Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: JI7Ly045tEgQUxe+HxcJNdE+Gn8Ri4p7fG+mJsSJ5cM=
Subject key identifier: 25:F9:FC:E7:1D:A4:C4:EB:98:CB:B7:6D:6F:84:74:92:A2:DB:88:98
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 01A00025E40655D89B8A1342F048207EE084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 1476
Signing time: Fri 14 Aug 2026 12:01:18 +0000
Manifest this update: Fri 14 Aug 2026 12:01:18 +0000
Manifest next update: Sat 15 Aug 2026 12:01:18 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: CfL9m9d5jZPu8CvJZ79+74M7JpwAvrQ5xss986dQJhw=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:e4:06:55:d8:9b:8a:13:42:f0:48:20:7e:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Aug 14 12:01:18 2026 GMT
Not After : Aug 15 12:01:18 2026 GMT
Subject: CN=25f9fce71da4c4eb98cbb76d6f847492a2db8898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:f3:ba:41:ed:5d:f3:83:a2:a9:9b:ef:0b:
06:75:6e:f7:fe:26:c8:84:c6:6f:47:4c:16:f7:88:
05:c2:9f:69:5f:5f:7c:7d:3c:48:83:91:dd:f9:3e:
c8:8b:a3:72:ac:b3:a9:11:22:12:6f:70:b2:94:84:
a1:3a:c4:3a:08:e1:34:25:21:ca:6e:51:cc:2d:44:
68:f0:de:65:74:3a:37:c8:09:18:c3:85:ed:23:1e:
16:17:79:1d:e1:4f:11:00:fb:4b:ab:b5:e0:e6:68:
3d:e1:1b:fe:cc:0a:49:5b:ad:1d:b1:c4:45:72:3f:
21:63:d8:94:e4:70:b6:37:b8:04:f9:89:1a:cb:46:
49:9f:94:84:15:40:0d:ec:bd:bc:59:bb:35:23:d2:
6c:b4:e6:bc:24:fd:2e:e2:ea:00:25:f5:17:60:4c:
a3:69:af:38:65:55:3d:e8:91:f2:49:ed:cd:34:3a:
09:b1:91:63:c6:55:19:a4:27:df:78:0c:75:e4:c6:
77:9e:0f:2e:37:f9:9a:c9:7e:48:1a:56:a3:01:e9:
88:90:70:62:cf:4a:4f:ce:35:e1:2f:77:85:29:0e:
b2:79:78:89:9e:87:dc:c5:af:bd:53:f6:ea:e4:f9:
9c:f9:30:fd:11:fe:26:fb:65:c3:52:08:44:bc:7a:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:FC:E7:1D:A4:C4:EB:98:CB:B7:6D:6F:84:74:92:A2:DB:88:98
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:e4:de:7e:5a:8c:2c:7e:52:0c:78:06:65:19:50:d2:d1:
06:c8:3d:8c:bf:75:84:54:73:8a:cd:30:dc:18:9c:2a:82:a3:
e0:c1:6c:b6:5c:9f:44:f6:89:18:73:b6:bb:cc:10:61:e6:ac:
58:f5:26:be:19:cd:10:78:56:85:94:91:9c:25:fd:6b:1c:c0:
b1:93:48:59:89:ff:5b:5c:cf:32:7c:53:dd:3f:ea:ff:c3:fc:
79:6a:c7:9e:21:0c:82:f7:52:24:4a:18:93:77:9a:3c:ab:53:
6c:cf:99:79:2c:bd:b3:d2:bc:9f:bb:ac:b0:4b:3b:75:60:3b:
c2:2a:29:10:22:b9:3d:d1:f9:04:78:85:55:60:9b:e5:94:51:
56:cd:6e:7f:a5:a7:9b:22:03:97:f0:4b:7f:52:32:0f:9e:30:
b1:cb:0a:5c:b2:c7:b8:85:b2:07:21:29:5d:08:36:99:05:81:
83:f8:9a:17:b1:72:f4:6c:d3:32:60:fc:d9:05:0c:a2:59:8c:
d5:72:16:bc:a6:fa:99:79:d2:ea:9e:8c:b3:60:b8:b9:29:8e:
1f:dc:a5:e8:a6:7f:2d:2e:0c:9b:d4:05:4c:a5:53:d3:81:fe:
93:86:45:a6:ae:e8:2f:e1:04:a9:7c:18:93:0d:33:ba:c0:a1:
42:e7:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:04 2026 by rpki-client