Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: F4u47bc7FvoHZJwWLC5SS3Y5UxHh/GVgKVG2P1gnIQY=
Subject key identifier: 0D:64:BD:B6:38:C6:73:CF:77:BC:2A:3D:7A:A1:ED:16:15:A9:F8:EA
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019F9022BD894AF2AC8C85B650AD8FB7FDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 143C
Signing time: Thu 23 Jul 2026 18:00:23 +0000
Manifest this update: Thu 23 Jul 2026 18:00:23 +0000
Manifest next update: Fri 24 Jul 2026 18:00:23 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: GqWD014E/pGfRO+yHLYpzBUoywXNbV/1vGr9HFQ3LG4=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:bd:89:4a:f2:ac:8c:85:b6:50:ad:8f:b7:fd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Jul 23 18:00:23 2026 GMT
Not After : Jul 24 18:00:23 2026 GMT
Subject: CN=0d64bdb638c673cf77bc2a3d7aa1ed1615a9f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:0b:32:eb:8d:f6:97:66:c2:3e:9b:e3:97:
5e:21:21:9b:4b:3f:da:dc:a8:89:73:35:01:00:40:
e5:6a:19:d8:c1:db:e5:47:65:90:c2:06:6c:44:cc:
f7:8f:d5:72:e3:49:5d:27:45:fd:f6:f9:8d:ed:62:
47:d7:c1:45:97:c9:ac:d8:65:ca:1c:fe:74:bb:70:
ea:7f:84:25:74:6e:b4:22:58:85:24:9f:ff:1b:0e:
f9:57:d6:fd:ea:a1:41:91:2b:f8:ba:b3:e8:8a:20:
86:a3:a4:b6:39:ef:f3:43:9e:dc:1f:02:0e:46:e6:
13:ca:eb:4c:43:f7:ef:d2:ee:93:c1:ff:09:d9:52:
79:a1:16:76:5f:e9:7b:d6:8f:9d:3e:f6:d7:cd:35:
d0:31:ac:04:91:7e:4a:02:93:c8:42:da:3a:ee:e9:
c9:8d:bf:0e:b9:b4:2a:87:ba:04:bf:a3:09:71:1d:
02:ef:52:60:f4:28:41:6d:4c:27:a6:64:81:05:c5:
a7:54:e2:77:96:ba:8e:74:9a:b6:91:18:4a:02:1a:
9b:33:9d:69:e7:cf:33:c5:02:79:84:ab:fa:bb:4b:
05:55:40:a7:83:58:9c:c3:2b:bb:01:91:c9:24:ad:
3f:2c:15:7b:e1:97:9b:65:02:82:25:1a:a5:d7:4c:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:BD:B6:38:C6:73:CF:77:BC:2A:3D:7A:A1:ED:16:15:A9:F8:EA
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e3:88:f1:d7:0d:dc:c3:84:45:88:d7:fa:10:7f:07:a0:36:
c5:1c:77:27:9e:80:cd:03:49:d7:5e:a1:a3:6b:a7:1e:81:0a:
9e:49:79:04:d2:61:10:43:07:ca:92:35:31:69:2d:d0:9a:90:
f8:47:38:3b:e5:8a:6d:62:c3:5a:eb:eb:69:8c:1f:dd:1e:0d:
ba:ca:27:71:0e:6e:e5:af:38:26:2c:ac:eb:de:ed:2e:7c:bf:
50:89:84:37:d0:98:7c:8d:07:d4:a4:69:dd:7f:d9:06:25:94:
5a:20:9d:41:62:6e:44:6d:8f:67:b9:50:ad:96:26:04:8a:b8:
46:84:22:ad:f3:33:3c:5d:56:b0:ed:e4:dd:be:21:e8:c5:c3:
b7:67:45:0d:58:b2:75:a6:31:c8:84:56:c5:3e:b2:13:7a:00:
de:e3:7a:2b:cb:be:e9:a9:21:4b:b6:11:64:43:dd:08:95:be:
3c:90:6f:c4:c4:0a:e2:a3:92:b6:80:4a:fc:b5:04:07:41:f8:
97:8f:76:38:7c:09:8d:f5:3f:90:6d:d1:77:d4:a8:bd:25:71:
cc:be:c7:6c:cd:9d:fa:58:06:c2:d0:1a:cf:54:bf:22:e7:83:
48:a3:6c:f5:68:c3:9e:75:ed:25:a3:d3:e0:e3:33:f7:4f:54:
c8:76:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:50 2026 by rpki-client