Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: 85IjWIq3DonTTbWvkD7zA3ugxUH8ySuSO5x9Gi7rN3U=
Subject key identifier: 28:BD:AA:2E:60:4E:CC:F0:C3:F5:32:7C:E5:20:B9:0F:E6:A6:CF:19
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019F9022FFB07C2D462B2F94B22BE6BD46A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 19D7
Signing time: Thu 23 Jul 2026 18:00:40 +0000
Manifest this update: Thu 23 Jul 2026 18:00:40 +0000
Manifest next update: Fri 24 Jul 2026 18:00:40 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: 5Hd4bIsMlx0qVlVgaUmsEbOB9I3/RrcvfZyDmHdg9Ak=)
3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=)
6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=)
7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ff:b0:7c:2d:46:2b:2f:94:b2:2b:e6:bd:46:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jul 23 18:00:40 2026 GMT
Not After : Jul 24 18:00:40 2026 GMT
Subject: CN=28bdaa2e604eccf0c3f5327ce520b90fe6a6cf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:66:b5:57:d1:f5:4a:4c:06:76:00:a4:6c:
2c:fe:e6:ef:dc:5b:4f:0c:36:4f:78:4e:e7:92:d8:
81:7e:73:53:dc:a2:3d:8a:90:de:3b:ee:b7:f6:f9:
67:d7:63:6e:4e:a4:68:bf:80:bf:19:d1:5e:47:3e:
8e:99:ae:bd:a3:50:45:7d:71:ad:34:9f:4a:32:ed:
03:be:ec:2b:8e:db:0a:62:96:6b:5c:cd:33:03:bf:
34:a7:2e:31:7d:20:1b:ff:eb:f5:fd:da:af:4e:ec:
98:95:7f:e0:dd:d8:b2:af:9a:7d:f5:f8:67:af:6f:
fa:6e:52:d8:de:55:d2:77:89:b3:7c:ae:ec:80:87:
66:45:cc:88:3d:e5:62:a0:4b:0b:f0:a8:be:d8:91:
74:74:d3:3e:3d:bb:6a:1f:b3:a0:6f:ee:1f:3c:cf:
58:01:b9:3d:47:a5:6e:71:ba:cf:b4:91:1a:ed:66:
30:47:66:12:ca:80:69:55:59:a4:e7:df:2a:a6:9b:
8e:9d:51:c2:1a:86:f2:41:e7:15:ba:af:95:f6:6a:
48:79:77:b7:39:68:7b:69:52:8e:f5:9b:e8:3d:2c:
8e:0c:8b:8b:d5:95:38:fc:4b:5b:5a:e8:63:be:59:
e1:b4:02:4e:a7:de:6b:d2:0b:9f:9b:6c:81:12:de:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BD:AA:2E:60:4E:CC:F0:C3:F5:32:7C:E5:20:B9:0F:E6:A6:CF:19
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:21:66:2d:e8:a9:81:d3:5d:ca:7e:3b:7b:4f:4f:55:8d:
43:2f:04:da:f3:a5:97:59:50:69:15:19:52:d3:09:0e:0f:55:
d0:50:91:ab:52:89:b8:82:63:7b:35:80:22:d8:de:64:f8:01:
80:f5:b7:a1:74:bb:f3:6d:a6:71:f0:bb:42:4c:6d:03:82:2a:
35:d6:d5:67:90:ed:0f:4b:2b:0b:f2:b9:95:e7:51:b2:18:b9:
dd:36:9c:b9:b1:8f:1a:99:32:6d:85:14:9c:71:c9:64:78:c1:
59:36:e7:08:9e:f9:6e:c8:b3:fe:25:ff:12:93:5d:cd:0d:15:
b6:7a:d0:fe:3d:84:78:d6:0d:cf:b0:a3:59:21:6c:da:44:7e:
74:0c:a2:4b:9b:84:c6:e2:bf:d5:3f:9b:0e:63:e9:4f:38:06:
7f:da:f0:3d:05:34:11:2b:9e:57:a0:09:eb:e4:27:71:de:84:
09:ea:32:97:0f:9e:84:bc:1b:03:6e:9d:75:9f:91:bf:6d:6c:
e8:a2:1a:7e:f1:9a:d3:7a:90:95:b2:c8:f4:cd:bd:8f:63:5a:
de:e7:56:61:a9:b0:26:7b:cf:34:e2:cb:fe:9d:8d:22:f9:8d:
1e:00:d5:cd:03:57:c0:ed:b5:2d:8a:b7:d6:ed:34:4d:fa:6c:
3a:2d:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:56 2026 by rpki-client