
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: Nnh0GJMxMaWxxwJQW+K9mbOPWYTn6Czk3t+tNTYimXc=
Subject key identifier: ED:F1:AA:4D:B6:EE:06:D0:CD:C6:BA:67:C1:8F:E7:A4:F1:9E:C4:99
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A0D42686BD111C5BAA63142C470514013F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1A81
Signing time: Thu 24 Sep 2026 16:01:29 +0000
Manifest this update: Thu 24 Sep 2026 16:01:29 +0000
Manifest next update: Fri 25 Sep 2026 16:01:29 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: cUwPAerCwnHNEUFym0XPI0OqkHsot9SBVHQUv6FgnLY=)
3: 2foRBLMeo0d1JGgfWn6nIOFs-vc.roa (hash: VDRdt1fomluk1BQlPv1n2Ev8FVx7Mrgitk7YePdq/Qc=)
4: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
5: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
6: 6-RO6lEKyV8p6BduvZDc_r5dKqU.roa (hash: 5BfN3RVMV58Wdxlxlajwm60etXfqDYmsQCcNJxtegF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:86:bd:11:1c:5b:aa:63:14:2c:47:05:14:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Sep 24 16:01:29 2026 GMT
Not After : Sep 25 16:01:29 2026 GMT
Subject: CN=edf1aa4db6ee06d0cdc6ba67c18fe7a4f19ec499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:8a:8c:08:c3:e6:ec:be:f8:f0:9e:8c:ca:
49:d4:49:74:73:2f:7c:ed:d3:6e:70:9e:89:46:59:
77:05:e1:38:fd:d3:f9:87:43:a1:18:29:d2:13:85:
a0:e5:12:80:5f:34:f6:7c:c4:59:a2:61:7b:cc:39:
53:32:c0:9b:89:65:96:d9:21:a7:8e:e2:45:61:ca:
75:b8:f1:42:8f:cd:56:0b:67:17:00:e1:03:08:4d:
0a:84:fb:51:db:fb:87:8d:b4:a8:78:30:6a:48:0c:
fb:e8:3c:3c:78:29:0b:89:9c:9b:72:c4:1e:27:88:
fa:af:35:da:65:c2:a7:18:ab:a7:0c:78:d6:80:65:
e6:22:25:ef:ea:36:68:b5:f7:b6:c4:f9:66:81:19:
a8:44:37:4d:76:f9:06:68:e2:7e:73:11:dd:1e:6b:
ef:ec:b3:a4:ae:2c:46:c5:60:2f:23:99:29:66:59:
6a:c4:d1:82:2b:a7:e8:be:87:9e:4f:4a:51:62:34:
4e:d5:e8:6d:ec:cf:cd:e1:18:a7:8f:c2:19:d2:45:
f7:7c:aa:63:8f:26:c6:6a:b5:98:06:68:bf:49:48:
8c:f4:3e:56:c4:d5:9b:66:e0:a4:fd:50:ca:83:8b:
7e:d5:41:1e:9e:07:f4:6c:98:13:e5:18:ee:ba:c2:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F1:AA:4D:B6:EE:06:D0:CD:C6:BA:67:C1:8F:E7:A4:F1:9E:C4:99
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a6:3f:3e:38:dd:5e:58:d3:5f:a9:64:64:6b:f1:f0:ea:54:
4e:0a:c7:b9:dd:2b:c6:83:db:59:3e:5c:af:8d:9c:ad:e6:12:
cd:8c:3b:fa:b0:f5:a6:41:ac:10:65:f3:5b:28:63:99:9a:2f:
8f:b2:11:80:01:0a:3f:7c:30:3d:2f:91:e5:f1:c1:60:40:20:
30:db:c8:f3:af:4f:78:b7:fb:82:57:02:9a:3d:26:bd:32:4c:
b4:77:6b:64:68:64:bf:6d:95:5f:14:7b:b5:cb:1b:0c:d8:07:
58:73:8a:cd:8f:87:c5:36:2c:20:17:a9:94:9d:af:67:6e:8f:
93:6c:df:e7:59:29:48:61:c2:1d:cd:9b:15:f1:e0:e6:21:83:
cf:c6:7c:6e:5c:86:3b:66:fa:05:79:bf:5b:9d:7d:91:75:c3:
61:d8:b1:9a:2e:50:31:9f:c4:00:b0:9a:ea:a5:15:1d:2c:8b:
f2:34:4c:76:dd:23:03:eb:cc:b3:df:df:11:35:57:75:04:70:
12:7b:95:7b:0b:00:36:85:03:f1:73:18:f0:21:de:a3:82:f3:
e0:88:73:1f:80:53:a8:ef:d4:f9:df:4a:ff:5d:66:92:65:5e:
57:f3:ef:c4:2b:1a:ba:09:f4:6e:73:c0:f9:98:bb:d0:fd:9d:
47:fc:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:28:08 2026 by rpki-client