Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: cFLZOKEQ3DRlyLLYwAscq/DfFoIl2R4FUH1q/0HYzSI=
Subject key identifier: 94:F5:3E:8D:03:ED:EA:22:ED:D0:63:54:54:DA:71:9C:E0:2C:CE:2C
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A117BD259E6EBCFE1C67BD4C3025E10A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1AA4
Signing time: Wed 07 Oct 2026 19:00:34 +0000
Manifest this update: Wed 07 Oct 2026 19:00:34 +0000
Manifest next update: Thu 08 Oct 2026 19:00:34 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: CcBloXNLNIbOiGC2yRDywwcdIFQ7QDqaVbU3zAHJwpE=)
3: 2foRBLMeo0d1JGgfWn6nIOFs-vc.roa (hash: VDRdt1fomluk1BQlPv1n2Ev8FVx7Mrgitk7YePdq/Qc=)
4: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
5: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
6: 6-RO6lEKyV8p6BduvZDc_r5dKqU.roa (hash: 5BfN3RVMV58Wdxlxlajwm60etXfqDYmsQCcNJxtegF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:25:9e:6e:bc:fe:1c:67:bd:4c:30:25:e1:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Oct 7 19:00:34 2026 GMT
Not After : Oct 8 19:00:34 2026 GMT
Subject: CN=94f53e8d03edea22edd0635454da719ce02cce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:fc:00:85:3b:26:2b:f1:f8:c7:8d:15:51:
98:f3:03:72:4b:cd:6f:00:16:c0:f4:7a:46:86:ac:
af:a7:c4:56:5b:de:0b:ee:06:7a:05:29:0e:e6:8d:
74:10:67:b9:7e:de:c2:ff:7f:a6:be:98:a8:ea:7b:
8d:cb:35:1e:54:23:01:63:c7:2f:30:27:9b:69:51:
e9:7a:b4:ac:d9:02:1d:a3:ea:40:22:59:d1:1f:50:
97:da:e2:4c:ea:b3:14:50:bb:62:0c:10:8b:fb:76:
dd:7e:73:7e:dd:50:41:28:e9:11:aa:79:75:49:7b:
8c:fd:bf:2a:9f:6a:e0:b0:93:0e:d5:53:94:d7:b2:
56:3c:6d:32:49:a8:73:d2:ef:1e:ca:19:a0:54:d3:
c3:00:07:ee:dc:f0:cc:9a:74:f3:2f:31:3c:1a:06:
23:78:d9:a2:d9:ec:cd:49:c2:d4:4e:4b:a8:bc:e4:
23:64:7f:30:96:57:a8:31:d0:d5:3f:aa:4d:50:8e:
64:bf:bf:a9:a9:39:9f:af:af:59:e9:b4:37:54:16:
dd:3c:7a:37:d0:a7:9b:79:13:dd:b7:e0:e0:92:bb:
e9:08:9a:7d:70:b9:9d:52:4e:48:17:46:5e:66:1e:
ab:a4:bd:a0:55:05:16:1c:8e:73:a6:35:00:21:32:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F5:3E:8D:03:ED:EA:22:ED:D0:63:54:54:DA:71:9C:E0:2C:CE:2C
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:d3:e9:69:e8:0f:90:de:6d:53:43:a7:0d:76:23:68:dd:
67:c1:cf:b3:f4:a1:28:c0:8d:04:d3:be:9d:cf:44:c2:16:5b:
e9:56:92:d8:65:da:87:16:00:2a:70:63:69:9f:0b:a6:f0:7c:
89:9e:06:fd:bd:90:d4:af:1b:db:78:86:b8:f0:90:8c:f1:89:
7e:1b:ba:c4:79:31:13:4e:96:83:0b:46:30:8f:c5:c8:5a:b3:
ff:6b:ed:bf:c6:d5:bf:e0:b3:e4:30:a3:65:d6:19:8a:38:32:
1d:d6:3d:38:6d:c2:cc:94:83:8b:9f:23:9f:23:06:96:45:c9:
14:e8:9c:a7:00:c3:26:01:f1:5f:1e:3d:9b:2d:1e:35:21:98:
3a:df:af:fa:ef:82:54:3b:ec:c2:d7:10:d4:32:25:c2:93:ab:
40:9e:80:34:18:3a:6a:47:f1:91:c6:d7:58:36:de:2d:f6:4d:
d0:ba:a1:b4:a1:22:e1:26:c3:08:59:bc:36:c5:59:a0:bf:1d:
9a:5b:6b:66:96:90:ea:66:f2:b6:17:f3:6f:6a:a8:fc:65:aa:
44:dc:83:f8:24:47:06:d9:dc:ac:1e:04:19:2e:89:e5:61:7c:
bf:77:bb:04:94:43:81:d1:a9:9d:95:0e:12:0f:ad:20:7b:01:
ac:d2:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:44:49 2026 by rpki-client