Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: OhPweiLAAbmTrTXzsAEIV+GJOZYBLDo/wT5DQRcpe9k=
Subject key identifier: 60:62:A0:57:41:70:54:87:7B:F5:C5:B6:21:56:C6:DD:ED:BD:70:D7
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A002140D05CE76EF8BF3EF5A18D03F04FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 1A12
Signing time: Fri 14 Aug 2026 21:01:03 +0000
Manifest this update: Fri 14 Aug 2026 21:01:03 +0000
Manifest next update: Sat 15 Aug 2026 21:01:03 +0000
Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: CqpzjhGeYX+i8nwtIMt3QN4omlWNtkSlBbFgK4azVFA=)
3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=)
6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=)
7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:0d:05:ce:76:ef:8b:f3:ef:5a:18:d0:3f:04:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Aug 14 21:01:03 2026 GMT
Not After : Aug 15 21:01:03 2026 GMT
Subject: CN=6062a057417054877bf5c5b62156c6ddedbd70d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:e4:c1:af:ad:3e:2f:3c:6c:42:0d:56:4e:
ad:d4:9e:fb:4e:95:89:76:62:be:85:d3:ce:0c:48:
dc:f1:c5:7b:d7:c3:b9:16:04:d6:58:61:50:a3:c2:
87:5d:04:be:45:b6:2c:a1:f0:4e:fd:12:92:c1:81:
07:b3:1e:fd:8a:39:18:ad:d7:22:dd:bd:a0:bc:e5:
5c:5d:c5:dd:af:ad:ad:d2:3d:a7:96:74:b4:c1:fa:
8a:4b:f0:46:54:01:95:ec:36:57:ed:a0:2a:1e:8b:
be:16:c1:50:4d:67:3b:dd:3b:4b:4e:5f:0c:a4:75:
e0:ab:31:6a:a4:b7:ee:16:66:99:a0:79:ca:53:76:
6b:95:e7:64:fe:5c:eb:4f:9f:19:36:6c:c8:60:3f:
a8:10:66:48:97:64:0c:81:da:cc:38:ee:3b:bc:cc:
ab:16:87:00:35:3b:34:fc:91:71:16:01:7d:3e:0b:
d5:32:d0:2f:3e:6b:f6:d5:8f:8b:4d:40:16:a9:b1:
04:01:8d:26:35:3e:02:98:bd:08:73:2c:cc:ba:d4:
af:36:ff:2c:17:45:17:9c:6d:d6:4e:82:a4:29:4b:
f4:44:3f:e9:df:83:fb:99:6d:fc:86:bf:6e:dc:ab:
df:40:45:15:d4:3d:ff:a9:38:21:0c:7b:72:2e:d2:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:A0:57:41:70:54:87:7B:F5:C5:B6:21:56:C6:DD:ED:BD:70:D7
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c5:0b:55:c4:d0:c3:65:27:eb:f5:43:9c:e2:7b:07:21:63:
3e:8e:dd:bc:73:25:38:3d:19:2d:52:46:f0:f0:13:d8:e4:b4:
3d:dc:81:e3:f6:31:44:9d:26:73:4e:58:bd:60:45:7b:12:19:
8e:bb:74:9a:1c:c1:1f:04:d9:ba:7b:b6:03:2f:e6:4e:dc:fc:
4b:3b:72:dd:b2:b7:7a:45:b6:36:b7:3a:37:e8:97:26:0f:93:
7e:a8:2d:5e:3d:2a:6c:4c:23:7d:59:0c:ca:b1:b1:91:52:4f:
a0:61:c8:7c:29:c0:35:8f:6b:be:70:83:40:25:8a:b4:68:94:
30:e3:90:1e:ae:7a:6e:76:13:84:7e:aa:4f:58:21:e8:b9:a4:
63:60:ea:7f:54:01:bf:ea:84:a8:40:e9:d5:02:b3:12:14:50:
af:51:a8:5f:6e:5f:00:0c:10:29:32:37:b1:41:97:f0:9c:fa:
09:6b:ce:b0:07:2c:c1:cd:8d:57:cf:39:a5:2d:41:31:5b:58:
4c:a7:a8:43:86:ab:de:d9:19:87:9a:46:68:d2:67:70:55:09:
c7:a8:75:2c:f9:ab:e4:9d:01:c7:f3:27:3c:bd:e1:86:d8:92:
36:1f:1e:03:af:ac:d0:9d:45:b1:75:2f:78:8e:d8:fb:ac:8f:
25:32:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:56 2026 by rpki-client