Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
File: 2x3N8J_TBCTak18X8BbgeIurEl0.mft (raw, json)
Hash identifier: 1Boi2wFjGW2AzJCgNFsiZA+7lx72KHeiJQvYV6z/X6Q=
Subject key identifier: F4:AC:8B:F5:FE:31:21:7A:9A:C1:25:1D:2C:69:63:0E:EA:8A:30:C9
Authority key identifier: DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
Certificate issuer: /CN=db1dcdf09fd30424da935f17f016e0788bab125d
Certificate serial: 01A04017608E021D302AE8E7D2A54135222E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:01:08 +0000
Manifest this update: Wed 26 Aug 2026 22:01:08 +0000
Manifest next update: Thu 27 Aug 2026 22:01:08 +0000
Files and hashes: 1: 2x3N8J_TBCTak18X8BbgeIurEl0.crl (hash: 7OMiacLP3ZvoQywA6BB87MnlyaXDpt6DhzYEbXGKkm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:60:8e:02:1d:30:2a:e8:e7:d2:a5:41:35:22:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcdf09fd30424da935f17f016e0788bab125d
Validity
Not Before: Aug 26 22:01:08 2026 GMT
Not After : Aug 27 22:01:08 2026 GMT
Subject: CN=f4ac8bf5fe31217a9ac1251d2c69630eea8a30c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:11:5a:6c:2d:b7:00:4c:bd:70:67:5b:1b:
78:a8:70:3f:7d:ec:cc:3f:98:30:88:bf:f7:38:85:
48:83:b0:ec:bc:89:93:05:55:b0:1a:df:80:f1:53:
57:64:a1:fe:e1:20:60:8a:46:b8:cb:8e:d8:6f:24:
2a:87:23:db:f8:71:15:13:5e:73:02:da:44:cf:a9:
60:1f:8c:1f:f0:0d:58:60:55:a3:58:e2:bf:91:b5:
cc:09:87:48:68:cd:f3:05:7a:95:06:03:7a:44:70:
2c:99:a8:70:57:91:95:b4:c5:09:24:30:ba:08:1c:
35:f6:33:66:c8:a6:a8:33:fd:d9:2f:7e:80:91:f5:
84:34:45:89:90:64:9d:b5:54:81:0b:78:62:ec:8c:
94:6b:20:a7:58:23:1d:86:24:52:59:26:a4:53:fd:
3b:92:8e:2a:8b:b2:74:39:a0:e1:ac:41:26:d6:ea:
c8:f0:f9:08:73:de:b8:61:95:9c:89:6f:7e:0d:fc:
40:5f:3e:76:7f:04:49:10:4c:e6:91:8f:35:a5:60:
2c:9e:a0:54:a6:dd:bb:9b:7a:47:3c:0b:11:a2:6b:
3f:c0:0c:87:8f:38:a5:0d:23:35:9c:02:93:6d:39:
59:5f:e8:af:45:f7:91:35:69:77:41:a0:f3:ef:13:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:8B:F5:FE:31:21:7A:9A:C1:25:1D:2C:69:63:0E:EA:8A:30:C9
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e1:8b:5c:61:70:84:6b:d7:5e:1e:28:db:bd:4e:97:d2:01:
d1:3e:93:54:cd:49:0c:25:3e:5f:9b:2f:fc:5b:c3:00:0a:e2:
17:87:ae:20:97:2b:fc:ba:96:f8:0c:68:f4:1a:be:f4:75:f1:
df:2d:c6:ce:68:ca:16:dc:80:e4:0a:42:71:79:1b:81:f3:0e:
94:71:05:7e:26:e2:0d:af:6b:fb:bf:a3:7d:a5:dd:23:39:2c:
29:1c:33:a1:ac:72:76:62:f1:51:23:94:d2:38:9c:3e:ee:14:
71:25:b3:53:d8:5a:a2:35:7c:88:e6:55:81:b2:af:ff:34:ed:
77:12:ee:5c:d1:a5:0c:13:a8:26:0d:18:ac:cf:ed:21:08:84:
44:b9:bb:b8:4f:2b:0c:27:d3:40:20:f7:fb:a7:c9:e6:3f:16:
9c:b5:e2:65:60:1a:e6:13:fb:2b:d7:06:1a:f3:c5:82:cc:08:
c5:b6:44:3f:be:4c:de:93:18:a0:d1:f3:1f:02:1a:79:65:7f:
1f:71:ef:88:fa:d2:a8:ae:fb:a2:b5:37:20:55:1e:45:82:a0:
da:b6:11:d0:9f:c4:9d:1f:08:0a:a8:f8:d8:73:a8:28:6a:6b:
ec:f3:21:1e:a9:d9:6a:2a:30:7a:64:7a:bf:db:16:f9:ed:f4:
f1:60:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:04:41 2026 by rpki-client