Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: LoMSy5ccIsUsMJJXN2s8oYl8Ws/jcte/sEjbz2HbCT4=
Subject key identifier: 77:53:1B:EB:0D:C5:70:32:EA:13:A1:5D:9C:D1:D6:D7:65:AD:EA:00
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019D39782987B076362573F13418D1B867C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 1306
Signing time: Sun 29 Mar 2026 12:01:09 +0000
Manifest this update: Sun 29 Mar 2026 12:01:09 +0000
Manifest next update: Mon 30 Mar 2026 12:01:09 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: mPdc5TZInA+M1x85CPgmWfu3BXG8ID5GIBeHT+KdrTM=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:29:87:b0:76:36:25:73:f1:34:18:d1:b8:67:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Mar 29 12:01:09 2026 GMT
Not After : Mar 30 12:01:09 2026 GMT
Subject: CN=77531beb0dc57032ea13a15d9cd1d6d765adea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2e:2e:d9:dd:05:4a:1e:9b:a8:3b:84:4e:f5:
f0:6a:61:c7:18:39:1a:06:84:d0:e8:6e:f6:31:e4:
81:a2:32:5b:50:42:ee:5b:ba:60:3f:49:92:28:0d:
65:8f:ac:e9:41:5f:13:dc:d8:44:fd:ca:1c:49:19:
3c:fd:a8:6d:e8:5d:ed:87:3b:17:c1:09:79:b5:a5:
93:e0:4e:51:d5:06:4e:10:46:94:5e:d0:1c:62:9d:
15:d9:c5:b0:7a:98:06:46:46:64:c8:25:18:a7:16:
81:4b:23:7f:12:c4:5a:f9:c0:8b:99:1e:f3:e6:bc:
1e:ed:d5:87:e4:97:47:b0:08:04:ec:2f:af:71:49:
66:8d:37:39:aa:d0:f6:ab:be:53:f2:09:15:14:bf:
25:50:c7:4f:f3:cc:bf:ed:17:90:fd:be:9a:bb:65:
a6:5e:5b:e8:96:ae:98:69:64:dd:60:19:c4:f9:77:
b6:26:4f:fb:b1:ba:02:2c:27:31:a8:0d:1b:cf:0b:
cd:3c:2f:e2:2c:1f:9f:8b:ba:dc:7d:51:f9:d1:8e:
83:43:d3:ef:cf:00:83:6b:00:ae:c8:e7:5e:97:97:
73:a8:ec:a9:08:35:2c:ec:a6:ab:49:9a:5b:f7:39:
17:86:6d:d0:2a:3b:78:e4:49:50:80:4f:bc:56:57:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:53:1B:EB:0D:C5:70:32:EA:13:A1:5D:9C:D1:D6:D7:65:AD:EA:00
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:e6:75:af:57:62:25:25:80:46:08:b8:07:5e:6f:3c:32:
21:82:90:54:5a:d0:39:c1:bf:3f:9c:e5:5d:fb:85:9d:92:af:
e7:e2:6a:99:91:a9:47:de:a8:f8:6a:50:7e:9a:75:24:d0:4e:
39:7d:ee:53:88:a4:a7:bb:41:47:96:c8:a7:f8:61:7f:12:9e:
87:f9:73:82:ba:15:be:f2:e3:36:58:31:f4:37:47:9c:e7:82:
43:b4:9e:dd:cc:f2:d9:70:01:18:f8:f8:70:d8:c4:c6:7c:bd:
f0:85:23:64:20:e7:39:46:49:c8:97:4b:be:64:2f:e3:3a:56:
18:29:5f:4e:12:6f:44:9b:79:d2:38:7b:e8:45:ec:d8:68:d2:
6a:bd:21:f0:25:22:e4:b5:ec:87:11:0a:62:19:66:a8:e3:96:
7b:7d:fa:dd:7e:69:6b:f9:ce:0f:f4:f4:27:46:1d:50:33:7c:
00:96:e9:52:00:bb:30:f9:a7:22:df:e4:ac:6c:2c:44:58:5c:
18:64:81:75:4e:44:23:9a:e0:15:e1:c4:3a:49:ee:29:25:5a:
c9:da:d0:96:15:32:37:a8:59:b8:b8:6a:2e:44:f7:6c:cb:a7:
bb:b9:12:84:78:63:0a:40:17:b2:f3:66:72:d9:ea:68:67:38:
18:67:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:08 2026 by rpki-client