Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: rZI0mf2BlAy01tqzqtUEGU2kqHoqdpiSyrfBPLVW5W0=
Subject key identifier: 69:2C:85:F9:04:05:18:44:BB:1F:3F:88:AD:86:9C:FF:AC:AC:05:DC
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019D26283DFD52625A0958C4795843039853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 12FC
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: 62Pyxa/695IJRoHpt9G7yGkgGsp8kGxymSp3d71V8c4=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3d:fd:52:62:5a:09:58:c4:79:58:43:03:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=692c85f904051844bb1f3f88ad869cffacac05dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:7f:fa:0b:e9:48:85:7c:f7:28:42:37:b1:
0f:80:fb:dd:01:d4:f2:53:4e:b0:f5:fe:37:c8:d0:
77:f2:f3:82:dc:c4:72:9e:95:26:e2:81:b5:58:8c:
c2:68:09:d5:40:18:5d:49:f7:9d:1c:80:f6:49:01:
e0:98:a0:f0:ab:c2:e9:4c:10:dc:76:eb:bf:7d:d0:
72:08:70:92:c1:05:85:60:8d:53:92:97:76:33:ac:
8e:d7:5f:b4:a6:f9:51:6c:c6:7b:66:ee:9e:e3:95:
07:58:b0:1e:50:96:4c:1c:ce:35:6a:44:c9:31:8f:
9b:a4:e7:69:1a:c0:00:0a:91:89:37:5a:6a:ee:1b:
14:fd:83:cf:ab:06:1e:f4:29:d3:08:86:49:57:d3:
1a:ee:f8:96:c8:26:18:e8:68:54:88:2e:ea:f6:bd:
48:87:4c:4e:4e:de:d9:03:47:d2:4b:e0:25:86:62:
40:9d:de:7e:5c:17:a4:d6:12:fb:32:b5:04:88:32:
1e:78:c0:c2:f9:40:b4:03:54:64:14:5d:9d:d9:fc:
8d:84:66:d2:bc:f3:9e:44:56:82:11:3f:aa:9e:12:
f3:28:b9:1b:ec:e4:9c:18:c6:51:eb:ea:d7:ae:37:
1d:9b:b2:09:e7:42:d3:02:43:49:26:b2:23:9a:f7:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2C:85:F9:04:05:18:44:BB:1F:3F:88:AD:86:9C:FF:AC:AC:05:DC
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:49:c9:fa:f9:1a:bf:57:02:ef:b7:d3:73:20:b1:81:0f:
c1:3d:9d:55:fa:70:d9:8d:be:76:c3:91:16:86:36:39:10:33:
56:db:c9:3f:ef:e4:19:ca:2d:cc:60:bd:77:49:15:36:03:20:
a8:7b:37:22:6c:25:10:53:95:65:ec:e2:2e:df:8e:97:6e:1a:
01:d2:0d:35:73:af:fb:79:6e:c4:e2:59:39:e4:1e:a3:e2:28:
12:bb:f4:46:f8:95:ba:99:1a:79:42:64:dd:2e:64:aa:eb:c0:
02:f7:0f:48:88:11:49:0d:c0:40:7b:82:7e:18:a5:e9:f4:00:
e6:cf:7e:b2:f4:37:3a:4c:1a:6e:5b:2a:6c:41:6d:10:f1:88:
cf:99:ec:fe:10:3c:7d:b3:0f:48:51:96:86:06:1b:52:db:d1:
3d:7a:19:2f:ca:89:af:88:7e:f1:e0:3a:01:c2:da:65:63:98:
85:eb:5f:86:63:0e:53:9d:f2:d1:d3:f5:76:9a:b0:ca:2c:6f:
9f:71:f8:7e:de:f8:ee:6a:39:f8:77:f4:ac:f9:e2:45:81:eb:
87:eb:9f:ea:51:18:a3:36:79:21:21:d9:7b:ef:2e:4b:c8:7f:
c9:5f:f0:f7:ff:ea:ef:46:94:da:68:8c:2a:8f:f2:c6:d1:2d:
40:e0:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:37 2026 by rpki-client