Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: G8/c+VwYkmfhYM9R8FWEIv0mfHZey0Bgs/zRhn5fyAo=
Subject key identifier: BE:8C:F7:17:2E:3C:8D:D5:48:96:42:79:3C:3F:B9:D0:17:FA:45:FF
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 019E1C7DBA6BC1F1446DA49A6F2A9151333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 02E7
Signing time: Tue 12 May 2026 14:01:02 +0000
Manifest this update: Tue 12 May 2026 14:01:02 +0000
Manifest next update: Wed 13 May 2026 14:01:02 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: 4jAIq8TfSXa3WcipBNsdQmA7o6J5/bkr4E1pny7gtk0=)
2: vVXnYinPG4h5TcTea17Iv2i5FYs.roa (hash: vQ3FQGy71ne2HeyP0gu2+P/Q4WprPJAgNPNHKJfJ9Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:ba:6b:c1:f1:44:6d:a4:9a:6f:2a:91:51:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: May 12 14:01:02 2026 GMT
Not After : May 13 14:01:02 2026 GMT
Subject: CN=be8cf7172e3c8dd5489642793c3fb9d017fa45ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:16:78:9d:eb:fb:48:f1:8f:06:37:8a:14:
0b:19:b0:22:9d:20:62:1d:6b:de:94:63:ed:f3:ad:
d9:8a:59:c2:72:72:45:76:5c:b6:bc:5a:24:39:5c:
5c:f6:99:cf:73:04:76:77:96:ca:03:21:f2:36:80:
28:71:be:57:7c:69:5c:d9:f6:af:51:41:05:6b:4f:
30:62:5f:0d:b6:46:47:43:4a:26:3e:fd:6e:fe:36:
86:9c:38:4f:01:f5:a9:33:56:c4:2b:42:24:89:fb:
2a:55:2d:01:bc:0c:ed:d6:dc:31:85:52:e6:8d:06:
6f:2c:ed:07:cc:2d:73:ba:f6:45:c3:a0:86:f0:bb:
25:8b:93:71:dc:fb:e8:d6:dd:af:01:b3:3f:93:4f:
7b:2c:cd:fd:87:26:03:06:55:c0:a3:22:56:68:97:
f4:65:33:11:8c:d4:e3:50:00:a2:ee:48:ff:82:b8:
32:7e:f7:6b:c4:81:90:db:1e:6b:06:aa:82:47:00:
37:ca:62:12:6b:e3:16:6e:aa:d9:6e:43:64:6e:fa:
c8:9c:4a:94:39:6a:98:a1:3f:93:79:40:5a:43:4a:
48:24:0d:29:33:c4:51:aa:dc:00:64:9a:46:53:43:
d6:44:eb:09:5f:ef:cc:e1:4f:b0:45:aa:f0:a2:35:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:F7:17:2E:3C:8D:D5:48:96:42:79:3C:3F:B9:D0:17:FA:45:FF
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:b6:88:51:8f:6b:5b:de:2b:93:74:3a:c7:b6:b0:96:c7:
ac:59:73:d5:09:f4:0e:3d:74:e7:67:59:d9:ab:e3:75:42:82:
e7:96:d0:13:4c:64:32:34:8a:8e:0e:c5:db:b0:50:25:e9:50:
a0:34:bd:ec:ee:60:71:cf:ca:d8:c7:f6:60:7b:48:c2:bf:61:
04:fa:b3:d9:af:5b:9b:af:52:8b:4e:90:99:57:7d:65:17:e9:
5e:f5:cd:a4:ef:5d:23:79:64:14:e9:da:a9:99:35:75:b6:9e:
40:ff:63:b9:2f:87:d3:4b:b5:50:48:a5:fb:d6:e7:1f:fe:2b:
23:e6:c4:81:1f:84:3d:30:c8:06:17:5b:49:f3:c7:2f:ba:01:
96:db:13:aa:be:c4:f5:7a:b8:8d:48:87:ae:1e:43:3f:e7:d0:
b1:ab:47:bf:34:17:e6:de:09:04:ae:c3:b5:8a:3d:cf:e0:f8:
11:0b:1f:60:22:67:89:14:14:00:ed:07:fa:71:0c:3a:8f:d4:
0b:28:a6:37:13:35:93:96:50:59:34:6f:07:d5:f2:4e:1f:ee:
e9:8c:93:c8:c8:65:fa:fd:6b:b2:f6:1e:24:e7:7a:25:62:6e:
02:71:da:6b:03:94:ad:8b:5e:78:19:f0:11:b1:18:f8:bf:83:
6f:45:d9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfbprwfFEbaSabyqRUTM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTE0YTkyMjA2ZjBhMTlmNzMzOWRhMGI4OTY2OWM0YTVm
ZTUyYjkwHhcNMjYwNTEyMTQwMTAyWhcNMjYwNTEzMTQwMTAyWjAzMTEwLwYDVQQD
EyhiZThjZjcxNzJlM2M4ZGQ1NDg5NjQyNzkzYzNmYjlkMDE3ZmE0NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvakWeJ3r+0jxjwY3ihQLGbAinSBi
HWvelGPt863ZilnCcnJFdly2vFokOVxc9pnPcwR2d5bKAyHyNoAocb5XfGlc2fav
UUEFa08wYl8NtkZHQ0omPv1u/jaGnDhPAfWpM1bEK0IkifsqVS0BvAzt1twxhVLm
jQZvLO0HzC1zuvZFw6CG8Lsli5Nx3Pvo1t2vAbM/k097LM39hyYDBlXAoyJWaJf0
ZTMRjNTjUACi7kj/grgyfvdrxIGQ2x5rBqqCRwA3ymISa+MWbqrZbkNkbvrInEqU
OWqYoT+TeUBaQ0pIJA0pM8RRqtwAZJpGU0PWROsJX+/M4U+wRarwojVF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6M9xcuPI3VSJZCeTw/udAX+kX/MB8GA1UdIwQY
MBaAFNgRSpIgbwoZ9zOdoLiWacSl/lK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJGS2tpQnZDaG4zTTUyZ3VKWnB4S1gtVXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZGFjZTktODIxMi00Y2UxLWE5OTkt
NTIwOGQ5ODU0MzY0LzEvMkJGS2tpQnZDaG4zTTUyZ3VKWnB4S1gtVXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mZGFjZTktODIxMi00Y2UxLWE5OTktNTIwOGQ5ODU0MzY0
LzEvMkJGS2tpQnZDaG4zTTUyZ3VKWnB4S1gtVXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdC2iFGP
a1veK5N0Ose2sJbHrFlz1Qn0Dj1052dZ2avjdUKC55bQE0xkMjSKjg7F27BQJelQ
oDS97O5gcc/K2Mf2YHtIwr9hBPqz2a9bm69Si06QmVd9ZRfpXvXNpO9dI3lkFOna
qZk1dbaeQP9juS+H00u1UEil+9bnH/4rI+bEgR+EPTDIBhdbSfPHL7oBltsTqr7E
9Xq4jUiHrh5DP+fQsatHvzQX5t4JBK7DtYo9z+D4EQsfYCJniRQUAO0H+nEMOo/U
CyimNxM1k5ZQWTRvB9XyTh/u6YyTyMhl+v1rsvYeJOd6JWJuAnHaawOUrYteeBnw
EbEY+L+Db0XZJA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:21 2026 by rpki-client