Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
File: 2x3N8J_TBCTak18X8BbgeIurEl0.mft (raw, json)
Hash identifier: UKu4gxg5sF7/+OYjxCRdDZodePG2xFngG9pWLAAkwR4=
Subject key identifier: 12:22:40:EA:C3:65:6B:1A:1F:C1:BE:CE:48:2C:D8:60:08:46:F2:61
Authority key identifier: DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
Certificate issuer: /CN=db1dcdf09fd30424da935f17f016e0788bab125d
Certificate serial: 01A1D980D2D553705A4BA4B14B60CFCD0E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
Manifest number: 016E
Signing time: Sat 14 Nov 2026 10:01:00 +0000
Manifest this update: Sat 14 Nov 2026 10:01:00 +0000
Manifest next update: Sun 15 Nov 2026 10:01:00 +0000
Files and hashes: 1: 2x3N8J_TBCTak18X8BbgeIurEl0.crl (hash: q09QRN2ciR07K5l0iowKJxZ9VK5Cx4K7MYx09vqavn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:80:d2:d5:53:70:5a:4b:a4:b1:4b:60:cf:cd:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcdf09fd30424da935f17f016e0788bab125d
Validity
Not Before: Nov 14 10:01:00 2026 GMT
Not After : Nov 15 10:01:00 2026 GMT
Subject: CN=122240eac3656b1a1fc1bece482cd8600846f261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:ac:e2:3f:84:b0:6b:92:95:bd:93:87:98:
6a:8d:85:d5:09:b8:b4:6c:bd:0e:f7:da:35:98:ca:
06:ae:15:8d:47:6b:73:d8:b1:15:84:48:ea:c9:95:
b2:08:a7:c9:63:31:1e:ba:05:29:80:25:a6:4e:bd:
c6:26:c2:6c:a8:9e:54:38:37:8b:17:43:5e:33:a0:
e9:9f:3d:21:26:1e:fe:c5:1d:a0:5a:fa:ef:60:63:
fb:7d:68:7c:08:d6:ab:64:c8:97:1a:f6:ab:f7:82:
45:e6:6b:e1:70:7d:fc:6c:cb:42:5d:ee:f0:a0:23:
7d:ad:29:0c:1e:ed:a1:b4:54:71:3d:3b:d3:61:dd:
cc:64:5f:db:47:d9:94:8f:11:2b:85:53:33:22:60:
61:98:8d:fc:bb:7f:74:2a:76:a0:54:82:6b:a4:53:
62:ab:b8:ef:01:20:69:97:34:a8:45:b4:dc:f2:47:
98:2f:07:e4:97:e2:44:72:24:40:0c:28:7c:d8:21:
b4:1e:87:2c:e0:53:e6:ed:3b:a2:61:f1:b3:5e:59:
d2:1c:75:20:0b:7e:23:35:8b:fe:66:b6:df:77:22:
42:ee:a2:f5:2a:e5:3a:5f:be:e2:27:d9:37:a2:da:
cb:fb:68:85:16:ab:d1:21:34:97:98:74:54:a7:ac:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:40:EA:C3:65:6B:1A:1F:C1:BE:CE:48:2C:D8:60:08:46:F2:61
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:F0:9F:D3:04:24:DA:93:5F:17:F0:16:E0:78:8B:AB:12:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3N8J_TBCTak18X8BbgeIurEl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/2x3N8J_TBCTak18X8BbgeIurEl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:04:76:4d:eb:9e:fa:92:cb:c0:5d:99:4e:db:d6:34:00:
86:bb:d4:0b:27:3a:c4:03:8c:d4:de:34:6b:5f:d6:0d:6e:c0:
ca:d9:65:12:b1:70:eb:cf:62:fb:48:51:c2:a7:96:c6:b6:37:
40:9a:60:05:29:7f:d1:6e:d3:02:db:82:29:fd:da:ef:6f:2b:
9b:82:48:57:16:23:c1:11:27:d8:6d:64:0f:ab:de:65:13:e6:
6b:ea:39:06:91:4d:51:db:73:4d:15:93:d5:13:fb:51:16:ac:
b7:0d:4d:f8:de:03:88:6a:83:fe:f7:81:95:60:99:c8:98:c7:
c6:70:88:79:23:48:65:ba:2f:3c:45:83:f8:c0:70:3f:c9:98:
df:2e:00:e3:1a:8d:6e:eb:35:86:4b:d5:7a:69:71:ec:b5:69:
8e:de:92:31:05:1c:eb:d3:7a:4e:7e:73:2c:84:b4:ba:43:59:
c5:72:53:ec:e0:41:3a:85:d7:6a:3b:c8:43:ac:7c:fc:1c:96:
9c:c6:c1:37:a6:5a:f0:51:04:ec:d5:14:a8:29:db:35:61:59:
dc:38:be:bd:e1:5f:b1:fd:30:3c:18:8a:ec:e7:35:c7:fb:b0:
be:50:ee:c0:8d:b5:84:03:6d:0d:63:f9:13:42:f7:38:57:d2:
72:45:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:47:02 2026 by rpki-client