Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: i3Hye3f6JW99x/9EC8ZYLIDJGbZ23+XwPvpSVrUua2w=
Subject key identifier: AF:66:4D:4B:EE:18:91:9A:60:35:2C:7A:53:40:14:90:6C:E7:37:8A
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01A1DF4C8445BDDCAF23CF35C94BFC236804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 15C3
Signing time: Sun 15 Nov 2026 13:01:35 +0000
Manifest this update: Sun 15 Nov 2026 13:01:35 +0000
Manifest next update: Mon 16 Nov 2026 13:01:35 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: /Upe4JUTzvOLOVLvtpqWCSld+BD+CPUDDNZHqV2VdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:84:45:bd:dc:af:23:cf:35:c9:4b:fc:23:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Nov 15 13:01:35 2026 GMT
Not After : Nov 16 13:01:35 2026 GMT
Subject: CN=af664d4bee18919a60352c7a534014906ce7378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:3d:7b:cb:26:90:b4:23:32:7e:b0:ba:3e:
e8:30:f1:21:3e:bf:d2:04:94:da:50:cd:5d:b2:9d:
68:d4:f4:fd:e4:2b:29:7f:2b:75:2b:a1:99:41:fc:
ea:b4:ab:80:cb:35:c6:c4:af:b7:4c:3f:c6:6c:6f:
20:15:1e:2f:93:dd:28:07:d0:6b:56:55:99:85:ae:
2b:de:e7:89:29:0f:0d:c8:39:87:3c:a4:30:a2:6b:
e5:04:4e:aa:fd:94:45:e2:2a:c4:7d:63:50:0d:87:
dd:4c:c5:9a:55:8f:c8:2b:8e:b8:ec:6e:76:87:bc:
22:65:f4:2a:2b:95:50:6d:98:2a:1f:0a:a2:3e:d4:
40:51:46:af:2d:11:bb:c5:5d:bd:23:6f:47:4d:61:
a9:a7:dd:a9:32:d1:de:aa:6d:1c:a1:16:ec:0b:ac:
89:e5:0a:0f:9f:17:bc:21:01:0d:91:6d:b1:c9:3e:
fb:c5:b0:b5:b6:0b:67:41:f2:a0:f0:91:dc:50:7a:
b7:7f:ae:d6:36:6d:a7:99:2b:5a:de:2c:78:89:48:
2b:a3:a0:c7:c5:bb:2e:45:6a:02:6d:ac:14:8c:59:
1d:10:b3:f3:0f:78:6a:8a:7f:c0:47:a6:cd:ff:f7:
b7:e8:4c:0b:b2:09:ea:ff:83:a3:35:ae:68:42:9c:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:4D:4B:EE:18:91:9A:60:35:2C:7A:53:40:14:90:6C:E7:37:8A
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:82:86:20:e7:ea:c9:e3:f7:15:df:b3:05:ae:85:f0:19:f6:
2b:25:5e:ed:ea:17:b2:cb:71:d5:a2:5d:b1:6d:db:8f:0b:b8:
11:64:1a:13:7e:5e:8a:f0:8b:4f:5e:b3:79:1c:05:7b:7f:08:
7b:2a:03:57:3b:66:e1:32:a9:92:f7:ac:b3:21:f0:c1:9d:63:
54:b2:0e:18:91:0a:06:ab:18:dc:62:e6:b5:dc:53:e7:56:53:
4a:41:fa:d8:65:24:bd:9b:2c:4c:c0:af:ba:44:f9:c2:2d:9b:
58:03:1b:1d:f9:f5:e9:d9:63:e2:92:0c:8f:ab:fc:d0:9d:44:
77:f7:d6:31:a9:c3:7b:92:26:a0:3c:73:cf:2f:03:3a:8b:45:
9a:2b:e3:13:d0:68:9c:3a:4b:29:52:87:f7:46:40:b2:ec:b3:
8d:79:db:86:54:f1:53:5b:3c:7e:f5:58:48:2f:88:18:e5:5a:
fc:26:ff:93:5b:49:30:0b:6b:30:e5:25:b4:72:a8:84:bc:22:
8e:df:75:3c:2e:4e:6c:4c:be:b3:8b:a7:c3:02:3f:c3:d6:02:
b2:1b:50:a7:be:b8:e3:75:50:02:12:a7:a4:e9:c2:ae:6c:37:
a1:a1:4a:d6:33:9f:e9:97:b5:47:7d:b8:50:36:ef:60:02:d9:
06:4e:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:36 2026 by rpki-client