Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: MLzRDGaJaq6nxxEn5AtJ64wYcCgktRhKXePmL6mNYhc=
Subject key identifier: 44:67:5F:81:36:96:02:E4:90:55:D0:A2:AB:F7:3D:B3:B9:9B:5F:C0
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019E30A90FFB593C17BA6F331995DC392B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 1386
Signing time: Sat 16 May 2026 12:00:46 +0000
Manifest this update: Sat 16 May 2026 12:00:46 +0000
Manifest next update: Sun 17 May 2026 12:00:46 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: 3Dkl4PBMn9BTEHp6PquhQMzmd9HhTlxzHtdtiUi7NlY=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:0f:fb:59:3c:17:ba:6f:33:19:95:dc:39:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: May 16 12:00:46 2026 GMT
Not After : May 17 12:00:46 2026 GMT
Subject: CN=44675f81369602e49055d0a2abf73db3b99b5fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:e2:a6:a1:6a:ea:1f:c2:9f:ee:93:bc:84:
58:da:88:1f:bb:ea:e1:90:5a:9a:6a:b0:97:68:95:
d3:17:32:d2:91:35:26:34:65:f4:a9:4d:3f:18:0f:
8f:ea:83:6b:23:61:26:d2:86:b1:11:81:86:f2:96:
41:aa:29:36:5e:b6:58:20:c1:1b:a8:7c:9e:68:33:
f3:02:41:08:92:f1:08:91:8e:c4:dc:bc:03:a5:c6:
a5:86:2c:fa:53:dc:02:fc:e5:9e:d0:51:41:c8:53:
00:73:26:78:e0:2d:a5:25:71:01:00:bb:0f:50:52:
bb:14:06:b8:c7:ab:72:0a:6c:2d:11:5d:8b:b3:9f:
dc:14:be:25:79:cb:ce:72:4c:da:9a:e1:f5:01:6a:
cc:28:95:de:58:26:b3:53:ed:44:8c:a0:e1:10:82:
31:d6:b4:33:32:cb:fa:d0:3b:02:91:92:a3:a0:44:
f1:03:e5:a1:8d:50:72:f6:b6:b4:10:b5:42:d8:a9:
9a:d6:00:78:71:5f:48:fe:f0:d5:0b:e8:1e:d1:14:
72:03:a7:45:5d:a6:44:5d:d4:02:8b:65:0b:73:47:
f9:d2:18:e2:7f:97:a9:5d:ee:7d:47:b7:0f:83:bb:
e4:3c:c6:54:b8:15:68:b5:23:0c:8b:38:68:78:d9:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:5F:81:36:96:02:E4:90:55:D0:A2:AB:F7:3D:B3:B9:9B:5F:C0
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5e:92:cd:df:c2:ec:92:c3:7f:f7:6f:87:1c:a3:c2:11:6b:
17:cb:1a:68:b7:15:fd:c0:2d:ef:4e:b2:a0:b8:9d:98:ba:e4:
ab:c1:63:0f:f6:33:47:48:b4:81:d7:c1:cb:66:a5:5b:65:e1:
86:7a:7b:13:c8:2a:a0:65:24:cf:aa:5d:df:4a:20:aa:ff:8a:
34:f4:c8:55:41:49:91:a0:db:62:77:dc:50:b7:db:39:6b:44:
0b:52:fb:8f:7f:f4:ad:6f:60:35:78:2a:ed:35:05:fb:ce:1c:
36:5b:42:3a:95:4a:0d:ef:91:68:07:16:e7:b2:fa:88:9f:5d:
b8:88:3b:7a:c2:8c:e6:36:bb:cb:2c:2c:58:58:c9:fb:c0:df:
6c:9b:e0:9c:2c:dc:cf:ab:2c:d8:f8:e0:72:1d:ca:a6:7b:b9:
82:fb:23:ff:26:e4:3a:f1:24:c4:08:7c:95:1d:57:c2:44:54:
2e:a9:8a:4c:b0:63:50:5d:d3:9a:81:8c:ac:71:4c:08:51:06:
cf:ee:e9:77:9f:ac:9f:35:c8:9c:54:af:12:bd:30:56:73:c5:
94:73:de:0e:3c:fa:d0:99:20:5f:0d:87:7b:ed:0c:41:fd:93:
4b:3b:f4:fe:20:92:b6:0b:1c:4f:22:41:89:76:4a:20:8c:af:
18:96:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:05 2026 by rpki-client