Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: 2SJyUIIF5vNBMR7mfNrdeYwtwSiXyooq8StIeOCc0pk=
Subject key identifier: FA:E1:28:2C:F8:41:03:66:65:AC:7C:4D:7D:3D:A1:16:56:C7:13:AB
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 01A1385B215EF2C87ADC4FA767BD478D4991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 0484
Signing time: Wed 14 Oct 2026 03:00:58 +0000
Manifest this update: Wed 14 Oct 2026 03:00:58 +0000
Manifest next update: Thu 15 Oct 2026 03:00:58 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: vDt2MK/jIHHFUOTjqU9DHa1Jo/x2XWO90QsELlrmXUQ=)
2: 6QBO41c6AtvmDLllik0pj6CxqAI.roa (hash: pxDESWPt4AI6IzTwim2ADE5JDN6GUJH62WPh++1Yk1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5b:21:5e:f2:c8:7a:dc:4f:a7:67:bd:47:8d:49:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Oct 14 03:00:58 2026 GMT
Not After : Oct 15 03:00:58 2026 GMT
Subject: CN=fae1282cf841036665ac7c4d7d3da11656c713ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:c1:07:fc:db:1f:be:d4:5a:de:41:c6:00:
0d:5d:f0:b9:ef:18:ce:07:70:a4:3c:91:66:0d:51:
23:97:e8:ec:f5:13:ba:2f:d5:68:a3:ac:02:d8:2f:
da:7d:ed:b4:cb:e8:85:89:92:53:76:67:ce:79:85:
1e:72:1b:79:eb:ad:1e:4f:cc:36:71:db:08:bc:42:
ea:d9:dd:91:bd:46:79:78:49:0b:c4:1d:93:cf:c7:
be:98:54:df:d9:17:a0:0d:f3:cd:03:05:12:c9:42:
62:b7:f0:8d:a8:6e:33:78:2b:29:77:e2:23:ec:bf:
03:9f:4e:35:6b:29:3a:fc:76:2a:74:10:71:53:d4:
14:71:cb:47:3c:5e:cb:b3:02:ae:f7:4d:3e:35:01:
12:a2:01:0f:90:d4:1f:1e:6a:7f:c5:c5:38:75:4c:
39:49:76:5d:1a:18:05:f9:f7:6f:14:36:66:13:f0:
1b:67:56:36:86:d0:d8:f5:36:8e:08:97:cb:51:69:
a8:5c:96:af:7f:20:40:ad:fc:05:e1:f6:b0:6d:54:
78:56:eb:9b:14:b0:5f:56:01:88:29:65:c2:71:1f:
4d:3d:9a:ac:74:62:f1:07:fc:86:3f:41:c3:01:1b:
d5:7e:aa:45:e3:e0:3d:d1:c5:4c:e0:94:97:f7:f5:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:28:2C:F8:41:03:66:65:AC:7C:4D:7D:3D:A1:16:56:C7:13:AB
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7e:88:9d:91:0d:e5:4f:8f:29:aa:e0:3c:f4:a3:9e:ca:7f:
e9:83:c8:85:60:4a:fb:5e:a8:5f:df:d3:01:86:b1:b1:b6:40:
72:5e:da:d3:46:a7:e6:a0:c5:39:08:6b:b6:98:9d:95:e0:5e:
15:8e:05:ae:d1:a9:97:b1:04:70:77:22:f2:11:b2:0c:57:dc:
45:0f:2d:f2:19:68:cd:f5:20:4a:65:95:64:e9:f3:d5:73:05:
42:67:92:96:f8:2e:2a:a1:c4:9c:ca:de:34:4e:81:a9:32:5d:
8d:a2:d7:da:a1:7e:75:fa:10:45:e5:a1:d6:3d:1e:fe:19:a5:
a3:f7:b8:d3:40:8e:90:2b:d9:a8:19:24:ef:d0:10:60:85:15:
c2:39:66:c2:63:66:24:7b:2a:3a:64:ae:d6:c6:a4:6c:58:db:
1d:8f:b4:ab:5d:97:07:85:e0:d6:f0:04:dc:e0:ad:13:65:ad:
61:b7:03:e8:5f:70:91:09:df:be:0c:d2:26:05:ed:47:3e:ea:
cb:3e:f7:0a:4f:55:52:90:d4:f8:0d:9a:10:69:45:fc:da:4c:
db:31:d7:de:62:70:eb:9e:87:18:d3:34:11:91:c0:47:32:43:
10:3b:d6:ab:f9:81:0f:99:25:f5:3f:c6:b0:3c:d0:a9:a4:42:
3c:ba:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:27:34 2026 by rpki-client