Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: WtXU/25fTw07c2d7B4pQwV/u+RPX+AoMoUIbP7Q/iOQ=
Subject key identifier: 59:84:8D:D6:F1:97:6A:D2:1F:1B:8B:63:07:8D:9F:1C:33:26:B1:A8
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 019E1DC7B3EA7E338DB8A708C205CC66F0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 172C
Signing time: Tue 12 May 2026 20:01:27 +0000
Manifest this update: Tue 12 May 2026 20:01:27 +0000
Manifest next update: Wed 13 May 2026 20:01:27 +0000
Files and hashes: 1: 2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa (hash: MpQCPMnmPtD2sJGqmtD1rBnmiwGX8J1+k78/7G1N5Nw=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: DJvJwKx5zTapg0/Lj9tUhIXKxrKZP8sDBIrSyj2081k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:b3:ea:7e:33:8d:b8:a7:08:c2:05:cc:66:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: May 12 20:01:27 2026 GMT
Not After : May 13 20:01:27 2026 GMT
Subject: CN=59848dd6f1976ad21f1b8b63078d9f1c3326b1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:b7:a5:ef:e1:0e:cd:d3:7e:55:28:98:4f:
68:77:06:db:84:8f:fd:2d:3d:4b:a3:38:bd:a5:bd:
4c:e1:b1:69:83:57:33:0f:d6:cf:d6:9b:fc:1f:68:
26:9d:ca:55:36:2f:02:1b:46:6c:1f:be:40:3f:82:
85:f1:69:46:ac:10:c4:1c:07:3b:77:be:09:b8:fc:
b3:7b:d1:94:bb:5d:53:5a:8d:1e:c8:f7:42:0a:b9:
b6:a5:9f:43:5b:da:45:5b:36:bf:eb:cb:70:6a:b2:
2c:23:7b:b4:1e:f2:75:ee:dd:c7:6c:18:58:1c:ab:
35:35:7d:d6:02:ee:37:df:a8:6a:e1:75:cb:55:fd:
dc:7a:38:db:ce:0b:da:69:38:ef:3d:58:60:5e:5f:
a6:13:22:16:1e:9c:e9:bb:77:7a:a3:c8:55:37:46:
1f:33:cd:b4:53:61:3e:15:59:86:77:79:1d:ca:26:
93:d1:83:0d:9a:9e:dd:b7:4b:37:5f:2b:a5:a8:43:
fa:c9:9b:37:8f:b9:e7:6f:0e:b7:10:60:2e:a1:9c:
6d:25:9f:88:ed:cb:fb:0d:89:b3:67:f1:69:f7:db:
a4:00:f8:59:df:00:91:ef:15:30:d1:05:31:e8:4d:
f8:5f:39:a1:bb:31:66:30:3b:a8:3b:33:8e:f3:b0:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:8D:D6:F1:97:6A:D2:1F:1B:8B:63:07:8D:9F:1C:33:26:B1:A8
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d0:79:0f:a5:3d:96:f4:5e:b9:ab:5a:b4:f2:7e:b1:1f:d0:
7e:5e:55:04:4d:ea:9f:a5:00:89:a8:7a:d3:09:b2:b2:21:a4:
70:18:d4:f9:99:28:f1:3f:12:d4:0e:6c:c9:b4:c4:af:84:de:
a4:cf:e2:9e:ac:a0:dc:2b:5c:b6:07:0e:23:27:e1:f2:29:29:
27:28:50:19:19:af:86:d1:da:f9:8c:a5:86:55:91:88:3c:7e:
dd:ef:29:c7:ee:75:bf:08:56:df:98:80:24:d8:da:83:64:86:
91:5b:c3:98:7f:f1:61:fe:74:d9:42:93:66:f0:4d:d2:83:0b:
fd:a6:5e:5a:c9:19:df:23:05:dc:dd:93:76:59:70:62:54:fe:
f4:1f:26:dd:cd:51:7e:98:5a:a1:7d:26:7e:df:03:37:aa:07:
fb:b4:47:51:2d:53:6f:6a:e6:83:ef:b9:4e:15:12:d9:29:a7:
7e:5d:59:66:fa:66:60:35:4a:71:82:6e:50:fb:d8:71:58:ae:
46:23:d6:00:25:8e:61:0c:04:e2:a8:76:ae:03:a5:57:b6:59:
33:55:ae:52:78:c8:66:f2:6f:8a:78:3e:82:c3:03:d0:93:76:
89:9e:cf:cf:52:f6:d4:40:3b:4c:51:f5:16:81:5b:e1:d5:fe:
0f:ae:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:49 2026 by rpki-client