Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: k08JgtWBg6m5p7bjI+3fXfe0mzyEbpRgNVrJPZ7QGXk=
Subject key identifier: 81:59:8F:62:33:CA:05:45:92:A7:A9:C4:38:F4:C7:08:BF:B4:ED:7C
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01A0005D2FED9C748C78A02E062E4D7085EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 14CB
Signing time: Fri 14 Aug 2026 13:01:42 +0000
Manifest this update: Fri 14 Aug 2026 13:01:42 +0000
Manifest next update: Sat 15 Aug 2026 13:01:42 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: p37PCHsEkRU/f4d0wj9Ta5x301MTR05MwnTbN01ifIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:2f:ed:9c:74:8c:78:a0:2e:06:2e:4d:70:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Aug 14 13:01:42 2026 GMT
Not After : Aug 15 13:01:42 2026 GMT
Subject: CN=81598f6233ca054592a7a9c438f4c708bfb4ed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:15:82:a0:4f:97:c5:d9:25:68:23:76:6e:
54:2e:13:1e:a4:30:1e:bf:f3:23:10:92:0c:66:91:
28:39:0e:84:e1:a1:49:23:d1:cd:ee:77:6f:eb:7a:
23:a9:8a:41:e5:50:17:64:cc:36:51:a8:db:d2:cf:
fa:d7:5f:a7:e5:35:24:a0:55:1e:25:e6:9f:6c:95:
bf:82:55:bb:18:a2:08:9b:c8:e5:f8:12:26:70:e9:
00:a9:26:bc:59:0d:46:a9:3e:3e:fb:89:56:45:25:
5a:b3:fd:17:06:12:d4:c8:ef:d1:52:3f:81:11:35:
9c:37:38:8a:ad:7e:a0:67:d5:67:d9:46:c6:da:9f:
3b:24:2f:16:5c:3b:d6:65:ab:86:3c:b6:11:f5:6a:
ad:3b:20:e7:33:7b:ac:90:7f:a5:a5:84:d8:1a:c9:
3c:80:08:e4:45:36:af:47:18:a2:83:db:d9:c6:05:
39:c9:af:74:12:06:35:bb:fd:0b:cb:66:00:2d:d0:
e4:16:09:32:27:48:82:85:6c:fc:76:cb:48:82:e4:
22:0f:f0:27:db:4e:ab:b0:f3:68:93:63:a2:50:ad:
eb:77:55:bf:79:96:a9:1c:dc:f5:dc:0a:a9:2b:79:
d3:14:58:ee:e1:46:91:97:ae:35:af:64:18:3c:f7:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:8F:62:33:CA:05:45:92:A7:A9:C4:38:F4:C7:08:BF:B4:ED:7C
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:47:d3:a1:15:c4:d5:87:b5:a7:6b:62:4a:05:79:30:a5:
fa:5c:be:37:e6:53:6c:1f:b8:f1:36:78:ad:da:0f:48:89:2d:
dd:a7:e1:18:06:70:1c:92:02:eb:89:94:a5:1d:1a:8a:fe:cc:
44:b1:6e:1a:a4:c7:4f:97:ea:fb:88:72:06:8f:5e:58:80:12:
19:19:4a:b2:6e:db:f2:95:40:50:9c:b1:52:97:54:99:70:39:
94:a4:39:22:1c:56:cf:72:60:67:f8:24:f2:a8:d8:cc:92:44:
b1:1a:ac:e4:04:94:73:c3:3b:0e:6f:1f:fb:85:18:f7:0b:57:
62:91:6d:4e:00:03:c1:bd:76:66:73:56:e7:d5:e6:a0:e5:d3:
ee:f2:73:f2:63:76:35:29:83:63:75:63:64:9c:b6:99:66:7b:
d1:6d:29:05:5d:50:00:64:e9:0f:06:3b:a5:5e:85:8e:cb:66:
3f:38:2a:43:12:e5:5a:87:4d:bb:31:0d:21:a5:21:f2:9e:57:
bc:db:98:d0:71:ba:4a:22:0a:a9:ab:80:cb:c4:21:39:ec:0f:
53:6c:7b:07:1e:ba:61:b5:c3:1e:fc:f2:86:26:f3:a4:27:72:
7d:a1:b3:71:a0:63:93:74:8c:58:d6:60:c8:34:12:97:9a:62:
5a:1f:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:04 2026 by rpki-client