Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: A68WDdhkaYpU/y0sPStYjD8WZScTFwIyjhAbeW8UhsM=
Subject key identifier: 4A:90:DB:62:CB:92:EF:F2:9D:5E:7D:E3:C5:D7:C1:A6:7B:0A:2A:8E
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 01A08C7B376E324C46E6B8FEEE49B232B9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: 042B
Signing time: Thu 10 Sep 2026 18:01:20 +0000
Manifest this update: Thu 10 Sep 2026 18:01:20 +0000
Manifest next update: Fri 11 Sep 2026 18:01:20 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: Ng1D/wtWm0CEDfpwOYZh4fn+Dj7Bs3MZUbEe1xvitu4=)
2: 6QBO41c6AtvmDLllik0pj6CxqAI.roa (hash: pxDESWPt4AI6IzTwim2ADE5JDN6GUJH62WPh++1Yk1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:37:6e:32:4c:46:e6:b8:fe:ee:49:b2:32:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Sep 10 18:01:20 2026 GMT
Not After : Sep 11 18:01:20 2026 GMT
Subject: CN=4a90db62cb92eff29d5e7de3c5d7c1a67b0a2a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:cb:97:f4:b5:ab:cf:1c:ac:3e:75:46:4d:
e6:b6:d3:51:b5:9a:df:79:5a:ae:9e:56:0a:4a:a5:
11:b5:94:17:30:30:40:40:b0:68:ed:88:cb:b1:7b:
8c:95:83:46:0d:c8:84:5f:42:c6:91:f9:3d:33:ad:
03:b9:dc:68:84:7d:2e:3e:f9:fa:ad:c8:cd:d1:d6:
84:f7:8e:42:4c:a1:cb:e2:10:93:58:cf:71:57:a3:
ea:81:89:f0:a9:04:5d:8f:de:c0:7d:d5:ce:62:6d:
3a:b0:33:55:8c:b1:ff:c2:03:b7:74:71:78:4f:ea:
30:83:4a:69:7d:9a:4f:55:66:a6:08:db:33:17:d8:
f7:ae:84:c8:c5:94:1c:4a:67:26:04:ca:bf:b3:1d:
6b:46:95:59:2c:da:7e:6f:c5:9a:bd:5b:bd:2a:c7:
ea:fe:e2:43:89:70:fc:fb:9f:d7:23:1e:a6:44:07:
56:0c:f6:d8:2a:eb:4e:22:41:67:a3:80:53:10:8f:
3f:ce:bf:b9:2b:f9:3b:b8:6f:f8:11:5d:a3:b4:5c:
e5:f5:0a:c5:20:a8:7b:c8:70:b0:49:f9:b8:1d:8f:
79:09:d1:99:2b:75:e5:b7:42:ee:f0:9f:42:54:b4:
d0:77:df:df:18:37:96:8a:83:42:45:dd:6a:c5:66:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:DB:62:CB:92:EF:F2:9D:5E:7D:E3:C5:D7:C1:A6:7B:0A:2A:8E
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:21:c1:01:94:d8:51:21:32:d5:dc:90:da:47:83:6c:53:7b:
b8:de:43:14:b7:28:ab:18:d6:f5:18:be:03:ee:0b:ea:45:f7:
15:6e:66:f6:1a:4a:b0:f5:d5:5b:b0:78:d5:67:e8:53:a1:37:
cb:bf:f6:20:e0:3f:65:43:3f:00:e3:92:bb:20:62:9f:d7:26:
66:dc:be:75:ce:09:32:fe:aa:fd:c1:f1:df:75:3b:a5:dd:ad:
7a:d4:5b:27:81:b9:85:fc:58:eb:d0:a2:03:99:29:aa:75:4e:
0b:91:0a:f2:74:51:8d:bc:42:d0:a7:34:e4:ba:58:95:8f:d4:
d5:2f:34:63:a4:f0:7d:49:2e:a4:44:96:2c:88:51:ec:da:87:
8a:54:d3:dc:c9:9b:65:ca:05:a2:7e:99:fb:b1:1d:8b:34:f6:
e3:18:cd:90:58:2a:ae:7b:66:f4:37:6f:bb:2b:64:31:78:21:
fd:c0:27:ab:61:0f:2b:81:2f:2c:92:f0:96:aa:f3:22:a9:eb:
55:7a:fa:26:22:0b:29:ec:7f:49:59:90:0f:4a:15:0c:85:bd:
12:93:b5:30:9c:86:2d:8a:d5:27:2c:a1:d8:8c:a3:4f:63:49:
ab:67:12:8f:b6:3f:0b:cf:32:a4:c4:56:1c:09:e8:61:b0:fc:
f9:fb:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:10:33 2026 by rpki-client