Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: C1feRP9fiZJZDfstz/1QZaJETJvXfA1galBy0WT0OPY=
Subject key identifier: 43:92:05:91:E5:3A:38:28:E9:29:41:8B:00:FD:41:00:2F:EF:3F:FA
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 019FAC3F6073472D21902B34ED54667C0D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 03B6
Signing time: Wed 29 Jul 2026 05:01:02 +0000
Manifest this update: Wed 29 Jul 2026 05:01:02 +0000
Manifest next update: Thu 30 Jul 2026 05:01:02 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: KsN8FxjrniKvsohqnI9OqvQoCuYY1ArtQwDHiFJiM4A=)
2: vVXnYinPG4h5TcTea17Iv2i5FYs.roa (hash: vQ3FQGy71ne2HeyP0gu2+P/Q4WprPJAgNPNHKJfJ9Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:60:73:47:2d:21:90:2b:34:ed:54:66:7c:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Jul 29 05:01:02 2026 GMT
Not After : Jul 30 05:01:02 2026 GMT
Subject: CN=43920591e53a3828e929418b00fd41002fef3ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:3d:ff:91:a7:0f:b7:aa:13:b8:32:2c:0c:
e3:ed:f7:4d:11:c0:c8:7e:d9:89:60:c3:1e:a3:4c:
1e:fd:4f:8b:bf:ce:bd:ae:78:a0:fd:59:54:39:2d:
e3:3d:70:34:ef:a8:3b:ec:50:46:ae:27:f3:82:ac:
e9:30:6a:39:90:c8:79:85:77:87:44:b3:f7:8f:03:
82:69:4b:97:b8:f2:b0:1c:a1:58:6d:f3:5d:c5:49:
3d:d5:f4:5e:33:56:f9:8c:98:df:14:31:ca:30:70:
ad:e7:54:7a:ad:15:f4:e0:b6:c1:54:77:cd:ee:d8:
96:18:a7:d6:ab:eb:ba:24:f8:c0:4c:c8:73:61:00:
a7:0a:27:a9:9f:3c:ee:10:00:c7:2e:57:8a:15:61:
52:df:01:34:6c:e5:c2:87:9e:27:40:4e:17:48:2d:
47:46:67:6e:fa:9e:c8:4c:bd:2b:ed:6f:4e:f5:2e:
1c:2a:e6:75:c1:25:75:76:68:73:8f:67:75:d9:f3:
66:0c:7c:05:80:05:b5:42:1c:8f:d5:70:9c:55:01:
37:26:48:e8:f7:77:c8:d7:64:3c:71:f5:eb:a2:29:
91:3e:4a:72:0c:7a:98:89:e9:00:85:2b:49:90:29:
5c:87:59:53:1d:4a:76:f7:50:c1:95:20:87:d6:e3:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:05:91:E5:3A:38:28:E9:29:41:8B:00:FD:41:00:2F:EF:3F:FA
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b4:e4:e0:dd:81:1a:92:06:d7:36:18:3e:9b:9e:8c:c0:c3:
a6:3d:53:13:5c:18:33:87:60:86:a8:06:69:74:84:dd:7b:fb:
a3:de:c8:da:82:f2:83:83:09:40:e1:55:14:4f:39:f1:35:54:
8e:b2:fa:e7:d1:2a:f9:12:87:90:72:c9:5c:53:0a:df:f7:88:
3f:dc:d4:18:2c:42:e5:f5:8b:f4:2e:fb:3e:6c:22:44:05:3d:
7b:84:4f:fc:c5:dd:fa:b3:8d:f6:ef:32:20:41:5a:44:9b:b5:
50:a5:02:3f:06:9a:53:e9:9c:b4:b9:87:6e:cd:8b:52:87:84:
43:5a:82:dc:2f:e8:0b:0d:b9:00:5d:63:a4:41:73:70:30:2e:
e1:a4:44:89:91:52:7f:33:d3:6f:59:6e:79:0f:5e:f4:b6:cc:
b1:77:58:18:04:6b:a2:1c:5d:e8:df:e3:b3:9d:53:18:99:80:
8d:94:7c:89:0c:7c:e3:0b:fd:5b:47:cf:4c:9d:12:25:2f:c8:
f3:9b:0b:b8:0d:2f:f0:4d:6b:2f:6a:d4:42:2d:69:5a:7d:1b:
b7:eb:52:a5:02:c7:40:62:01:a5:6a:cd:77:1c:e0:33:e3:6f:
4e:c1:e7:b6:1d:88:98:5b:b4:4a:21:9f:28:e7:e3:1a:c8:df:
d9:d8:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:01 2026 by rpki-client