ef:22:92:f1:fb:92:b3:b1:9a:d7:dd:9a:36:e6:cc:28:69:eb:
40:fd:a6:32:9c:d2:55:65:01:7f:3c:13:04:12:35:95:ea:5e:
74:4c:4e:5d:37:f2:be:ad:72:0c:53:59:aa:e9:54:50:cb:5d:
8f:6b:1d:41:af:01:bd:f9:cd:8d:39:11:6a:f6:d2:04:b1:9c:
44:ee:75:f4:9b:e1:eb:61:9a:2e:87:90:32:df:19:c1:9e:69:
86:09:31:43:5f:5c:4b:3a:13:b1:ce:ea:b0:05:b2:ae:48:d8:
2a:3f:33:7a:3f:09:d1:2e:4a:2d:b4:e9:d1:46:d3:bc:35:24:
f2:45:f6:4e:3b:58:2f:bf:d6:82:d6:d8:ab:d9:6c:dc:99:10:
7e:4c:f2:0e:31:e4:a3:d3:a1:1c:48:30:40:f6:a5:77:10:37:
6a:08:10:f8:7f:a2:0b:f0:5c:ad:c5:02:64:27:d8:d8:5d:18:
03:c5:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:08 2026 by rpki-client