Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: ul5+cpgEwdA4oBcBi/bH3gvwz+bDXQSIbAVIuaden1E=
Subject key identifier: 8E:DF:B8:D8:62:EF:C8:A0:31:BF:C4:83:C9:7C:9F:BB:4C:1E:FE:72
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01A0CB22BA1B14BCB946F50AD5893B7ADE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 1534
Signing time: Tue 22 Sep 2026 22:00:45 +0000
Manifest this update: Tue 22 Sep 2026 22:00:45 +0000
Manifest next update: Wed 23 Sep 2026 22:00:45 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: 0NKE7oYKKKJdMgfwwuHRnyuOsOT/xgCFvdzBYKdvsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:ba:1b:14:bc:b9:46:f5:0a:d5:89:3b:7a:de:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Sep 22 22:00:45 2026 GMT
Not After : Sep 23 22:00:45 2026 GMT
Subject: CN=8edfb8d862efc8a031bfc483c97c9fbb4c1efe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:f7:26:f1:80:34:ec:b2:6d:d8:05:92:34:
17:0c:39:70:bb:57:8a:a7:d7:49:d2:22:9c:c4:42:
33:7c:ab:25:19:40:79:41:9c:bf:2d:07:a3:e6:64:
11:fb:f6:56:52:dd:cb:b5:f2:e9:76:2c:36:3f:f2:
3b:40:92:52:0d:d6:d9:61:ee:ba:e3:1f:a4:77:aa:
95:40:1d:bc:ff:6f:8c:8c:2a:54:47:62:44:a9:71:
1d:74:22:23:f3:91:68:79:2f:41:14:f1:5a:f1:7d:
ca:56:29:0c:4e:dc:39:b9:13:ad:38:04:97:69:ed:
90:d5:e6:5d:b5:77:8d:3c:02:ca:aa:d1:a0:f3:5b:
ff:20:c7:0c:11:7f:6c:20:49:af:5c:99:10:6f:99:
95:44:2a:00:e7:48:2c:be:a4:1b:2e:e4:34:8e:ad:
fe:7c:40:e7:41:1b:52:b1:4e:45:c6:87:89:b9:24:
1e:2b:35:f6:77:01:42:45:02:5d:52:de:8b:e4:b6:
08:58:5e:f1:7e:33:12:f9:75:d6:c1:53:db:94:48:
1d:80:08:37:cd:f1:92:e7:92:85:91:1a:16:f9:7d:
e0:d7:30:f2:16:03:17:90:38:2c:cb:a2:3a:71:45:
2f:dd:57:6d:ca:f6:15:c7:7e:be:99:ce:78:7d:67:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:B8:D8:62:EF:C8:A0:31:BF:C4:83:C9:7C:9F:BB:4C:1E:FE:72
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:21:8a:09:e7:f4:60:b1:06:30:87:53:70:59:9e:e5:be:99:
b3:8c:b9:40:29:ef:cb:e6:f2:53:13:66:04:45:fb:56:b5:3f:
b5:ce:57:93:19:d6:9d:86:c5:31:62:9c:d5:e4:bd:e0:ce:fc:
27:8f:e8:ba:86:81:27:91:dc:9d:9f:f1:54:9e:76:22:88:c4:
33:2e:19:14:d8:af:ab:f7:21:44:6f:a1:b0:6d:53:17:09:6d:
cf:d3:0d:78:ee:a9:e0:60:5c:ee:ec:00:0d:54:6f:84:bc:1a:
8d:87:26:eb:60:42:ed:cb:51:ef:f4:02:d3:22:7f:7b:cb:dd:
37:b3:5e:b2:33:49:8a:01:e5:3e:9d:c7:c1:53:c3:e1:8e:a5:
51:b8:e6:66:40:58:cc:a5:10:b5:04:66:8e:26:95:4d:a2:96:
24:21:02:d9:6f:aa:ee:6e:8b:5a:1a:c8:98:ee:ee:3d:89:49:
af:c6:be:35:0e:3b:d9:1e:0d:04:d6:b1:ba:9b:74:51:69:67:
dd:25:72:fa:f8:11:b0:75:4b:df:53:14:c8:8b:57:e6:ee:46:
6b:70:87:f8:20:c2:fe:f5:fb:4e:9b:b9:8f:dd:46:f6:61:73:
fa:ff:a0:00:0d:a0:23:39:83:27:9f:ef:7f:62:6a:b0:6f:26:
f1:23:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:41 2026 by rpki-client