Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: 8WH2aR43f0mb0eriqxQMETpgYBEYywRgnhumljbmuSs=
Subject key identifier: C8:AC:0B:2F:4F:2F:9B:A7:AC:93:12:21:DB:30:1F:C0:6D:32:3F:CF
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 019E1D5924CE82D04CB8A51D45AF5CB8C660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1917
Signing time: Tue 12 May 2026 18:00:41 +0000
Manifest this update: Tue 12 May 2026 18:00:41 +0000
Manifest next update: Wed 13 May 2026 18:00:41 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: 3Njtd13nYrHf3Cy4d2l8l46r8fY7JrKsfFHkSb1jef4=)
3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=)
6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=)
7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:24:ce:82:d0:4c:b8:a5:1d:45:af:5c:b8:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: May 12 18:00:41 2026 GMT
Not After : May 13 18:00:41 2026 GMT
Subject: CN=c8ac0b2f4f2f9ba7ac931221db301fc06d323fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:ea:26:05:3e:34:e6:ef:3c:a8:2c:e6:ff:
b1:30:6b:6b:ac:4b:9a:13:c7:db:14:cb:3e:de:9f:
ec:ef:da:d1:ee:77:fc:ba:c6:9d:c2:21:75:4a:b9:
26:0a:06:7c:d8:48:10:4d:a2:b7:cd:99:7b:d5:31:
bf:d0:52:39:6a:94:87:8b:db:89:25:21:e4:cd:b8:
8b:0e:bb:f0:4e:3d:6f:82:30:bb:2c:4d:0d:4a:e4:
f1:76:b1:3c:ed:f7:9b:32:5b:3a:b5:cb:36:77:45:
25:63:ae:4a:cd:b3:15:04:f3:75:e5:73:61:4b:b3:
f6:9a:0e:89:3f:3b:37:29:ad:50:8a:4e:12:90:1d:
21:30:e2:81:f8:63:f4:01:03:2e:25:ca:3f:51:9d:
b0:37:e1:b8:9a:30:95:9d:dd:c4:fd:2b:07:df:a9:
2a:58:51:48:43:8d:8c:2e:f1:4a:16:6e:38:6f:00:
eb:eb:eb:19:32:ce:eb:85:30:cc:ef:04:07:7c:c2:
d6:de:57:89:24:ee:03:75:b5:04:86:5f:e3:a5:68:
70:f5:12:29:95:09:8f:03:14:23:ca:d9:33:6b:52:
55:f8:da:ab:7c:f6:df:7e:b1:55:23:47:8b:d3:eb:
9e:b5:0f:f5:be:36:05:95:6c:8a:8f:c1:44:9a:ea:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:0B:2F:4F:2F:9B:A7:AC:93:12:21:DB:30:1F:C0:6D:32:3F:CF
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f6:92:2c:50:b7:70:23:80:9c:9a:9a:4b:cc:44:8a:77:51:
55:d4:91:d6:61:d3:01:a7:52:9c:24:56:6e:fa:a8:65:76:f3:
d3:37:b7:75:1c:ce:99:3b:19:f8:c5:2e:7e:60:3f:c0:00:59:
9c:98:4f:af:03:73:f8:3f:6a:36:2d:a9:a6:8e:b0:ca:61:99:
41:96:af:5d:ab:e5:9c:43:3f:80:3e:4e:73:84:ac:d1:46:f0:
22:a1:6b:77:5e:ff:e8:47:82:77:86:a8:6c:fd:b3:af:e9:07:
a3:7e:3d:b9:3a:47:f9:27:62:79:61:4c:a1:5f:80:85:49:16:
ff:87:28:03:b1:2c:43:26:78:60:84:fc:e0:0d:bc:5b:bc:0f:
03:dd:a2:12:ab:06:46:09:62:a9:83:7e:d7:dc:b8:06:b3:42:
b9:a3:bb:16:44:74:57:57:f8:5e:99:8f:9a:a1:0d:ef:b8:f0:
15:65:ed:32:84:85:a1:d1:79:f6:5c:5d:b4:f7:02:88:8f:ed:
fa:5e:1b:4c:13:24:40:36:02:a1:cd:6e:d9:a5:9b:83:a8:b4:
37:84:f6:a4:97:c1:bf:61:7c:aa:dd:53:8b:c6:d1:05:95:88:
9c:a5:e3:d7:35:bb:7e:69:ab:50:c1:3f:74:19:d7:56:79:10:
8f:d4:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:11 2026 by rpki-client