Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: cHD4mpPki2qrcVQgK9iToFuzK+ojAVsLsmqY5oIpBuk=
Subject key identifier: B8:13:0E:5B:1C:8E:3D:05:72:27:A2:1C:FC:97:EC:75:4B:2A:B2:86
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019D9BF556DE58CCEE81407B304F8C99A992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 1339
Signing time: Fri 17 Apr 2026 15:00:40 +0000
Manifest this update: Fri 17 Apr 2026 15:00:40 +0000
Manifest next update: Sat 18 Apr 2026 15:00:40 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: Zo/m5MRIAEjGLRFxagFu1QvbzpbH8UQUOnaT6vGFguQ=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:56:de:58:cc:ee:81:40:7b:30:4f:8c:99:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Apr 17 15:00:40 2026 GMT
Not After : Apr 18 15:00:40 2026 GMT
Subject: CN=b8130e5b1c8e3d057227a21cfc97ec754b2ab286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:b0:b8:3e:86:d8:54:f8:11:eb:ba:52:13:
45:1b:20:df:fc:39:ca:da:77:72:a9:3e:82:72:0b:
d4:4c:e9:27:1a:eb:c5:fe:03:0f:d5:45:3a:f1:35:
08:ec:c3:2b:b9:0b:ab:ca:1f:fc:14:b6:01:f6:a1:
90:52:d2:59:a2:c4:52:f1:ef:b9:41:38:e9:55:4a:
d5:d2:29:f9:4e:ef:2c:36:9e:c9:3b:e8:c3:81:62:
da:e3:3d:cd:fe:9d:1a:c8:2c:cf:e7:28:e7:85:0f:
2a:70:dc:47:ed:a2:3f:27:79:1b:30:cd:a2:1f:3b:
1c:72:66:90:82:a2:f2:cc:82:4a:7b:26:b0:2a:38:
8f:0a:02:01:de:0c:8f:8a:cd:b0:74:90:87:07:be:
1e:9b:a1:9a:80:10:df:82:b7:78:c4:5b:2e:5b:00:
78:03:25:fa:5c:7a:37:03:73:ce:bc:0d:b0:8b:08:
ea:5c:12:e4:fd:6e:cc:f9:cd:5c:9b:6c:9e:26:b3:
2c:56:b4:3d:b9:bc:0c:92:81:80:1c:69:55:76:f8:
bf:21:21:4a:de:f1:e3:63:69:db:dc:d3:14:60:77:
93:1a:e1:c7:54:4f:f9:27:56:aa:9d:d5:1a:d5:b0:
97:af:c2:7c:8c:a4:58:48:7d:29:ae:56:a0:ff:ca:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:0E:5B:1C:8E:3D:05:72:27:A2:1C:FC:97:EC:75:4B:2A:B2:86
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1e:1a:a2:6f:3a:7a:6c:0f:82:9b:9f:81:08:9a:96:d3:3a:
1d:76:7b:3f:3c:61:f6:45:e9:12:89:a6:19:cf:62:76:13:5d:
b1:5a:47:51:c7:83:d1:af:8f:4e:79:c8:15:aa:ea:89:6e:24:
4e:e5:36:b8:17:de:da:87:14:5f:3f:7f:12:35:a2:29:29:f9:
e0:63:01:ed:89:89:1c:c8:2d:96:d3:62:1a:67:f3:d1:3a:8c:
9e:f3:3e:68:8b:68:7d:64:77:75:a2:46:19:a6:80:02:59:24:
b8:8f:f3:a7:e1:db:a7:f2:61:ff:95:f9:7a:92:58:e5:b5:b2:
87:33:d7:c9:d2:d7:95:f2:40:cb:e3:d4:c2:96:26:0f:70:f3:
85:70:ed:f9:ff:53:24:56:3e:fc:7e:3d:9c:20:97:81:fb:15:
be:06:91:86:03:03:de:f1:f9:0e:12:7d:3d:b8:ad:ed:d9:67:
7d:9f:d3:5b:45:5f:c3:93:a5:95:c0:c0:fc:c6:f5:ef:45:3a:
26:01:45:4f:ff:ad:0a:97:eb:49:ef:17:c2:76:28:0f:7b:8d:
f9:ef:61:00:a1:d6:45:09:de:1b:ef:44:b8:8a:3f:d4:31:f1:
4e:db:9c:1c:5e:aa:9e:64:9c:64:fd:12:91:18:83:3c:b7:fc:
d2:86:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:41 2026 by rpki-client