Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
File: 2x3N8J_TBCTak18X8BbgeIurEl0.mft (raw, json)
Hash identifier: XkMwPv2lhGFNbQguzTbpJ0nBinYOUSZVN4rV0Rn7KMQ=
Subject key identifier: B2:E6:A1:9B:D7:B1:DD:47:8D:28:E4:78:98:E1:E0:9D:4E:21:A8:79
Authority key identifier: DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
Certificate issuer: /CN=db1dcdf09fd30424da935f17f016e0788bab125d
Certificate serial: 01A0CB222422D4A33FD7F6A70F78D67675FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 22:00:07 +0000
Manifest this update: Tue 22 Sep 2026 22:00:07 +0000
Manifest next update: Wed 23 Sep 2026 22:00:07 +0000
Files and hashes: 1: 2x3N8J_TBCTak18X8BbgeIurEl0.crl (hash: nh67V0NuOLUFaoY4lObJ/tgdpZtBFPc9aPGDA6mMoJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:24:22:d4:a3:3f:d7:f6:a7:0f:78:d6:76:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcdf09fd30424da935f17f016e0788bab125d
Validity
Not Before: Sep 22 22:00:07 2026 GMT
Not After : Sep 23 22:00:07 2026 GMT
Subject: CN=b2e6a19bd7b1dd478d28e47898e1e09d4e21a879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:29:5e:bf:4f:fa:1e:a0:08:82:57:0b:b3:
58:1e:b2:16:c6:be:a5:d2:ce:fb:28:30:ce:20:de:
32:e4:26:b5:db:3c:cc:85:a6:b6:1e:a4:96:2d:ec:
1c:eb:ca:fe:bf:67:a0:41:67:bd:69:70:e4:d4:8b:
ed:8a:4e:40:19:1e:58:62:41:bc:fc:c5:2b:b0:5b:
4a:0b:aa:ca:c9:e9:a2:a7:df:24:59:00:25:ff:ec:
09:42:fa:2f:1b:00:84:d5:1a:ce:b7:a8:bb:b5:0e:
a3:4c:56:b6:c0:ea:de:2c:49:18:dd:e1:0e:23:10:
aa:8d:d4:eb:0b:6b:b6:19:b0:3b:12:2e:22:a5:cd:
3b:1d:7d:42:59:09:79:e9:1a:89:f1:29:b7:6c:b5:
44:86:a1:f7:f9:9c:56:78:7b:44:b3:39:b3:78:7e:
c9:e6:12:da:29:2b:10:da:74:e1:4c:52:e9:ee:35:
25:6f:f8:02:8b:25:3c:0a:3d:68:72:97:0c:cf:f6:
39:39:df:66:ea:f4:6b:4f:55:0e:f2:77:bd:02:38:
af:5d:43:2b:b6:c8:11:37:56:17:e5:2a:bb:37:fa:
e3:2b:a5:58:55:04:e5:aa:83:9b:90:2e:59:85:12:
ef:0e:f9:10:e4:d8:d7:4c:5f:6d:0b:45:a3:78:a8:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E6:A1:9B:D7:B1:DD:47:8D:28:E4:78:98:E1:E0:9D:4E:21:A8:79
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:76:f3:6c:d6:ff:d3:5c:02:56:6d:82:13:9c:fe:c7:7a:ea:
5c:64:e7:b1:62:53:3f:77:34:97:06:09:d1:a2:e1:dd:3f:5c:
92:20:e7:b0:6b:a9:5b:ca:44:33:06:ad:f9:41:68:aa:88:8d:
0b:72:96:a9:5d:9e:a0:be:ff:21:a4:e0:68:e2:38:0a:05:82:
d4:30:43:be:96:78:ea:51:ea:2d:aa:58:ca:a9:01:d5:fe:6d:
14:a3:5e:5b:86:66:d0:6f:50:96:7a:d2:36:97:72:6c:de:d7:
c0:41:7a:95:7a:ee:15:af:e2:a8:f6:b6:28:d0:3d:19:16:3c:
64:71:f9:f7:80:9c:cb:e7:63:60:f6:2f:56:59:af:f2:21:8d:
20:6a:7e:64:60:b2:bc:5c:27:18:72:89:45:cc:4e:73:de:0f:
84:10:09:67:a1:f0:6d:ab:d0:c6:81:1e:5e:40:9c:2f:90:00:
3d:ed:38:2c:05:3d:ce:d1:5a:3e:fc:e4:0b:63:83:99:76:df:
00:eb:9d:4f:c0:b6:be:6c:83:bc:f2:af:43:a4:36:b8:16:04:
35:5f:b8:09:0a:ec:18:6b:09:a2:7e:d4:ed:80:20:36:74:5d:
51:e1:a5:56:1b:28:b8:bd:32:2a:70:3a:5f:a5:2b:d2:6d:33:
d8:5c:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:32:47 2026 by rpki-client