Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: QOjLUbijot3bwUyvVhlwoFb/mUOA8L7/LFk0wTluZEQ=
Subject key identifier: CC:9C:12:72:76:FA:C3:63:4D:E1:27:29:C8:49:D1:81:DD:BE:07:B2
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 01A128E7F6199AB21FBB995D1032406254ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 047C
Signing time: Sun 11 Oct 2026 03:00:52 +0000
Manifest this update: Sun 11 Oct 2026 03:00:52 +0000
Manifest next update: Mon 12 Oct 2026 03:00:52 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: 5SMCkOlPR6zyVg85ZQ2ZUszUw+xFvDifgyuod2nhmvo=)
2: 6QBO41c6AtvmDLllik0pj6CxqAI.roa (hash: pxDESWPt4AI6IzTwim2ADE5JDN6GUJH62WPh++1Yk1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:f6:19:9a:b2:1f:bb:99:5d:10:32:40:62:54:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Oct 11 03:00:52 2026 GMT
Not After : Oct 12 03:00:52 2026 GMT
Subject: CN=cc9c127276fac3634de12729c849d181ddbe07b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:5c:7a:8a:d2:64:a6:06:48:5d:58:de:56:
3b:6e:06:4e:8d:a4:2e:2b:0a:c7:c3:65:ad:43:6b:
9d:e6:7c:12:31:54:aa:03:78:30:f7:1c:2a:64:04:
62:c7:87:1b:04:fe:67:64:e9:5e:72:52:9f:a4:9a:
c6:9b:d6:dd:e2:bb:cf:aa:cf:26:28:59:cd:57:ae:
43:02:56:29:59:7d:64:78:d6:66:0b:71:f3:33:07:
4d:3b:01:02:ba:49:90:04:fc:11:7e:a2:2e:02:70:
96:e6:bf:fa:89:31:2a:89:3c:c8:fa:c0:6b:55:84:
3a:6c:a1:31:cf:6c:32:99:53:4e:7e:de:09:04:24:
3a:0d:3d:aa:0f:bc:79:93:42:a0:37:6c:08:4b:b8:
59:b3:5a:89:c0:e4:7f:36:2b:95:03:86:6d:d2:79:
4f:75:fb:8c:d5:0b:ae:9b:df:df:92:6a:ba:54:60:
5c:d3:12:9a:53:04:09:83:a0:7c:7a:21:8a:d9:2d:
50:55:7a:0d:7c:52:7b:d5:46:af:3f:a3:28:4a:ce:
1e:d2:ec:3e:5b:a7:4c:a4:d5:5e:c9:69:cc:82:7e:
01:e6:cf:3f:6d:ca:64:f1:78:67:ee:66:ec:70:13:
f1:e5:ab:c8:28:32:f4:fd:de:3f:a3:19:7c:e1:f0:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:12:72:76:FA:C3:63:4D:E1:27:29:C8:49:D1:81:DD:BE:07:B2
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:4f:41:d6:f4:bc:21:98:5c:30:14:fa:4f:18:8c:2c:b2:
1a:e6:bb:12:97:af:b4:b5:76:37:b9:19:35:1c:0d:e8:a9:b0:
7f:c3:b4:76:13:1f:b6:0b:ee:59:ff:c4:e1:a0:a1:e0:b8:55:
25:66:85:0c:4e:3e:61:39:dc:5b:f4:af:5b:28:f1:62:a0:b8:
8e:89:68:8f:16:e7:fc:5e:af:62:4f:e8:8b:de:c5:fd:f6:66:
99:f1:fe:7b:c5:d9:74:3b:4f:d8:8d:6b:42:76:77:5f:88:53:
4b:1d:12:67:3b:cb:ef:8c:37:e7:93:8a:7a:45:a4:83:5a:c8:
e9:25:8e:65:97:0c:d4:6f:d7:75:59:96:bb:12:72:17:24:a5:
48:76:5e:f6:3f:1d:a6:96:a2:1f:7c:02:a4:c0:b0:8d:af:72:
8c:69:f0:98:43:b7:45:75:dd:e7:f1:b8:18:da:46:19:f0:1e:
17:4e:bb:dc:25:fb:dd:f9:7b:6c:0e:80:f4:19:ff:46:1b:f4:
08:e8:7c:0f:83:33:31:63:5b:90:c9:ce:1b:ba:4b:11:50:7e:
07:0a:4e:8d:5f:ab:02:ac:7a:36:69:db:7c:28:2d:12:bc:4b:
87:57:3a:01:4f:13:2a:a0:97:9d:b9:03:b6:e1:2d:23:8c:bb:
c4:46:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:56:11 2026 by rpki-client