Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: dQJq9c1ZZb4Ns/nYkl8CYb5r72pT0iGALVwYRMNI1x4=
Subject key identifier: 75:B4:51:AB:92:2C:B5:45:7A:A3:A5:D4:80:75:CC:8C:0D:16:C7:C9
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019F8FEBB772B9832D83C4B44EC8DA588CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 011B
Signing time: Thu 23 Jul 2026 17:00:17 +0000
Manifest this update: Thu 23 Jul 2026 17:00:17 +0000
Manifest next update: Fri 24 Jul 2026 17:00:17 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: K5uh3ScbmVzJrL33O74BOhU3QZS1MOfv0xwdVSBgxnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:b7:72:b9:83:2d:83:c4:b4:4e:c8:da:58:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Jul 23 17:00:17 2026 GMT
Not After : Jul 24 17:00:17 2026 GMT
Subject: CN=75b451ab922cb5457aa3a5d48075cc8c0d16c7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:ed:05:ff:39:56:a8:31:1a:7b:5a:d8:41:
4d:d0:e1:2a:7f:e2:25:65:5d:c1:df:1a:32:dc:f3:
44:4e:d5:31:f6:6e:1e:be:0d:38:23:37:53:4e:56:
b0:b2:b4:ba:90:22:57:f3:ca:ac:48:64:87:45:9e:
2a:75:66:e4:52:4c:8a:fe:7c:e9:8e:c3:81:62:86:
3f:42:38:46:75:e9:2e:1e:8d:81:35:76:e5:a7:9d:
03:95:1e:aa:0b:59:ed:ab:93:6e:2e:e3:de:b0:30:
bd:02:f8:9e:22:9e:b0:bf:e6:94:4a:0b:13:03:ad:
ab:be:15:b6:3f:56:7a:03:11:a5:84:ee:68:85:de:
32:16:36:b6:23:4f:09:bc:22:69:39:bd:43:69:17:
fc:ad:04:bc:68:15:6d:19:62:f7:ce:5b:8e:76:ec:
70:2a:d6:e6:e5:32:da:e0:32:98:75:63:01:44:43:
2a:21:62:10:1c:cb:d7:d9:7c:a6:d7:b4:23:31:ea:
b1:9b:32:84:d3:1a:a9:86:bd:47:5b:45:5a:ab:a0:
a6:cb:f3:64:cc:06:4b:ce:54:4e:4a:34:5d:be:6c:
92:29:1b:16:3c:d8:f0:7b:d0:d4:3b:6c:58:e9:55:
83:58:97:d4:bf:8e:b3:69:19:34:84:54:65:1c:52:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B4:51:AB:92:2C:B5:45:7A:A3:A5:D4:80:75:CC:8C:0D:16:C7:C9
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:39:ca:14:3d:a3:1d:7a:fd:6d:5f:af:14:1c:61:cc:17:8a:
fc:05:46:c6:81:3d:b5:a8:d5:9e:0f:44:8f:10:ac:3b:3b:21:
4c:0b:7c:46:35:af:29:4d:10:b2:7c:4c:b5:d5:43:e3:45:5a:
6e:45:a6:cd:31:43:a3:e7:9f:99:c2:2a:82:36:2b:f1:5a:2f:
1f:2e:14:45:9f:f3:8a:40:9d:ed:85:ed:46:1f:cc:5c:db:4b:
d4:40:c0:ef:21:54:35:a9:1b:46:9b:22:f4:d1:cd:64:b6:04:
8b:41:fc:02:a7:9b:c0:63:50:52:18:97:50:bd:3b:85:a2:b2:
63:6d:4a:2b:23:17:9d:68:25:97:bc:af:99:c9:e5:c0:4e:37:
3b:a8:1f:ed:f6:b5:50:e9:d7:3e:47:2a:24:0f:20:7b:b7:93:
62:56:fc:3d:aa:57:84:86:10:50:ba:4f:4e:64:3d:2a:c6:88:
27:89:e6:34:44:99:d8:e4:8e:f9:30:67:cc:3d:46:67:13:09:
94:f1:a9:73:c2:06:32:6c:06:4a:15:0a:a1:fb:af:74:47:ae:
4f:58:f7:d4:a0:e6:ca:f8:38:77:5c:21:e6:ff:63:56:0e:8d:
4d:75:51:77:18:b7:3d:88:3d:59:4a:76:cb:e3:e7:93:c1:93:
74:b4:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:58 2026 by rpki-client