Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: zg+MboL6dfiCjg78DzJM5oWv2EUMIlYxk2zDODMsQCc=
Subject key identifier: 09:6B:9A:29:5F:7D:F0:BF:8E:5A:EA:D7:AE:CD:DF:DB:6A:C1:71:A7
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 019E1D908E02638ED80D39636342545E3B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 13D1
Signing time: Tue 12 May 2026 19:01:13 +0000
Manifest this update: Tue 12 May 2026 19:01:13 +0000
Manifest next update: Wed 13 May 2026 19:01:13 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: M6IcnoArib68ughAtpO2SKrPXUdYSbu1fnryJZqkWkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:8e:02:63:8e:d8:0d:39:63:63:42:54:5e:3b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: May 12 19:01:13 2026 GMT
Not After : May 13 19:01:13 2026 GMT
Subject: CN=096b9a295f7df0bf8e5aead7aecddfdb6ac171a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:dc:00:ba:80:22:0d:3a:9e:4a:e6:ba:52:
45:9b:e8:6b:b7:59:5f:57:46:f9:24:8f:73:6c:9c:
14:f4:2d:94:22:6e:77:fb:4b:33:05:da:d4:16:49:
2e:da:fc:dd:dd:83:96:c6:5f:67:ca:b9:e5:9f:a8:
18:45:18:23:5c:ed:d4:ff:39:68:ac:75:77:15:72:
6c:90:5b:71:7d:b6:5e:e6:d6:fc:2a:4a:da:67:d6:
ab:ae:5f:5b:a4:cb:30:72:b4:f2:ca:48:9a:51:cd:
73:21:0c:b3:a0:bf:35:a2:08:31:f7:b0:d3:b3:42:
d1:4a:31:ed:68:ff:5c:76:b6:ed:8c:40:78:a0:69:
f5:1e:37:13:25:f1:b2:29:8b:33:4d:69:92:9c:94:
43:88:43:9f:31:d5:f9:b3:05:67:1b:ed:24:57:bb:
63:34:3b:a7:d6:20:20:d4:f9:d1:c1:f6:bd:f6:83:
0a:0c:f1:63:3c:20:e8:61:e0:8b:bd:4a:a8:86:8e:
1d:b7:a5:64:49:c4:01:6d:6a:ec:c7:72:c2:8f:cc:
46:26:29:e2:14:23:58:c1:f9:b5:57:d5:b8:40:de:
af:fb:a9:2e:a8:34:f5:2a:b4:70:71:ec:1a:09:8d:
23:20:71:d8:dd:25:5b:21:07:b2:14:cd:5f:51:ac:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6B:9A:29:5F:7D:F0:BF:8E:5A:EA:D7:AE:CD:DF:DB:6A:C1:71:A7
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:db:5c:c4:56:78:03:0d:7b:f6:96:56:2c:05:b0:50:dd:
f9:9b:07:1f:35:97:19:9a:21:aa:c8:0a:a2:ea:da:5a:5a:22:
00:ca:9a:36:32:b8:b4:bf:59:8f:92:4b:ac:00:52:6b:c7:79:
aa:99:e3:32:b5:5f:9e:a1:24:a0:58:31:48:8c:82:94:39:02:
2f:bc:bb:6c:68:ab:d1:db:63:00:5f:0f:69:4c:f7:e2:2f:c2:
c3:6f:69:13:80:fe:eb:ab:20:e2:62:e1:60:bd:bf:d2:1c:c2:
42:c9:ba:28:75:8a:ac:e5:1a:f9:93:d0:67:0a:2d:4f:8d:2c:
ee:06:39:4c:20:5d:69:3e:b6:5a:17:e8:cb:e7:59:eb:79:9d:
9d:56:57:33:36:fe:9e:25:21:a4:15:ec:cd:89:e0:4b:82:0f:
be:87:67:49:d0:e5:72:8c:50:95:10:db:17:31:9c:ef:2c:72:
5b:df:5d:5f:ef:a7:85:c5:5d:d2:94:99:87:ad:dd:fe:a6:24:
3e:4c:b2:87:61:b1:5e:18:8e:ab:58:d1:29:83:bd:0d:63:02:
a2:c0:38:81:8e:4f:22:dc:d7:8d:c5:80:45:45:fd:2c:35:39:
9f:e3:fc:56:dc:e4:10:38:b0:30:ee:43:c8:14:eb:fd:9f:9b:
9e:8a:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:44 2026 by rpki-client