Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: oSXXu03qM+uTG+rIGJ1GFbPxeLRsypAWYD2oQGnnXuU=
Subject key identifier: 6D:77:89:6C:7C:48:4B:A8:30:87:3B:0A:6E:8A:0C:7E:FE:FA:A9:A5
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01A0C368F061E513D7306A9967EC40EA9C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 1530
Signing time: Mon 21 Sep 2026 10:00:29 +0000
Manifest this update: Mon 21 Sep 2026 10:00:29 +0000
Manifest next update: Tue 22 Sep 2026 10:00:29 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: 0FGoBIe6ns7P/f2+rD1BKfKA7JrPY7b/tPEhT5ZyxEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:f0:61:e5:13:d7:30:6a:99:67:ec:40:ea:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Sep 21 10:00:29 2026 GMT
Not After : Sep 22 10:00:29 2026 GMT
Subject: CN=6d77896c7c484ba830873b0a6e8a0c7efefaa9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:72:a6:ed:c3:24:4a:2c:f6:f3:c5:ac:54:
75:c3:32:28:da:77:39:05:6e:e1:41:5c:36:35:4e:
1e:c7:05:40:53:8e:c8:89:d1:f0:b9:aa:67:4e:6f:
85:5c:a3:1b:71:c0:a8:d9:85:ef:b7:f7:f7:cd:12:
29:53:1e:ca:1f:3a:59:19:85:fa:11:72:1c:f9:f3:
bc:b7:e2:db:00:d2:0b:4a:6c:f4:5c:71:90:0f:94:
27:e3:69:01:8d:48:96:59:d3:d0:e5:b0:7a:04:e9:
7b:39:a9:33:a8:16:3f:f5:e6:30:fe:d9:3a:55:52:
00:24:5c:3c:16:0e:8a:6e:d7:9f:fb:4f:ed:54:31:
bd:ae:56:79:f8:1b:16:19:09:23:58:f1:33:76:63:
b0:68:68:2a:99:cb:26:31:22:b8:9e:b5:42:cc:f7:
a3:c1:38:ca:b1:6c:e7:16:9a:4e:ff:cd:16:85:04:
f4:51:b6:3d:22:ab:fe:a1:36:6d:55:80:47:c4:4c:
0e:1b:1d:60:84:c2:59:17:a2:18:6a:ea:1a:cb:5f:
1e:54:d3:8d:a9:32:6e:05:6c:a9:bd:e0:16:e9:89:
c8:2a:90:ad:bc:34:c8:a8:04:a0:cb:1b:1d:3c:36:
90:7a:b9:1a:e4:07:61:d3:01:0d:5d:c3:72:13:b7:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:89:6C:7C:48:4B:A8:30:87:3B:0A:6E:8A:0C:7E:FE:FA:A9:A5
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:02:62:cc:d8:fe:db:ba:88:a6:59:8c:39:25:c2:1e:69:
b8:37:e3:66:e4:55:7f:04:c5:d4:c9:09:fb:89:96:e2:31:29:
ad:9a:5e:09:80:f4:21:a8:ce:e1:7a:5c:a0:6b:ae:c6:b0:11:
78:98:87:b6:51:10:86:b4:82:0b:99:62:8b:f7:c7:35:cc:fd:
97:0f:05:01:93:ee:96:e0:83:32:e9:4f:63:5c:12:9b:ec:60:
40:01:cf:11:eb:1b:ff:9b:d1:8a:f9:62:2c:c5:5a:80:09:db:
cc:90:5a:00:5e:ad:0c:f2:ac:c1:36:32:2c:75:aa:05:0b:6a:
fa:8f:01:9c:67:5e:c8:6d:57:b0:62:cc:0a:85:97:9d:c5:7e:
16:ca:3c:ed:26:dd:4c:93:5e:33:2d:99:1f:5d:2d:09:85:60:
90:aa:77:7f:f6:b7:27:de:73:d5:e5:5a:15:a1:0e:74:bf:0f:
84:91:31:3e:2c:2b:bb:aa:a5:7c:42:53:f9:90:a8:92:d0:f7:
2e:e1:26:50:6f:d5:f9:ab:3e:0b:f1:12:de:f9:91:d5:18:83:
19:10:cf:4c:66:57:cb:33:ba:e0:ca:78:a5:78:c3:e0:d4:2c:
a1:65:96:61:b4:eb:c3:0d:07:94:17:e2:82:28:89:9d:d5:50:
ff:c7:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:46 2026 by rpki-client