Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: POdvEF0t4jwSzCjqVz2c30mXdPzRpTtI0KvTB5l0Drk=
Subject key identifier: 33:EF:FB:FD:BE:C1:72:E0:FF:E8:1B:4C:0E:AC:16:C1:16:B6:18:79
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A0CC6BC28EFA165CAE1DAC9BCECCED8761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1A7D
Signing time: Wed 23 Sep 2026 04:00:09 +0000
Manifest this update: Wed 23 Sep 2026 04:00:09 +0000
Manifest next update: Thu 24 Sep 2026 04:00:09 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: y3SYQd2EKyQojj3LAkIq1xVmztzEdLBP3uiJTh/wHE0=)
3: 2foRBLMeo0d1JGgfWn6nIOFs-vc.roa (hash: VDRdt1fomluk1BQlPv1n2Ev8FVx7Mrgitk7YePdq/Qc=)
4: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
5: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
6: 6-RO6lEKyV8p6BduvZDc_r5dKqU.roa (hash: 5BfN3RVMV58Wdxlxlajwm60etXfqDYmsQCcNJxtegF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:c2:8e:fa:16:5c:ae:1d:ac:9b:ce:cc:ed:87:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Sep 23 04:00:09 2026 GMT
Not After : Sep 24 04:00:09 2026 GMT
Subject: CN=33effbfdbec172e0ffe81b4c0eac16c116b61879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:b7:dd:d8:e0:aa:b9:73:43:22:f3:cc:2a:
52:d5:1a:b2:85:48:be:a7:ca:9c:e5:db:6c:c0:c3:
f7:96:74:11:b3:33:6f:d8:a8:54:22:96:d9:9e:03:
2c:e4:fe:46:47:68:ba:9d:41:d4:c5:83:1a:ae:99:
17:bc:73:86:55:c0:da:b5:29:14:e5:99:0d:25:12:
2a:5c:80:0a:64:9f:96:6e:97:c2:4e:73:da:64:96:
9d:8f:3c:19:75:60:a8:13:a4:b9:15:48:5c:7d:7e:
14:0b:19:9d:23:0c:96:1b:ad:10:cb:1a:5c:2f:39:
16:7f:ff:e6:d9:87:cb:23:9f:4a:47:f5:98:67:bc:
3c:08:bd:6d:cb:56:24:83:1f:8d:ac:17:ce:41:a5:
6a:44:50:06:95:91:10:b9:dc:21:e0:9a:af:be:47:
a5:15:1a:ce:63:9f:8e:d3:1d:a5:25:a5:c7:b2:75:
2f:00:2e:b0:cc:dd:e7:5e:c0:3b:27:d1:bf:74:26:
1c:82:f5:5d:e8:4a:6e:87:4d:85:b6:0c:45:bf:c5:
c9:1e:4a:28:9a:7c:10:4f:8f:26:b4:34:e1:91:bc:
60:ab:da:76:84:48:87:79:7b:15:5e:62:72:de:bb:
10:d4:ab:9d:bf:ac:f9:cc:09:d0:ae:fb:40:6c:d0:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:FB:FD:BE:C1:72:E0:FF:E8:1B:4C:0E:AC:16:C1:16:B6:18:79
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:bf:9e:ca:ff:c4:6b:51:5c:14:da:67:b4:11:47:b2:35:
70:4c:77:a9:b5:ad:bc:e0:cc:c9:2f:e4:20:c4:7c:a9:18:76:
95:3b:03:5f:37:cb:05:0e:d3:c4:e3:a0:7a:5e:e8:8b:e1:37:
5e:37:3d:7c:60:38:5a:f7:ef:c5:f8:1e:1e:25:88:93:ff:1f:
9c:71:da:0e:67:0e:f0:8e:c1:fb:b1:61:df:17:58:fe:aa:42:
be:89:28:93:a3:07:f1:f0:5f:59:71:72:7f:9d:14:01:a3:c7:
7d:4f:e3:3f:21:af:bf:a1:14:6a:96:6a:ae:03:70:df:64:f2:
04:67:a7:31:55:79:75:db:d0:25:3c:a2:dd:ca:29:5a:17:80:
ea:44:be:68:71:61:3e:bc:74:79:41:a2:f7:c0:6c:10:27:d7:
be:64:da:42:44:71:46:0e:16:95:7e:e3:94:16:f2:7d:5e:43:
41:b2:c9:d0:3d:a4:16:76:96:0a:84:df:b2:2d:b7:5b:b3:25:
21:02:f5:63:c2:b4:9b:94:1f:d3:02:9a:7b:a0:64:c7:80:17:
08:7e:9e:b9:db:2c:1b:35:83:84:95:84:4b:d4:93:31:1b:68:
80:88:54:a9:2b:07:b8:f1:bd:55:f6:c7:94:cc:9d:87:66:ea:
cb:99:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:32:43 2026 by rpki-client