Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: m9s4FOy7ZeChJefbUhImuvIczd59ah0L/GUrwCSdWds=
Subject key identifier: C2:71:E3:05:8E:8D:12:97:BB:2D:6C:FF:A4:32:8E:AA:12:34:BD:DC
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019CAE6C14D37EAB5EF769EDC048A8647AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 12BE
Signing time: Mon 02 Mar 2026 12:00:44 +0000
Manifest this update: Mon 02 Mar 2026 12:00:44 +0000
Manifest next update: Tue 03 Mar 2026 12:00:44 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: Lww9vrvWPZpyl9fMkhXnCcOcEDfNiT+l78nJ1O++mfM=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:14:d3:7e:ab:5e:f7:69:ed:c0:48:a8:64:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Mar 2 12:00:44 2026 GMT
Not After : Mar 3 12:00:44 2026 GMT
Subject: CN=c271e3058e8d1297bb2d6cffa4328eaa1234bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:93:a8:8f:0d:69:ff:81:b4:1c:a9:bd:0c:
f5:c9:3e:d1:e3:15:1c:e4:14:72:f4:ae:a9:ac:3c:
04:0e:d8:a1:aa:87:a1:a3:ae:80:2c:58:23:60:98:
16:71:b9:ba:1c:9e:82:bf:38:78:8d:7a:3f:4e:7d:
b0:99:0e:98:ef:bc:8a:2c:84:46:49:b4:23:81:e2:
ed:c4:64:92:85:a7:98:f7:fe:fc:fe:93:5a:3f:51:
29:d2:32:c2:0c:d8:6e:03:9b:b2:e7:50:48:e6:58:
5b:3c:2c:57:1f:65:b0:a8:d4:53:3b:0d:7b:f9:43:
cf:cd:87:0f:4e:b1:f9:14:a9:bc:d9:89:f0:20:9d:
73:d1:6c:71:39:62:d4:24:56:a7:ef:44:cd:3c:f9:
20:32:a9:a3:33:3f:90:d8:f8:f0:66:20:27:33:fd:
fc:b6:ea:4d:48:93:46:76:47:de:a9:6c:70:c9:9a:
bc:c7:39:a6:68:85:9b:a1:90:98:d4:59:e2:e4:87:
aa:7e:9d:f2:83:a1:cb:f1:d5:51:50:19:76:9d:fe:
67:19:c1:f1:be:d0:05:64:c9:af:5a:2d:3d:e6:5d:
af:b5:77:a6:77:05:15:a8:8f:cc:66:24:90:4e:29:
c7:0b:e0:b3:32:be:65:d6:50:57:09:74:06:76:46:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:E3:05:8E:8D:12:97:BB:2D:6C:FF:A4:32:8E:AA:12:34:BD:DC
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:83:c5:55:9f:bc:d4:a2:4e:8d:71:c9:58:de:95:52:99:d4:
fa:af:1a:ce:1b:6c:a7:15:7a:01:b3:b5:0d:84:02:fa:9f:93:
a8:6f:fa:8d:c4:8f:f2:ba:43:65:16:91:73:02:b6:b1:29:0b:
d5:8f:4b:ca:0c:3f:0d:76:71:28:0d:cd:06:f3:62:d0:8a:b4:
e7:e3:dd:42:9b:18:5e:58:45:63:f8:f1:67:9b:ff:e5:2b:51:
9c:14:a9:ff:7b:74:95:cd:2a:32:72:c3:9c:d9:6c:fa:1c:a7:
da:e5:ff:92:2f:da:1d:8b:dc:a9:27:2d:66:0e:4f:73:d7:a3:
d1:34:d4:ea:61:41:c3:cd:73:15:2f:5b:b8:88:e8:7c:5d:73:
ce:34:d7:96:78:e7:b8:1c:47:47:14:5c:09:6c:7e:24:7e:cf:
9b:eb:6d:1c:ad:c6:4d:7d:3c:18:6f:3e:2c:98:d5:a3:19:19:
08:73:bc:40:38:ca:89:f4:6d:69:d6:35:37:05:b8:ef:2f:51:
c4:23:80:67:ae:dc:9b:6d:31:38:95:21:81:2c:1f:9f:50:9e:
e3:aa:26:97:0b:b8:eb:aa:2c:dd:ed:3a:1f:ca:0b:0e:19:2f:
14:da:27:b1:2c:9a:ad:a2:4b:90:e8:12:07:f7:eb:2d:9f:5a:
e6:2f:38:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubBTTfqte92ntwEioZHrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTgyYTk4ZDZlZjgwZmZiMjkxODI3ZGE4YWNjYTc0NDkx
MDgwYjQwHhcNMjYwMzAyMTIwMDQ0WhcNMjYwMzAzMTIwMDQ0WjAzMTEwLwYDVQQD
EyhjMjcxZTMwNThlOGQxMjk3YmIyZDZjZmZhNDMyOGVhYTEyMzRiZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinqTqI8Naf+BtBypvQz1yT7R4xUc
5BRy9K6prDwEDtihqoeho66ALFgjYJgWcbm6HJ6Cvzh4jXo/Tn2wmQ6Y77yKLIRG
SbQjgeLtxGSShaeY9/78/pNaP1Ep0jLCDNhuA5uy51BI5lhbPCxXH2WwqNRTOw17
+UPPzYcPTrH5FKm82YnwIJ1z0WxxOWLUJFan70TNPPkgMqmjMz+Q2PjwZiAnM/38
tupNSJNGdkfeqWxwyZq8xzmmaIWboZCY1Fni5Ieqfp3yg6HL8dVRUBl2nf5nGcHx
vtAFZMmvWi095l2vtXemdwUVqI/MZiSQTinHC+CzMr5l1lBXCXQGdkY7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJx4wWOjRKXuy1s/6QyjqoSNL3cMB8GA1UdIwQY
MBaAFNgYKpjW74D/spGCfaisynRJEIC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTct
OWIzNjBlMWJhMzIxLzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTctOWIzNjBlMWJhMzIx
LzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIPFVZ+8
1KJOjXHJWN6VUpnU+q8azhtspxV6AbO1DYQC+p+TqG/6jcSP8rpDZRaRcwK2sSkL
1Y9Lygw/DXZxKA3NBvNi0Iq05+PdQpsYXlhFY/jxZ5v/5StRnBSp/3t0lc0qMnLD
nNls+hyn2uX/ki/aHYvcqSctZg5Pc9ej0TTU6mFBw81zFS9buIjofF1zzjTXlnjn
uBxHRxRcCWx+JH7Pm+ttHK3GTX08GG8+LJjVoxkZCHO8QDjKifRtadY1NwW47y9R
xCOAZ67cm20xOJUhgSwfn1Ce46omlwu466os3e06H8oLDhkvFNonsSyaraJLkOgS
B/frLZ9a5i84hQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:37 2026 by rpki-client