Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: //GdWb9updqTOU7pukFLCi5lB7VMY6B4KNiQtWnNe6A=
Subject key identifier: 78:E3:5D:43:73:E5:25:66:13:0C:3A:21:B2:EC:1B:9C:B9:66:14:3D
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 01A0DA28D8FD83291CE71DF269CE71D9EC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 01C6
Signing time: Fri 25 Sep 2026 20:01:45 +0000
Manifest this update: Fri 25 Sep 2026 20:01:45 +0000
Manifest next update: Sat 26 Sep 2026 20:01:45 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: xzjqCYio2eko2CAQ+JW/MEPx8fORHm9M+pwZkELM3UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:d8:fd:83:29:1c:e7:1d:f2:69:ce:71:d9:ec:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Sep 25 20:01:45 2026 GMT
Not After : Sep 26 20:01:45 2026 GMT
Subject: CN=78e35d4373e52566130c3a21b2ec1b9cb966143d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:09:2e:4e:ca:81:b1:da:05:20:14:82:59:
a2:e5:72:88:eb:fc:31:b9:ce:1a:1e:de:fb:ff:d5:
20:c8:50:51:ea:eb:d8:07:e9:21:8c:04:9f:2c:7a:
b0:65:8c:5d:17:5e:80:bd:be:4b:fb:2d:e8:27:96:
27:6f:b1:ca:1d:22:31:f5:82:66:32:44:20:60:23:
89:6d:38:7c:06:f2:a9:20:32:27:c6:18:92:36:6a:
44:d7:25:ce:e4:93:63:a4:0b:47:a1:76:28:c0:7e:
2e:ce:6b:a3:39:bc:67:45:19:52:93:9c:68:d8:f3:
5a:9c:92:2f:04:f8:a6:9a:29:60:6f:51:83:4c:3e:
18:6e:cb:c5:3b:33:38:f9:fb:de:40:32:5a:78:42:
0f:02:a9:a6:ca:ed:b5:6b:9d:57:18:45:b1:4d:2f:
79:da:98:96:59:0e:24:ae:be:b6:5a:9c:2a:ca:0c:
cf:4c:d9:98:b0:49:51:fd:40:99:e1:79:d1:6c:b0:
f2:75:73:48:5f:ed:61:1d:4b:a8:e7:2d:e0:a5:5a:
86:5b:98:e9:b4:0a:9a:49:6a:d5:d4:0f:60:de:a9:
9b:17:cc:58:9f:45:3c:bd:0d:b9:61:d8:b5:6e:41:
ff:35:2e:d0:d7:77:1b:d5:38:85:a9:5c:de:f2:ff:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:5D:43:73:E5:25:66:13:0C:3A:21:B2:EC:1B:9C:B9:66:14:3D
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:9b:15:52:92:4c:9c:3d:f8:41:63:ba:ce:05:2f:40:9d:41:
02:46:7c:ee:46:26:f1:4d:f6:a9:fb:b3:90:bb:99:31:55:ee:
b5:4d:12:f0:d0:4e:86:d1:ea:78:a1:c0:ac:57:fd:ea:73:46:
59:23:2e:53:8b:73:88:2d:44:d9:a5:20:ca:4d:a8:84:5e:cc:
95:55:b0:c0:ac:72:5c:67:98:e6:76:fe:bd:25:e1:8b:35:2b:
ad:7a:20:84:78:56:8b:15:04:1e:c1:35:62:8d:dd:60:84:b5:
27:c5:57:3d:b9:36:68:28:ce:23:35:eb:91:57:06:b5:9e:e8:
0d:81:c9:86:00:0d:dc:a8:29:04:3c:45:ce:df:d1:af:de:c8:
dc:b5:fb:e8:ee:87:ac:59:8b:69:98:d2:82:aa:fe:7b:c9:6f:
0d:0e:92:67:a0:c8:53:b9:eb:02:c1:3b:a6:e7:ad:8a:4d:af:
26:5e:a2:79:5f:d2:a4:06:c7:87:38:b9:fd:f2:69:a0:68:2e:
2a:8b:fa:90:fe:20:6f:c7:99:85:ca:50:e5:2d:1a:d7:01:48:
f1:ec:41:85:64:20:34:2b:65:c9:24:52:bd:74:bd:1b:86:73:
e8:f4:2d:9f:7b:88:73:06:ad:75:30:4c:5f:e3:da:74:0c:32:
5d:44:94:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKNj9gykc5x3yac5x2expMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzMzZDFjMjk0YzhiNmJhY2M1ZWRlMjQzZGVhYmQ1MzIz
MWRiZjcwHhcNMjYwOTI1MjAwMTQ1WhcNMjYwOTI2MjAwMTQ1WjAzMTEwLwYDVQQD
Eyg3OGUzNWQ0MzczZTUyNTY2MTMwYzNhMjFiMmVjMWI5Y2I5NjYxNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1cJLk7KgbHaBSAUglmi5XKI6/wx
uc4aHt77/9UgyFBR6uvYB+khjASfLHqwZYxdF16Avb5L+y3oJ5Ynb7HKHSIx9YJm
MkQgYCOJbTh8BvKpIDInxhiSNmpE1yXO5JNjpAtHoXYowH4uzmujObxnRRlSk5xo
2PNanJIvBPimmilgb1GDTD4YbsvFOzM4+fveQDJaeEIPAqmmyu21a51XGEWxTS95
2piWWQ4krr62WpwqygzPTNmYsElR/UCZ4XnRbLDydXNIX+1hHUuo5y3gpVqGW5jp
tAqaSWrV1A9g3qmbF8xYn0U8vQ25Ydi1bkH/NS7Q13cb1TiFqVze8v+DbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjjXUNz5SVmEww6IbLsG5y5ZhQ9MB8GA1UdIwQY
MBaAFMUzPRwpTItrrMXt4kPeq9UyMdv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jNzZjODgtMGVkYi00NWRiLWEwMjMt
ZDI0OGQ5OTQ0NDA0LzEveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jNzZjODgtMGVkYi00NWRiLWEwMjMtZDI0OGQ5OTQ0NDA0
LzEveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3psVUpJM
nD34QWO6zgUvQJ1BAkZ87kYm8U32qfuzkLuZMVXutU0S8NBOhtHqeKHArFf96nNG
WSMuU4tziC1E2aUgyk2ohF7MlVWwwKxyXGeY5nb+vSXhizUrrXoghHhWixUEHsE1
Yo3dYIS1J8VXPbk2aCjOIzXrkVcGtZ7oDYHJhgAN3KgpBDxFzt/Rr97I3LX76O6H
rFmLaZjSgqr+e8lvDQ6SZ6DIU7nrAsE7puetik2vJl6ieV/SpAbHhzi5/fJpoGgu
Kov6kP4gb8eZhcpQ5S0a1wFI8exBhWQgNCtlySRSvXS9G4Zz6PQtn3uIcwatdTBM
X+PadAwyXUSUTw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:00:32 2026 by rpki-client