Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: LHOjsy+iwIzONfKHLr9PfVGtfaBxURfkfQB4xZy83+A=
Subject key identifier: 80:85:9A:68:B4:6D:7F:50:40:04:6A:5A:65:1B:2B:22:5A:86:14:86
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 019CAAC64D7648510630C1AC4B71485750B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 1311
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: Z0nn9GKLQFZobsBYQkkXRNMN8SaR+KoocyTaslDa8Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4d:76:48:51:06:30:c1:ac:4b:71:48:57:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=80859a68b46d7f5040046a5a651b2b225a861486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:ac:c4:a0:7d:8f:26:c9:64:ed:4e:15:8b:
21:16:ee:28:48:0c:b1:ea:05:32:1e:47:6f:7f:be:
19:a2:ab:fd:31:05:33:cf:19:19:2e:0d:fd:98:3e:
4e:37:05:57:37:d1:15:0a:c9:c2:e4:43:f7:52:e1:
f9:4c:7d:ed:49:5f:4f:c5:14:c7:19:3b:a4:40:06:
67:1f:c5:e7:40:6b:d9:93:7f:7d:5c:24:39:2d:51:
6e:41:45:1c:dd:ef:68:ed:1c:e2:1f:d8:87:87:8f:
68:92:c6:c6:c8:59:d2:4a:4a:35:7e:5a:ff:c5:50:
d3:09:1a:6e:3a:ce:6f:8c:e2:35:ae:f4:2b:31:e3:
8c:90:7e:fa:d2:84:72:67:57:42:77:d6:27:4e:77:
25:20:f0:3d:4a:5e:07:6e:9f:37:74:92:fa:0b:79:
62:1e:7b:bd:de:b0:a1:43:51:e8:f3:47:f3:4e:07:
70:be:38:be:a4:39:3d:8d:d7:20:67:fb:2b:16:2e:
04:b2:00:39:9d:ca:4e:2e:fe:d2:17:c2:cc:d0:24:
20:87:02:9a:f8:95:af:5a:30:22:32:b3:e5:c4:78:
50:19:e5:ff:b0:4c:06:59:2a:d0:5f:96:4c:b2:b5:
19:ed:24:b7:d1:8c:34:cc:8f:39:37:83:a3:c0:97:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:9A:68:B4:6D:7F:50:40:04:6A:5A:65:1B:2B:22:5A:86:14:86
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:29:ae:ab:8a:76:b8:85:e4:83:e1:ac:02:61:51:6a:e5:85:
29:7b:77:89:31:40:64:52:d0:41:de:f5:54:81:0a:9b:ab:3b:
62:d2:56:98:85:8c:69:cc:76:30:be:8e:44:32:88:d1:92:40:
68:2b:e1:64:c9:80:fe:10:dd:5c:ef:13:2a:56:f2:48:d5:ae:
fd:b4:2c:bb:8f:53:bb:98:19:cd:2b:a6:5f:80:4b:21:b9:6a:
fe:ea:9b:f0:4a:95:24:3c:93:37:89:0a:36:34:97:31:0e:cf:
33:0c:46:44:04:7f:0f:a1:51:21:1e:41:93:b7:c4:0b:4a:74:
3e:af:ac:9d:96:31:f8:e0:cb:49:c9:0e:7d:b1:f8:3e:d7:90:
ab:61:f3:39:3d:7b:8a:27:71:b4:46:db:0f:f9:39:9e:03:37:
54:f0:b2:a4:12:28:56:a3:66:9e:99:fa:82:ed:92:a7:f7:c4:
6e:32:42:e1:2a:d7:10:06:60:5a:9c:64:62:df:79:99:f3:4d:
ec:d4:38:4a:2a:dc:ac:23:b0:23:c4:80:63:eb:21:11:e1:18:
c1:65:52:cc:b6:1e:0b:69:9e:e6:5b:ea:ea:5a:92:fa:97:88:
ab:02:e0:a5:f3:67:ce:4f:75:98:47:45:0d:e8:c9:65:08:91:
0e:93:af:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:31 2026 by rpki-client