Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: SLqo6CTDpS727tdyTHSCxgCbQa8E4d7F6Vlr8tgpkD8=
Subject key identifier: B0:72:25:84:5F:DD:66:28:0C:D9:8D:40:90:4A:A5:9B:D8:34:3F:11
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 019F9059C790D1CF2B7D665312EBE7561416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 1491
Signing time: Thu 23 Jul 2026 19:00:30 +0000
Manifest this update: Thu 23 Jul 2026 19:00:30 +0000
Manifest next update: Fri 24 Jul 2026 19:00:30 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: BoPewR7fGYmqSMrRVCCdCrsmhTijOC5O8dHBLjHugmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:c7:90:d1:cf:2b:7d:66:53:12:eb:e7:56:14:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Jul 23 19:00:30 2026 GMT
Not After : Jul 24 19:00:30 2026 GMT
Subject: CN=b07225845fdd66280cd98d40904aa59bd8343f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:5f:7b:14:a8:59:bf:85:88:07:24:9e:4b:
72:8e:d5:ab:e6:b4:18:33:4c:03:52:cf:3d:5f:e8:
8a:c6:07:29:14:85:1e:65:51:91:96:20:b9:14:68:
5d:32:a9:2d:4e:76:25:82:8c:aa:af:b0:b1:91:57:
b1:a1:7c:31:3e:7b:59:24:3b:4f:f2:37:94:92:8a:
42:89:84:73:76:ac:b0:dc:70:55:1b:24:83:8e:b2:
d8:c7:e7:d7:e4:bc:00:0a:33:57:30:e9:a3:59:52:
88:f5:7a:db:3f:d5:1d:73:71:2c:b4:fa:f8:01:2d:
97:27:46:de:c1:81:03:19:0c:92:0c:95:4d:1a:38:
eb:1e:d9:f4:3e:e0:37:4c:62:41:34:56:3c:79:d4:
64:fd:74:a0:c2:80:be:83:ea:fa:91:9d:be:e2:1d:
54:15:2f:12:22:f4:43:64:bd:ed:5d:a9:55:92:d3:
24:d4:92:66:2c:3b:d8:96:02:e4:6c:8f:20:d4:09:
c2:a9:a8:0d:d3:ee:3d:d2:d8:b8:69:2e:bb:24:56:
fa:8d:50:dd:4e:4b:b3:6d:43:2c:2c:7c:80:f7:4d:
7a:99:6a:90:73:36:60:62:94:00:0c:58:76:db:de:
99:b7:f7:21:d5:bf:42:ed:9f:36:2d:8c:df:f1:a6:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:25:84:5F:DD:66:28:0C:D9:8D:40:90:4A:A5:9B:D8:34:3F:11
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9d:01:76:67:5f:90:d4:7e:bc:cb:cf:cb:42:4b:c3:22:b2:
15:64:80:14:fc:ff:77:b2:67:e0:11:c9:98:2e:62:74:9b:3c:
d2:66:f8:e2:32:cd:c5:9a:10:bf:21:36:4c:87:cf:4c:6c:bf:
80:c9:07:34:1e:43:c5:7c:e3:9e:2a:ae:91:86:b2:a1:9f:8a:
07:a9:87:15:4a:67:fa:3b:52:f6:7a:ee:3c:9e:0c:83:c0:21:
10:fd:39:f1:ab:d3:38:e3:2d:4e:6e:21:e3:4f:42:10:15:3f:
89:cc:9d:ad:1a:b3:b5:81:f0:db:c2:42:ab:7b:66:94:50:0e:
99:da:db:af:60:b3:d6:6e:c6:05:04:97:a7:cb:a5:4c:73:0f:
36:c0:60:24:62:4c:10:06:6c:40:5f:d1:df:17:d8:a0:89:d4:
b1:11:55:ba:3e:11:41:28:9d:3b:03:08:06:fc:4d:d5:51:58:
c1:19:df:bb:f4:b7:69:c0:8b:7f:00:e2:83:b2:f8:e0:47:09:
76:33:85:ff:41:63:96:bf:07:b5:02:71:b2:eb:72:49:26:46:
78:dc:eb:9c:5a:d6:3d:92:c3:4e:9d:94:6e:f3:71:42:d8:3b:
65:f8:84:cc:24:d0:d9:4c:7b:19:85:29:b8:ce:53:f6:e1:28:
27:fc:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:34 2026 by rpki-client