Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: duSY3UyKhdY0oQuS/5H4x2Rpiqn2B+JoL2nqI9f6K14=
Subject key identifier: 94:48:D4:B5:40:63:2F:14:B8:03:41:6B:83:D5:38:C4:0F:ED:CA:E7
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 019F189F1D4BCD1C1BAE169232696167A55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 1453
Signing time: Tue 30 Jun 2026 13:01:48 +0000
Manifest this update: Tue 30 Jun 2026 13:01:48 +0000
Manifest next update: Wed 01 Jul 2026 13:01:48 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: FrEN4tNegiI1LxgiY9pz9bYUHSccboDMAGOVkqH2I/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:1d:4b:cd:1c:1b:ae:16:92:32:69:61:67:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Jun 30 13:01:48 2026 GMT
Not After : Jul 1 13:01:48 2026 GMT
Subject: CN=9448d4b540632f14b803416b83d538c40fedcae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:ca:4f:f5:d1:09:f6:00:c1:5a:b9:a2:07:
0f:63:b6:2d:dc:ca:b1:5b:e3:06:e1:47:a5:7d:33:
71:cf:28:9a:3d:0d:18:1a:b8:74:04:ab:ef:d4:e0:
6f:fb:62:bb:55:8e:51:e0:cc:7d:85:5b:00:12:3b:
1d:a7:d4:a7:0d:15:40:49:71:1c:5e:2c:4c:5a:fc:
cf:84:a2:10:de:36:05:d1:86:4e:3c:3d:65:36:13:
d3:cd:3d:56:24:e0:43:00:6c:84:f3:e3:0b:00:11:
36:ea:3e:7b:7d:d1:66:dc:74:83:05:88:ac:85:1d:
6c:09:18:59:00:05:88:c7:24:95:7a:8c:e5:dc:63:
27:70:54:8f:47:b0:ea:ff:67:e7:06:b1:09:56:0e:
43:bb:9b:70:a3:fe:af:a6:90:07:a3:aa:08:ea:8f:
e1:83:6d:85:ff:10:73:48:17:e6:82:b0:0e:66:73:
cb:32:7f:7d:54:9b:3c:25:d6:2f:f0:29:60:a4:a1:
aa:06:8a:53:c7:dc:08:52:b9:b0:3e:e1:3d:15:af:
b6:30:f2:af:21:20:d6:97:c3:53:2c:93:df:75:29:
37:a5:8a:0c:00:0c:d3:f7:8b:a7:ef:18:52:1f:83:
84:cf:c0:e7:58:7c:18:cc:c6:df:c5:b1:de:09:5e:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:D4:B5:40:63:2F:14:B8:03:41:6B:83:D5:38:C4:0F:ED:CA:E7
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:60:d3:f2:28:4b:4a:fe:38:38:c5:dc:a4:9b:3a:77:a2:68:
ba:e3:58:9a:4b:83:3b:c0:6f:e9:f6:47:31:be:b5:65:a5:29:
4d:a9:f6:38:8d:e4:51:34:0d:50:62:6d:98:3e:ea:55:d0:95:
e5:7a:fc:54:79:b7:79:0a:f5:7d:93:3c:fc:b8:e5:52:44:06:
a8:60:0c:71:4e:00:a5:53:df:28:fb:39:89:d7:9f:96:61:ee:
3b:1c:59:44:a7:64:5c:c4:53:80:e6:67:c8:ea:d4:08:cf:1a:
69:98:63:3f:35:e4:9c:06:23:6f:4c:87:e9:d2:47:b6:c3:30:
24:44:fb:36:c0:ec:79:09:3e:3b:88:fb:21:36:25:a3:90:36:
f3:77:3f:3f:76:c0:c0:52:7c:b2:13:a0:77:c8:96:26:be:54:
6d:c5:7f:7c:29:af:ec:12:78:02:be:35:20:cd:5d:33:75:ad:
97:1c:93:04:85:f4:30:1d:4e:ca:3c:4c:75:82:ab:ca:09:a3:
a4:87:75:ad:8d:9c:2d:e2:2b:26:04:a2:a8:75:00:dd:85:28:
d0:10:c8:e7:6f:0e:be:2e:a5:87:40:4f:f6:49:62:eb:51:7a:
c4:55:a0:21:7b:e4:a7:55:b3:67:fd:0f:a5:b7:3a:65:52:13:
31:77:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:03 2026 by rpki-client