Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: rchSTezC6zoVOnu4cvCQ5PiSbQgdwDrxW3tg4xZWTH4=
Subject key identifier: 7E:00:0F:38:8B:2A:14:C7:83:62:98:8A:49:0C:12:77:B0:00:EF:C5
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019E1D222B8FAD088AFE9DFD367797D3C4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 5B
Signing time: Tue 12 May 2026 17:00:39 +0000
Manifest this update: Tue 12 May 2026 17:00:39 +0000
Manifest next update: Wed 13 May 2026 17:00:39 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: 7GrFyDfe0BHAK6KPxARfM2beb2TyVS2Hfc/YpeBYx+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:2b:8f:ad:08:8a:fe:9d:fd:36:77:97:d3:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: May 12 17:00:39 2026 GMT
Not After : May 13 17:00:39 2026 GMT
Subject: CN=7e000f388b2a14c78362988a490c1277b000efc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:83:71:c8:c9:5b:d7:79:1f:c4:10:24:a6:
37:4f:2f:3f:7d:70:46:09:d0:61:d8:45:d4:df:5c:
e8:5d:09:23:af:33:d2:ec:20:7c:62:ea:85:5b:0e:
2a:86:9a:c2:df:2d:cd:4c:80:34:5f:ed:11:64:25:
c3:f7:b3:51:e7:5b:ab:0b:cb:7b:5f:09:2e:0b:f7:
be:24:d9:9c:6a:e0:f9:37:31:fd:61:ef:d9:28:4a:
7b:aa:a7:aa:9a:4f:be:d1:96:de:a6:10:bc:66:ca:
4e:28:20:a6:14:99:8a:14:e5:ad:f5:11:98:a2:5f:
9c:45:2a:f0:3f:93:b3:5c:03:74:fe:ca:17:55:9a:
a8:9e:37:84:ca:92:e4:d3:fd:e1:4c:90:d4:8f:21:
d0:73:f3:45:31:66:c1:36:56:e2:17:b7:e2:11:0b:
d3:06:34:9e:c9:2b:02:a0:ee:26:0d:38:52:6e:2b:
e0:ce:4f:58:13:f3:93:9e:53:60:9b:f4:89:f6:99:
59:e6:e3:49:d7:00:26:1b:eb:bd:84:db:39:ee:24:
b6:d4:ed:85:60:2d:d6:96:20:42:c7:40:7f:50:6f:
b3:1d:66:79:16:6f:55:47:a9:59:cc:58:38:54:2f:
41:36:3a:46:d6:a1:ef:f7:b8:e4:f8:d7:37:cf:56:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:0F:38:8B:2A:14:C7:83:62:98:8A:49:0C:12:77:B0:00:EF:C5
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:e8:13:61:5d:b7:f2:b5:fd:78:f8:00:cb:e3:ec:44:b2:
e7:e9:58:57:c3:a1:3e:9c:f2:b5:ec:70:a3:aa:e8:20:47:59:
52:db:9f:15:74:f6:9a:d6:02:b3:3d:93:3c:48:32:eb:e9:13:
8a:72:89:8f:b8:9f:19:a8:de:a0:b3:16:81:af:1e:11:fd:a0:
ca:fc:71:81:6e:d9:b1:93:76:20:b8:39:08:7b:f1:d6:02:b3:
ae:34:0d:94:12:9c:18:0c:b0:36:27:1b:8b:c8:11:1c:70:c3:
3a:5d:73:a8:ce:af:2c:bc:65:01:2c:6e:8e:dd:a9:94:70:80:
6c:60:8b:d0:b1:dc:5b:a0:5f:fe:5e:71:94:0d:6a:4e:3b:cb:
df:06:3c:c3:2f:ee:69:35:e5:e0:cc:98:8d:2b:f8:c8:ec:86:
67:a0:5c:c0:41:cf:9e:2a:c3:8d:89:9a:22:9f:48:b5:c1:aa:
00:7e:24:62:a5:d8:9c:f9:f8:3c:21:14:98:c0:60:75:75:5e:
6f:af:d9:0b:dd:0f:16:7c:2e:15:0e:44:85:1c:3a:83:62:a0:
a7:9f:d4:5c:57:21:f8:6d:c8:8f:18:18:39:9f:ce:84:4f:e2:
30:9b:2c:21:5c:90:1d:c2:22:7f:71:2f:ca:a6:40:cd:e8:f1:
95:a9:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:52 2026 by rpki-client