Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: SgUg9uD+9ZbNpHARdhCRS6/2uLmjoI+PCRtcWuI1KlU=
Subject key identifier: 4B:8D:3F:AD:D6:A5:36:82:E9:6B:47:3A:02:D7:7A:EB:7E:41:09:6B
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 01A0C6D87ED951F1480567CBFE643C15CBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 01BC
Signing time: Tue 22 Sep 2026 02:01:11 +0000
Manifest this update: Tue 22 Sep 2026 02:01:11 +0000
Manifest next update: Wed 23 Sep 2026 02:01:11 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: 2RG+MUAtTNvi38oP0BhSSMo9Oe7iSwCHLFxNGTYb4pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:7e:d9:51:f1:48:05:67:cb:fe:64:3c:15:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Sep 22 02:01:11 2026 GMT
Not After : Sep 23 02:01:11 2026 GMT
Subject: CN=4b8d3fadd6a53682e96b473a02d77aeb7e41096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:5f:37:9d:82:c0:b3:e5:0d:50:83:1e:18:
5a:cc:1d:05:5e:25:c0:81:d4:5b:7a:58:48:3a:81:
3d:2a:22:4d:02:49:4f:18:fe:81:35:54:15:98:5b:
a7:04:84:02:ff:85:5e:03:d4:33:11:c4:78:42:c2:
28:c1:42:48:08:5f:a0:e1:9d:5e:71:1b:ec:7d:e6:
01:be:2b:50:0a:70:a1:ac:e3:5b:cb:88:40:fe:0f:
8c:d9:66:9e:36:e4:6f:cb:de:e7:00:2f:a2:98:c2:
bb:31:1d:bb:19:e2:48:0b:19:a7:7a:c6:e3:4c:5c:
9f:3d:1b:90:57:7e:77:e6:11:71:7e:5e:6d:15:8f:
cb:bf:ce:53:e6:5e:23:7a:aa:f6:e4:1f:9a:22:a2:
13:48:6e:34:5b:bc:77:4f:5b:a5:72:f3:18:f2:da:
d0:bf:9a:fc:15:ce:39:38:8d:65:e7:0c:21:77:eb:
94:5f:a3:8f:da:4d:45:a3:76:2d:cc:1a:e2:81:92:
b5:55:16:c7:ea:b8:4a:49:8e:4f:01:3a:15:c5:a2:
70:76:67:c9:de:1b:53:aa:cd:d5:e8:b6:2b:32:08:
ee:9e:fd:44:f2:bc:e6:0a:7a:ab:72:81:4e:77:c2:
2d:a2:31:a3:7c:b1:0a:d1:66:3a:f5:ad:a6:07:99:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:3F:AD:D6:A5:36:82:E9:6B:47:3A:02:D7:7A:EB:7E:41:09:6B
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:31:13:17:c1:fa:2e:36:f9:33:c2:f2:8f:90:23:c0:a6:
78:26:ba:4a:85:01:90:26:8f:5e:61:74:05:ff:e4:4a:9b:13:
a2:ab:e9:e5:c1:52:80:d4:ba:e7:cb:6d:08:4a:80:28:53:37:
5c:8b:33:05:aa:5d:f4:dd:8a:5c:f0:df:20:07:b3:0d:c9:45:
ad:6a:92:4a:78:bc:5d:24:f6:d8:19:c2:34:08:ec:44:7b:ed:
21:fb:13:54:1f:73:3b:24:3a:8b:42:99:f0:2f:8e:c2:23:74:
b1:5c:58:45:a4:20:6d:86:5b:bd:f3:5c:af:63:41:08:21:77:
b9:ab:35:18:63:08:1d:86:45:b5:9b:4a:46:22:19:17:87:48:
d8:6a:56:fe:55:6f:eb:10:4e:28:8c:8f:b5:93:d4:e7:66:2e:
56:0a:17:ac:a8:6f:24:6a:a7:4d:9f:ec:86:74:57:28:54:a3:
ff:d2:0e:94:93:a1:ee:54:85:37:21:d4:41:d9:d7:ac:46:b4:
eb:f3:0a:7a:bf:56:3d:90:3a:bc:ed:c7:12:27:33:2c:8d:08:
84:10:69:f4:29:50:ec:c2:41:86:e0:2f:7e:d7:13:34:22:b1:
31:20:cc:40:fb:e4:e3:5f:43:55:cf:ac:74:1b:8b:d6:fa:e7:
7e:25:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:02:33 2026 by rpki-client