Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: 8qdiTzFq9S2EUABh0FWxCxUTDQbRG0tkzApyDRgVb44=
Subject key identifier: DE:0D:05:7D:C4:2E:6D:01:CE:65:40:AE:7E:10:60:5F:A5:42:FE:BB
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 019F8F4779E496CEC364E98747B95C450B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 03A7
Signing time: Thu 23 Jul 2026 14:00:53 +0000
Manifest this update: Thu 23 Jul 2026 14:00:53 +0000
Manifest next update: Fri 24 Jul 2026 14:00:53 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: p+ZAicWoXwjps2iUrybucetjQKTPo4bi3PJkJBXCpQQ=)
2: vVXnYinPG4h5TcTea17Iv2i5FYs.roa (hash: vQ3FQGy71ne2HeyP0gu2+P/Q4WprPJAgNPNHKJfJ9Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:79:e4:96:ce:c3:64:e9:87:47:b9:5c:45:0b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Jul 23 14:00:53 2026 GMT
Not After : Jul 24 14:00:53 2026 GMT
Subject: CN=de0d057dc42e6d01ce6540ae7e10605fa542febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:68:ac:78:59:d5:fb:b8:a6:6b:cb:ac:2e:
10:09:27:a6:14:b6:d6:a3:00:28:3c:0a:93:44:05:
65:16:e2:76:35:bc:d2:05:bd:1d:fd:99:9e:39:01:
c2:0c:69:7f:f4:5a:70:01:ba:0e:b1:54:94:0b:fd:
78:83:e9:e1:b5:a0:42:e1:cf:73:5e:f0:81:0c:65:
69:20:40:b3:04:0c:41:af:bb:89:9b:06:96:e1:5a:
ba:7b:98:aa:db:de:85:a1:96:e0:3d:77:ec:b1:54:
b7:d0:fb:e1:1b:d1:08:96:39:80:00:fc:4e:47:ff:
be:1f:10:7f:05:75:df:95:27:95:cb:4a:27:5a:37:
0b:e8:cb:83:a6:2d:ab:6e:4c:09:e6:fb:21:46:be:
ad:50:7f:2e:4c:8c:2c:b6:ff:b7:e7:02:08:ea:61:
70:79:94:f2:0f:c6:74:5c:a9:af:91:47:c8:9b:a0:
e7:52:2e:4e:4c:25:87:d2:b7:92:d2:c7:e1:95:0b:
97:0f:51:46:22:06:50:77:d1:16:ae:ab:4a:a0:68:
4b:6b:3d:ab:d8:42:5d:f7:7b:fc:49:ed:58:10:4e:
6b:89:93:50:79:3d:58:e9:26:1f:b1:2c:74:c3:a8:
21:1e:a7:a6:f1:fd:9b:a9:f6:72:d0:b1:bb:44:72:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:05:7D:C4:2E:6D:01:CE:65:40:AE:7E:10:60:5F:A5:42:FE:BB
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:ab:5f:8e:db:24:57:b8:17:9a:d5:c7:a4:d8:71:96:0b:
d2:2f:bc:97:70:13:e2:fa:72:be:cb:9c:09:08:97:5f:1b:54:
72:88:44:f3:11:17:ba:8d:92:87:13:3d:c0:b4:1c:6a:57:04:
ca:2e:fc:f1:00:c5:7e:45:1d:98:70:12:23:7d:8b:2e:8a:7d:
56:26:8b:96:38:4e:8e:bb:53:3e:be:b2:f5:10:82:87:1b:c5:
36:26:ea:57:f9:3c:04:92:09:00:8b:ea:a8:2b:45:ef:f3:ff:
b3:bf:8a:9a:13:cf:bf:b5:3c:45:74:fe:cd:bf:2b:61:d1:52:
89:e2:9d:70:a5:de:04:df:5e:50:a7:4a:c7:cb:b3:c1:87:c1:
bb:6c:04:a0:2d:73:f7:5e:4a:b1:81:87:ec:53:d0:ff:e9:dc:
37:80:60:49:a9:79:a8:3b:b7:32:5e:6d:c5:c9:f2:93:2a:57:
e7:2e:ac:37:8a:59:78:ee:68:ad:d5:99:2a:e4:3f:35:0a:d2:
24:12:7d:5f:af:66:71:39:cb:8b:e1:a7:e8:ed:ed:43:55:04:
49:dd:1c:14:31:f9:08:52:0b:8d:26:e0:29:4d:9a:a9:b5:77:
78:42:71:9b:0b:7d:e7:03:c0:4c:2b:bb:3d:99:73:a7:c2:3e:
99:61:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:45 2026 by rpki-client