Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: Igaj0WKVEc0Y/gpuhgJ/Jhm26SBq+8BVzZqilCalzWI=
Subject key identifier: EF:70:4A:2C:19:CD:DB:A4:C3:A4:95:5B:95:78:5E:25:5C:B5:9B:E3
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A11003C9045D3EB619AE8BF1F7B29EF258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1AA0
Signing time: Tue 06 Oct 2026 07:00:45 +0000
Manifest this update: Tue 06 Oct 2026 07:00:45 +0000
Manifest next update: Wed 07 Oct 2026 07:00:45 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: AgX6RY9kvVANR3qVQcfawEzxLzMcdkBWXpZguMJWUYo=)
3: 2foRBLMeo0d1JGgfWn6nIOFs-vc.roa (hash: VDRdt1fomluk1BQlPv1n2Ev8FVx7Mrgitk7YePdq/Qc=)
4: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
5: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
6: 6-RO6lEKyV8p6BduvZDc_r5dKqU.roa (hash: 5BfN3RVMV58Wdxlxlajwm60etXfqDYmsQCcNJxtegF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:c9:04:5d:3e:b6:19:ae:8b:f1:f7:b2:9e:f2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Oct 6 07:00:45 2026 GMT
Not After : Oct 7 07:00:45 2026 GMT
Subject: CN=ef704a2c19cddba4c3a4955b95785e255cb59be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:3a:3b:39:66:16:27:a1:ef:f8:48:e0:2f:
c1:3b:66:dc:d8:aa:50:69:d4:45:3f:6f:4b:e7:95:
d2:78:0f:96:4b:5f:50:62:f1:5e:5e:c7:f1:a4:09:
85:6e:b6:fa:0f:a0:7f:5e:47:9d:57:37:99:72:e8:
b6:d9:62:a9:05:b0:87:7d:92:9f:d7:86:26:b5:1d:
b7:fc:be:84:bc:c7:43:bb:2a:27:b6:38:63:42:a7:
37:7e:b7:87:73:22:de:3f:33:88:f3:1e:3a:11:2a:
ea:e8:1e:50:18:8a:88:d1:e1:a8:14:45:05:39:9a:
67:b1:a0:33:0b:53:72:97:e9:99:df:bd:e2:48:17:
c3:d4:72:ad:94:14:26:5f:72:be:74:81:e6:80:0f:
ed:4b:1e:35:c2:63:85:8b:02:2a:cb:d7:cf:96:95:
e5:ab:d1:b2:bb:82:b1:0c:4c:d4:6a:f5:7d:dc:c5:
fa:76:40:94:c1:cd:92:70:f1:3b:ea:7f:99:a1:85:
3b:19:1c:81:af:d3:4a:73:55:db:d2:f9:34:81:e5:
a3:76:72:20:48:0d:6f:bb:8b:05:e9:35:e7:7d:0d:
c2:4d:3a:c9:4f:93:19:39:3e:4e:55:12:68:f4:28:
bb:6b:64:61:20:65:78:b1:f5:01:53:31:e3:b1:3a:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:4A:2C:19:CD:DB:A4:C3:A4:95:5B:95:78:5E:25:5C:B5:9B:E3
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6e:a8:d9:2c:f8:32:0d:99:85:84:1b:db:a9:d3:11:8a:72:
3d:74:9a:7e:29:83:94:01:cb:c7:12:10:f4:d6:67:5c:3d:89:
9a:8a:35:64:5c:b9:de:33:9d:c8:8d:dd:48:c3:67:71:7a:0b:
05:00:6c:73:74:1e:b5:35:1f:65:c7:59:98:70:67:10:ad:07:
71:3d:4d:c6:f4:21:52:7d:eb:61:3c:69:2b:df:87:cd:ff:56:
60:9c:3e:1f:ee:8b:8b:3c:ca:b5:e5:61:22:d7:48:43:79:7a:
49:fd:4b:50:39:3b:c5:f7:4a:4d:60:ce:57:ad:25:59:4d:e6:
6a:46:19:87:a5:54:cd:a3:25:07:e9:0c:3e:06:3e:c7:f8:ac:
81:71:3a:7e:3a:26:44:03:6e:39:df:d9:35:2f:c8:3e:81:e9:
12:d3:d8:69:0a:e7:6e:65:86:7d:44:38:5a:a6:9a:59:06:7e:
b8:b4:63:33:91:f0:ea:a6:88:7d:a6:f3:fe:f1:7c:07:b7:ec:
8c:a1:bc:12:6e:c4:b5:c1:65:c3:c7:2a:8c:c5:60:da:73:24:
93:f9:65:20:aa:b7:e1:09:b5:72:d7:9d:9c:6b:5f:e2:8b:5d:
5c:83:89:fb:b5:fc:6d:86:a1:ca:d7:a5:0c:16:0a:dc:2a:c4:
e9:19:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:54:54 2026 by rpki-client