Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: HVg64am6Me9G5hvGVXD1KoFj5NejNsD2YsMPKIURnic=
Subject key identifier: A5:B7:A1:D4:95:E7:60:04:77:81:C1:DD:23:D9:EE:6E:73:19:F8:2D
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019DA566E5DF265A14286A0DA726F7CD4A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 1D
Signing time: Sun 19 Apr 2026 11:01:17 +0000
Manifest this update: Sun 19 Apr 2026 11:01:17 +0000
Manifest next update: Mon 20 Apr 2026 11:01:17 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: FJd3qAUdRr7xgtnfZmAq9/QIiQ/0z2MUIuywdzPwQ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:e5:df:26:5a:14:28:6a:0d:a7:26:f7:cd:4a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Apr 19 11:01:17 2026 GMT
Not After : Apr 20 11:01:17 2026 GMT
Subject: CN=a5b7a1d495e760047781c1dd23d9ee6e7319f82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:50:fe:b5:91:8a:df:8c:7e:04:97:05:55:
97:78:2b:5c:47:06:d7:69:b7:7c:62:f9:47:21:00:
9e:b6:6b:dc:ad:1e:2b:bc:48:fb:43:ac:05:0b:af:
fa:f0:b8:0b:a6:5d:cd:5b:4c:76:e3:5f:3e:6b:49:
37:d3:16:a3:68:2c:d5:c7:98:03:7a:47:06:5a:3d:
2a:ac:e8:4a:ab:b4:5e:dc:d2:7e:8e:81:68:b2:4e:
af:07:b2:ed:24:f3:8f:c4:f1:d4:e7:91:d1:77:6b:
4f:e6:70:3f:d0:ef:8a:d0:da:a5:0d:32:1e:3d:74:
2c:8d:12:67:e7:5c:b5:d2:a3:6b:98:38:91:22:e6:
7c:98:16:53:ea:67:2e:03:ef:49:da:79:0c:c4:ad:
b3:67:9c:2e:f5:a5:99:53:a1:aa:85:b5:a8:e4:a2:
6d:7d:d5:70:07:e4:2c:c3:5c:31:cd:c4:42:70:dd:
22:dd:c8:03:f5:3d:d8:66:a2:09:3a:45:fb:f9:d3:
fb:03:3c:aa:0c:57:c9:22:25:4f:1d:15:36:ae:31:
12:fa:bc:f1:7e:18:c4:bd:df:6a:46:2b:08:43:b0:
29:da:76:7d:a6:5d:c7:03:e9:f7:3d:22:84:f7:0e:
20:b8:7a:be:d7:de:3a:57:af:8a:9c:4a:86:fd:7e:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:A1:D4:95:E7:60:04:77:81:C1:DD:23:D9:EE:6E:73:19:F8:2D
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:f1:28:d6:c0:ba:4b:4f:60:a8:00:2d:a0:75:65:38:be:
73:0f:3a:4e:04:06:ef:b3:da:55:40:f8:26:38:a7:ba:80:62:
ff:70:9a:31:b4:0e:bc:e1:d2:8e:5c:6b:61:e1:3f:52:20:17:
04:8d:8c:1c:f6:0e:01:cc:71:f0:3a:59:78:43:b4:2f:ae:05:
45:00:1d:8f:d0:47:2c:2b:9e:2e:4c:22:7f:00:6e:ab:4f:93:
f8:af:8a:f6:7b:34:d0:29:ba:7d:2d:82:8d:99:87:91:26:76:
19:ce:a7:7c:ad:ab:fb:0e:cd:47:cb:09:31:cc:44:9f:76:07:
e3:46:84:da:29:1f:c7:98:9f:26:f6:f7:9e:f1:3f:dd:e6:c9:
0a:86:df:c9:16:1a:25:f1:aa:f0:c6:dd:8c:58:26:1f:7f:33:
d5:a1:68:ac:67:96:71:27:0a:a7:d8:31:42:16:13:75:33:41:
3d:48:65:6b:7a:19:f1:9f:79:2d:f1:e3:2f:ce:44:dc:ed:64:
78:78:22:a2:9e:83:f9:ad:2f:f8:51:d3:d6:b5:d5:37:e3:13:
f9:c0:3f:2a:a6:de:82:fd:61:92:e4:21:1b:e7:d1:6c:6b:ee:
c6:86:cb:82:c5:7b:7c:be:84:a3:90:91:b0:43:c0:54:f1:58:
02:80:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:38 2026 by rpki-client