Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: 2RjZhYcfdMG/1v5QQM+WXzSt+QZsNHAlDM8n+7efVM4=
Subject key identifier: 99:AA:EB:14:18:67:52:C4:25:F7:2F:FA:33:D7:C4:1A:86:DE:D7:C1
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 01A140BA23A5A372A611A43B4DB7EBC77D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 151C
Signing time: Thu 15 Oct 2026 18:01:42 +0000
Manifest this update: Thu 15 Oct 2026 18:01:42 +0000
Manifest next update: Fri 16 Oct 2026 18:01:42 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: knpCVfSaR2SFZHibZ950FU/googehTcdBcx7/+hEyOo=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:23:a5:a3:72:a6:11:a4:3b:4d:b7:eb:c7:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Oct 15 18:01:42 2026 GMT
Not After : Oct 16 18:01:42 2026 GMT
Subject: CN=99aaeb14186752c425f72ffa33d7c41a86ded7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:1a:4b:cb:70:29:8e:ad:30:8a:fa:ab:7d:
41:2f:d3:f6:db:8d:6b:f3:dc:ba:8c:ee:9b:73:84:
01:f3:9b:9a:4a:e2:68:2d:0d:24:af:b2:2f:e8:1a:
2f:44:02:8f:67:e8:5f:6e:d2:e7:f3:c5:af:08:42:
50:d6:a5:d5:48:87:20:83:bc:8c:3d:90:17:c6:96:
ae:ff:25:d5:aa:86:11:dc:e1:f9:e0:df:e7:5b:fa:
bd:30:06:24:e3:63:1a:79:f4:00:fd:25:8f:29:f5:
57:3e:c9:2b:85:13:79:74:a4:c6:e8:49:01:9f:34:
e6:ea:22:15:4d:c5:c2:c2:01:bc:d6:c7:54:f1:c7:
cd:16:0b:78:83:76:ea:7c:79:d8:4b:4a:12:19:b7:
64:4e:3e:57:97:aa:e6:01:68:40:04:1e:15:a9:e3:
d4:c1:02:14:85:61:f7:24:c9:26:d7:b0:8d:3b:82:
a1:7f:df:0c:81:d1:f1:d3:df:1a:d0:bc:da:69:3c:
4d:d7:2c:15:15:81:4c:54:fa:bc:fb:51:99:c3:b7:
d3:9f:26:f3:0b:18:eb:dc:5a:78:f3:3b:0d:5f:18:
d6:98:5f:62:c3:0f:8e:d9:32:21:1e:54:cc:8d:ce:
66:12:8d:75:a8:59:a6:d8:82:6e:c4:c3:eb:e6:cc:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:EB:14:18:67:52:C4:25:F7:2F:FA:33:D7:C4:1A:86:DE:D7:C1
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a1:f3:63:81:f3:dd:4e:c3:8d:0e:63:80:67:ab:a5:c0:a0:
fb:22:95:13:ad:05:59:65:1f:2d:67:86:8b:41:7c:34:bf:48:
b3:fa:cb:0f:91:0d:24:13:2e:f8:95:71:14:34:73:f4:3e:eb:
bd:82:77:9b:50:1e:9e:6b:b7:bc:b6:c5:ee:e1:bd:54:f5:c3:
4c:9f:51:88:09:67:0b:c4:6c:aa:68:1d:95:fc:51:0f:af:72:
1b:96:53:fb:e2:81:89:f5:b4:af:04:e3:0e:0c:7e:d9:61:6f:
54:0c:6e:8f:1a:a0:62:08:a0:0e:33:65:32:25:1f:eb:b1:7a:
60:7d:e6:d3:e9:bf:9c:ec:e5:f7:b0:91:ee:6d:55:37:29:a7:
8d:d7:59:ef:61:b0:cc:df:76:22:5c:8f:97:ef:d3:ac:a5:fe:
ac:cc:10:70:e5:7d:7b:63:1c:08:be:5b:b2:60:38:cc:71:2e:
97:b3:cf:3e:66:d5:8d:a9:16:11:3d:96:e7:41:96:20:e3:be:
20:dc:5e:89:6c:d0:c3:ef:50:d8:a6:98:f0:22:0d:88:c6:db:
e9:02:a5:8d:91:67:12:12:44:05:fd:a3:60:ec:da:c1:55:fc:
b2:7c:9b:ed:ca:44:ad:ba:29:dd:26:f9:eb:49:c8:ab:59:1f:
63:17:26:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAuiOlo3KmEaQ7Tbfrx31aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTgyYTk4ZDZlZjgwZmZiMjkxODI3ZGE4YWNjYTc0NDkx
MDgwYjQwHhcNMjYxMDE1MTgwMTQyWhcNMjYxMDE2MTgwMTQyWjAzMTEwLwYDVQQD
Eyg5OWFhZWIxNDE4Njc1MmM0MjVmNzJmZmEzM2Q3YzQxYTg2ZGVkN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQaS8twKY6tMIr6q31BL9P2241r
89y6jO6bc4QB85uaSuJoLQ0kr7Iv6BovRAKPZ+hfbtLn88WvCEJQ1qXVSIcgg7yM
PZAXxpau/yXVqoYR3OH54N/nW/q9MAYk42MaefQA/SWPKfVXPskrhRN5dKTG6EkB
nzTm6iIVTcXCwgG81sdU8cfNFgt4g3bqfHnYS0oSGbdkTj5Xl6rmAWhABB4VqePU
wQIUhWH3JMkm17CNO4Khf98MgdHx098a0LzaaTxN1ywVFYFMVPq8+1GZw7fTnybz
Cxjr3Fp48zsNXxjWmF9iww+O2TIhHlTMjc5mEo11qFmm2IJuxMPr5syQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmq6xQYZ1LEJfcv+jPXxBqG3tfBMB8GA1UdIwQY
MBaAFNgYKpjW74D/spGCfaisynRJEIC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTct
OWIzNjBlMWJhMzIxLzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTctOWIzNjBlMWJhMzIx
LzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKHzY4Hz
3U7DjQ5jgGerpcCg+yKVE60FWWUfLWeGi0F8NL9Is/rLD5ENJBMu+JVxFDRz9D7r
vYJ3m1Aenmu3vLbF7uG9VPXDTJ9RiAlnC8RsqmgdlfxRD69yG5ZT++KBifW0rwTj
Dgx+2WFvVAxujxqgYgigDjNlMiUf67F6YH3m0+m/nOzl97CR7m1VNymnjddZ72Gw
zN92IlyPl+/TrKX+rMwQcOV9e2McCL5bsmA4zHEul7PPPmbVjakWET2W50GWIOO+
INxeiWzQw+9Q2KaY8CINiMbb6QKljZFnEhJEBf2jYOzawVX8snyb7cpErbop3Sb5
60nIq1kfYxcmtw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:10:04 2026 by rpki-client