Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: JeyV6QI/1aCb8eGwc2Y0xnYCugFYJ9hl64LImjTunbw=
Subject key identifier: 81:E6:DF:F9:5A:1D:5D:C3:B5:92:C2:F0:0F:54:9B:F2:84:8E:33:AF
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 019D273AD0343D9117F13DAFFD09F9DDD638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 0268
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: 6BYTqPVZWawsjalODiavrddkAWIiGV7cyR3kR40WdWU=)
2: vVXnYinPG4h5TcTea17Iv2i5FYs.roa (hash: vQ3FQGy71ne2HeyP0gu2+P/Q4WprPJAgNPNHKJfJ9Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d0:34:3d:91:17:f1:3d:af:fd:09:f9:dd:d6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=81e6dff95a1d5dc3b592c2f00f549bf2848e33af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:2c:1f:d0:de:d0:52:e3:5e:ca:8c:c6:06:
2a:b8:2f:9e:dd:b5:5f:a8:ed:fd:ec:07:54:47:55:
2c:59:11:33:1d:23:a6:05:78:3c:7f:b9:b7:b7:0d:
fb:52:3c:89:0f:df:2a:23:a1:8e:97:e3:d8:5c:01:
1d:60:2b:62:47:f8:0e:42:ee:bd:18:98:65:4d:2a:
44:ed:04:f5:bb:12:bc:d5:98:71:db:e4:5c:48:ae:
28:04:cc:42:78:23:ef:5d:9c:0d:47:4f:d9:63:48:
38:4b:63:0e:04:3f:1c:ef:bf:72:5f:b7:5d:a1:33:
9e:17:9c:27:8f:f1:e8:88:7b:25:27:98:99:28:f3:
59:ea:1f:ae:93:14:20:99:69:23:27:37:b7:a2:03:
82:f8:61:87:20:10:61:d2:f7:b1:02:1d:ca:36:2a:
57:3d:27:74:d1:f5:75:b1:de:cd:a1:9b:b4:10:60:
fc:41:01:ab:65:0e:a6:54:46:37:6f:a8:ea:a8:5b:
4a:e0:42:24:95:d8:e5:f0:0d:56:3a:f8:dc:1e:57:
db:08:3e:8d:51:d7:ed:57:5c:8c:e8:d1:94:3a:e8:
ab:f6:ee:8f:84:dd:50:d2:4f:c4:a7:22:2a:be:09:
4a:1c:30:a3:9d:a5:88:bf:24:34:f3:39:30:fe:f0:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:DF:F9:5A:1D:5D:C3:B5:92:C2:F0:0F:54:9B:F2:84:8E:33:AF
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:83:ce:56:56:f3:4d:74:d7:23:1c:43:29:f8:0d:c6:18:42:
fc:3b:06:ce:d8:c4:3d:09:35:f9:19:3a:86:81:2a:6c:5d:40:
15:1d:9c:56:f3:fe:19:e7:41:da:12:44:07:75:cf:1d:39:00:
6c:df:80:cc:5c:31:43:f0:30:bb:bf:26:76:80:c4:cc:88:c8:
0a:d2:fb:40:90:4c:e6:50:45:29:42:4b:d5:e5:e2:fc:0b:28:
44:98:80:c3:77:35:4d:62:37:59:77:81:2a:9a:e9:82:3a:0a:
8e:80:b7:fb:17:1a:0b:22:09:0f:c6:c2:df:b2:74:38:c6:cf:
0f:6d:ba:fa:9f:ad:40:3f:09:dc:5f:e0:74:e9:f0:d7:8a:9f:
88:d5:38:38:6d:30:9f:4d:e4:82:3e:d6:a6:61:2b:96:3e:d7:
da:07:9d:f6:d5:1c:2d:54:cb:20:dc:75:da:59:52:a9:d8:ca:
42:22:db:fe:82:a6:4d:df:60:1c:ff:f3:3a:9c:b4:66:4e:58:
45:d5:c6:ae:aa:44:17:e4:f0:c5:0f:af:0c:3a:c0:be:a7:5c:
ff:35:7f:1a:d6:cf:23:8f:71:b5:10:f2:3e:8b:f2:3f:94:ea:
e9:16:43:ab:8a:e3:2e:14:0f:31:48:0b:da:0c:39:93:e8:ab:
dc:44:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:16 2026 by rpki-client