Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: RAmfPKAiMc8b2CcQGbn/Z00xnb8I1r03b/TiWKEHJoI=
Subject key identifier: 86:CB:F2:46:57:EB:2B:D4:28:D4:60:FA:80:1D:1D:F6:BE:C0:AA:C9
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 01A11FE4D7CAB28967D35DF609CE5528A9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 150B
Signing time: Fri 09 Oct 2026 09:00:53 +0000
Manifest this update: Fri 09 Oct 2026 09:00:53 +0000
Manifest next update: Sat 10 Oct 2026 09:00:53 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: gVfraKUqyBzyxYvJcBMiCXnpFtNCRKHTwQnlYVLjBxc=)
2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:e4:d7:ca:b2:89:67:d3:5d:f6:09:ce:55:28:a9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Oct 9 09:00:53 2026 GMT
Not After : Oct 10 09:00:53 2026 GMT
Subject: CN=86cbf24657eb2bd428d460fa801d1df6bec0aac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:9f:2a:71:fe:9f:92:5b:bf:01:8a:0e:73:
66:dc:4b:76:55:71:9a:e3:17:b3:fb:d7:f4:7d:fa:
8f:94:93:64:b4:e7:70:ec:4f:a4:50:8c:fb:ad:7f:
95:d8:b9:8e:73:3e:8f:e1:b1:ff:9c:87:3e:e6:5a:
8a:06:fb:94:7d:80:01:ee:05:de:5a:e7:fd:ed:eb:
02:1f:7d:65:1e:8c:b9:c3:99:2b:07:3c:96:93:ea:
35:4c:0a:02:4a:51:0c:f9:23:b6:6f:20:f4:a6:c7:
c4:d7:8a:2b:c8:d8:71:50:ab:bc:11:32:f6:e3:f4:
6c:cc:fc:d5:e9:4f:06:aa:42:f9:c9:5f:c5:d5:0b:
5d:ef:03:9d:57:c0:a7:cb:90:12:f6:d0:61:3b:46:
ea:3c:88:53:dc:ec:7e:d8:24:ea:74:bd:b5:9e:c1:
a0:ef:c0:64:ef:2e:e5:b4:32:1c:ee:c7:4a:ef:2a:
20:8f:a7:88:39:83:0a:32:7b:73:07:0c:a4:61:0f:
96:a9:02:87:14:f2:54:87:47:a4:67:49:3a:b1:8e:
c2:4f:ae:f2:de:93:65:ab:ab:d2:cd:f2:bb:27:18:
2c:2d:10:d8:37:70:64:fa:b1:74:d0:15:e3:17:cf:
25:49:06:10:b9:9e:7a:cf:9e:a5:2f:93:61:cf:81:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:F2:46:57:EB:2B:D4:28:D4:60:FA:80:1D:1D:F6:BE:C0:AA:C9
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:39:3c:4b:c6:d1:1f:7b:03:c4:ea:17:e2:35:56:80:02:
4e:0b:eb:ba:86:d6:35:2a:18:b1:6a:c2:43:90:83:42:3b:bc:
74:89:71:0e:14:59:74:ba:20:78:e4:4e:7b:a7:3b:b2:c4:24:
8c:62:3c:a7:46:65:77:7d:32:c2:87:2c:3b:ac:23:78:ca:14:
3f:32:72:87:b8:e4:f3:75:68:2a:b9:81:f2:6d:02:0e:cb:ae:
29:44:0a:b7:2c:b7:41:1c:74:cb:19:fd:35:93:bc:17:d0:02:
46:41:e0:60:b0:2d:97:9e:0e:3c:8a:5a:0d:a4:1e:a0:d4:3e:
6a:1b:42:7a:7d:c7:be:52:11:df:34:9e:14:a9:2a:32:8c:7c:
52:ed:6d:95:6b:31:34:3b:4f:e2:c0:f3:e2:1e:ac:79:1c:f3:
f5:3c:e4:1e:e4:82:4d:4d:80:7d:65:c0:fd:d5:81:30:f2:8b:
19:59:a3:77:2a:f2:0f:b7:6c:aa:72:b3:48:55:6d:dc:44:73:
6e:4f:f1:b1:e6:06:ed:fd:a2:96:99:a4:ee:77:22:8c:8e:75:
2b:22:65:a7:80:8b:2b:a2:f6:96:4f:eb:d7:cc:12:33:1f:fd:
06:46:cc:2f:ec:70:1b:85:3f:95:ef:1d:d1:7c:b1:ae:af:92:
8a:8f:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:34:37 2026 by rpki-client