Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: 2ub8z0pxjTYP6wa1YiZcCJzmFUBxl/VM7OM6Mn7N4iM=
Subject key identifier: 22:17:55:AC:44:5D:76:3F:36:B0:8E:AA:E3:F4:70:8A:62:E3:61:12
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 01A1A85D9E62BDD042C010A1796028CBB569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 04BE
Signing time: Wed 04 Nov 2026 21:01:09 +0000
Manifest this update: Wed 04 Nov 2026 21:01:09 +0000
Manifest next update: Thu 05 Nov 2026 21:01:09 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: k+Nv4ekJamLI7paVE5F8+Iigkrou/pnY0l94F/tNWvQ=)
2: 6QBO41c6AtvmDLllik0pj6CxqAI.roa (hash: pxDESWPt4AI6IzTwim2ADE5JDN6GUJH62WPh++1Yk1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:5d:9e:62:bd:d0:42:c0:10:a1:79:60:28:cb:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Nov 4 21:01:09 2026 GMT
Not After : Nov 5 21:01:09 2026 GMT
Subject: CN=221755ac445d763f36b08eaae3f4708a62e36112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:32:11:69:0c:c0:b5:42:33:6a:ec:71:5e:
6b:8d:60:1a:1a:4b:f8:7a:2c:2d:1a:30:ed:77:c7:
48:e2:c3:b1:de:a2:6a:34:2c:44:94:04:5f:ee:bf:
37:f2:79:1f:7d:b1:aa:ea:3b:15:73:ef:ce:64:37:
b6:42:68:d0:b4:e2:91:eb:ea:7c:c2:7e:07:72:e3:
42:c4:b3:f9:a0:ed:bf:f2:c2:c6:74:ee:9b:51:f9:
c4:a2:77:8a:d7:d4:64:24:1f:2b:f9:aa:a3:15:b3:
0f:fd:5d:55:1f:d6:e1:c7:29:5e:c6:76:3a:8c:e1:
ef:f7:75:58:2c:fe:40:cd:15:0f:e1:5c:9b:6b:ff:
4a:be:c8:1c:86:26:46:17:a3:62:6d:c7:60:30:b8:
1f:f9:7b:30:e3:18:11:61:db:99:14:94:89:09:fe:
c5:e2:c1:59:17:a2:39:ae:98:59:68:33:89:2b:c6:
69:3e:66:a3:b6:4b:22:93:c1:c1:e9:a8:1d:c2:d5:
e6:3a:2d:33:a4:77:15:06:11:f6:de:26:2f:44:d2:
7f:67:ed:f8:50:1a:b6:56:a1:38:ca:b2:2b:5e:63:
69:21:25:56:ff:43:f8:22:b9:e5:88:59:5c:6a:2f:
dc:df:8c:68:6b:7e:14:62:d8:85:9c:80:e5:e7:ec:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:55:AC:44:5D:76:3F:36:B0:8E:AA:E3:F4:70:8A:62:E3:61:12
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e4:14:42:09:4c:b1:d6:31:d0:05:d5:55:3a:c0:71:1e:9c:
36:b5:c7:28:08:d9:59:5c:d7:07:70:eb:17:ab:c2:09:d8:bd:
41:75:09:e4:d3:a6:6d:a1:c4:d3:03:de:b4:94:bb:64:bc:aa:
45:7e:c8:de:5c:ad:23:0e:e2:0f:ee:97:f2:94:cc:64:2d:39:
1d:20:43:82:ce:42:2a:20:ea:49:15:e2:4b:ec:54:8d:04:14:
62:ab:63:83:3a:75:44:d9:7c:a3:87:2e:17:b6:26:5a:65:cc:
4a:33:76:95:58:69:21:65:9a:15:31:d8:25:28:1c:8c:80:1c:
a5:f0:a2:c3:4a:e5:ac:39:76:d6:2c:c3:9b:fa:7d:28:59:28:
35:94:bc:4c:bf:33:d0:2a:05:11:26:5d:14:5a:de:d0:8f:a1:
0c:6e:93:74:86:4d:af:70:e5:78:38:f8:1f:ca:f6:84:91:73:
da:70:01:8e:d4:97:b6:c6:90:2b:2d:78:dc:da:50:7a:db:67:
f7:0b:f9:7f:1f:cc:f0:a0:f9:2a:d3:78:32:16:fd:45:36:3a:
b8:2a:f6:32:03:6c:c9:48:06:56:01:7a:3d:ca:91:34:66:b5:
53:f6:4f:f6:b5:bc:7f:04:84:93:01:fc:4d:3b:80:ae:8a:e3:
4f:9d:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:38:19 2026 by rpki-client