Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
File: 2x3N8J_TBCTak18X8BbgeIurEl0.mft (raw, json)
Hash identifier: RaFwqLaUCmZjFhyCs6oF9DLBOAlNmo0hyZ1ijByRxfM=
Subject key identifier: FC:A8:16:8D:4B:33:4A:1E:00:1F:7B:FE:21:38:F5:53:9B:40:72:08
Authority key identifier: DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
Certificate issuer: /CN=db1dcdf09fd30424da935f17f016e0788bab125d
Certificate serial: 019F905A8EA3BE75AC14987ED68E3E299CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:01:21 +0000
Manifest this update: Thu 23 Jul 2026 19:01:21 +0000
Manifest next update: Fri 24 Jul 2026 19:01:21 +0000
Files and hashes: 1: 2x3N8J_TBCTak18X8BbgeIurEl0.crl (hash: +m35iAbeoZt6axrhPOT1wiYtwSYdHaTMxA2i4dW3aOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8e:a3:be:75:ac:14:98:7e:d6:8e:3e:29:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcdf09fd30424da935f17f016e0788bab125d
Validity
Not Before: Jul 23 19:01:21 2026 GMT
Not After : Jul 24 19:01:21 2026 GMT
Subject: CN=fca8168d4b334a1e001f7bfe2138f5539b407208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:98:e1:86:cd:56:8b:9c:28:16:43:dd:2d:
b6:e4:76:45:3b:e1:93:dc:1b:f4:cd:0e:02:09:89:
ba:cd:82:b1:2b:91:a9:4a:b7:86:a1:68:e3:57:3e:
70:1f:e0:c0:ec:1b:31:bf:a9:5e:4b:80:fb:38:df:
57:35:40:04:6b:b4:96:f7:cc:28:07:0f:21:27:6e:
ea:60:51:64:53:39:65:8f:bb:47:aa:b8:70:77:0e:
45:08:91:44:50:32:2e:ee:be:d4:f8:ed:25:23:6f:
e7:3c:9c:ff:a9:be:3b:c1:7d:06:02:dc:a1:57:49:
a3:42:fa:a6:dd:1c:39:19:4d:a9:b6:6c:1b:6a:37:
59:5d:f3:c8:ca:83:4c:7c:f3:5e:8e:b2:dc:ca:ff:
65:19:a5:23:b7:24:6b:23:ce:61:55:ef:fd:b0:3f:
d3:c6:2d:e7:a0:91:69:71:67:d8:08:d5:22:1b:d7:
d6:52:27:76:82:b9:42:b5:82:d3:a3:1a:6c:d5:40:
77:66:6c:4b:88:e0:e0:f8:fc:dd:e3:0e:ed:05:7a:
8d:b4:64:1c:7a:52:9e:20:b0:b2:ed:1e:8a:2f:0b:
63:e1:16:c9:b3:52:f2:00:30:3b:e2:87:3e:83:80:
fc:e6:59:67:97:03:28:b5:9a:0a:ea:d6:0c:4b:d7:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A8:16:8D:4B:33:4A:1E:00:1F:7B:FE:21:38:F5:53:9B:40:72:08
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:06:20:30:2c:97:73:de:46:df:3f:5e:d7:0a:f9:59:d0:d7:
8d:6e:48:bf:9d:08:e0:21:8f:f7:15:e7:80:ad:84:95:c2:33:
94:55:76:bf:14:81:6c:64:2b:7a:93:45:19:5d:be:ed:7d:98:
bd:eb:c1:b5:9c:b0:ee:11:be:52:43:09:5b:93:e3:d5:ae:05:
8e:c9:7c:c5:36:b7:5e:e6:31:7c:0f:95:0e:87:4b:ea:f2:e7:
00:f6:b1:a9:53:5f:ae:fa:28:93:43:57:d2:27:23:44:e9:74:
17:44:0e:e8:7d:74:fd:e1:37:88:7b:0a:0e:83:8d:0f:36:53:
b3:f6:a6:8b:2f:dd:f4:9f:31:49:27:a8:6b:61:9b:36:1e:bd:
b5:19:66:18:1f:e1:ff:66:9c:b4:63:6a:bd:75:3e:62:f4:90:
ff:ce:b4:f5:26:ef:dc:ac:63:0d:7b:f3:56:40:5e:7c:03:66:
c8:51:4b:a6:b8:96:c6:a5:02:a9:7d:c3:80:0f:1d:7e:ff:dc:
1e:d4:7d:44:93:70:c3:f9:5c:90:0b:45:36:7a:4a:d5:ce:a1:
12:07:15:79:f9:89:f5:bd:2e:70:36:63:59:9f:28:5d:02:d3:
61:4a:ca:cd:8a:26:f2:d1:83:49:6c:b7:d7:6b:87:6f:61:0b:
4e:53:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:02 2026 by rpki-client