Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: PNsyt61U0BDx0Uo8NOlLAN3dsK1GX0qtYRVloa+h/Og=
Subject key identifier: 7D:DF:00:F2:DB:B1:41:95:19:3F:2C:3E:38:1B:4E:0B:D7:8C:67:6F
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019EBF5A4045A0D358BC8BD62AD37270BA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: AF
Signing time: Sat 13 Jun 2026 05:00:23 +0000
Manifest this update: Sat 13 Jun 2026 05:00:23 +0000
Manifest next update: Sun 14 Jun 2026 05:00:23 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: lhM44c1RCvPXkzEKZxjuwGx95lYaA6CnLm6SFst0vFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:40:45:a0:d3:58:bc:8b:d6:2a:d3:72:70:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Jun 13 05:00:23 2026 GMT
Not After : Jun 14 05:00:23 2026 GMT
Subject: CN=7ddf00f2dbb14195193f2c3e381b4e0bd78c676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:87:25:97:1c:22:ed:40:7c:4b:8f:22:bc:
cb:a1:56:b0:c8:54:8c:fb:9d:4f:11:f2:83:17:3a:
87:f7:04:bb:24:87:a9:64:40:d4:73:36:e2:99:a2:
9f:3b:c1:46:33:aa:e5:27:a2:3a:49:e1:9d:4d:65:
ce:4b:84:06:45:93:d7:ed:09:6c:5d:c2:c0:9c:82:
f3:63:64:a8:0d:0d:f7:e0:b8:24:36:24:15:14:40:
bc:51:d1:7b:ad:b7:d3:fb:3f:b5:2d:76:c7:b9:2d:
2b:20:60:5e:94:4b:b0:03:59:6e:0f:d9:f2:d8:26:
80:6f:cb:8f:df:9c:28:13:2c:3d:e9:65:90:04:2d:
7b:72:70:d5:96:0e:56:10:1e:de:01:5b:1b:72:fe:
d7:61:fd:0a:e9:23:4e:36:9e:12:09:10:e8:c2:ae:
f7:38:48:75:63:41:7e:51:c9:b6:d7:e1:0c:17:bd:
7c:36:aa:5c:6c:f3:bd:9f:d4:fe:38:d4:d1:26:50:
e6:2d:4c:e9:b7:6c:76:67:c7:7b:55:f6:c7:7c:b5:
bc:b4:f7:dc:f1:07:57:99:0a:55:01:61:9b:f1:9f:
e5:17:98:92:5e:41:fa:ba:16:de:3e:c3:d6:c3:5f:
a2:a1:32:13:6e:ac:d1:27:4b:26:13:c9:f6:bc:33:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:00:F2:DB:B1:41:95:19:3F:2C:3E:38:1B:4E:0B:D7:8C:67:6F
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b8:1d:96:1c:d4:fb:0d:37:74:e4:6d:1f:96:9a:c9:72:b3:
47:ba:a9:76:77:c1:8e:60:74:f7:9e:1a:39:c4:ce:8e:51:5d:
d9:bb:e9:0d:6d:1b:27:4f:b1:aa:37:c5:a3:d1:16:77:1b:b2:
3e:2c:78:52:7b:a9:53:99:a5:83:f0:99:84:98:c7:97:d0:ab:
45:8a:c7:d5:7a:7a:57:f8:32:9b:62:c2:bd:f2:58:af:82:60:
4d:78:2c:a4:5d:4d:34:8e:a3:c4:72:4a:f9:bb:cf:66:56:1f:
38:ad:79:2d:6c:63:ba:b9:a2:58:63:46:52:a4:20:5d:1a:5b:
7e:00:46:4d:3a:d6:23:3e:11:42:dc:1e:67:f8:62:b4:b5:55:
7b:67:f4:c1:ca:b9:99:e5:2e:44:40:d9:31:cf:9c:4b:11:97:
50:c7:61:5f:11:3f:36:4c:ad:fa:10:a8:ce:ab:7a:38:c2:02:
68:a1:2a:5c:5d:0c:b4:53:79:eb:9d:9c:f1:6c:ad:f2:92:5c:
e9:f0:69:1c:74:07:8e:58:a4:bd:ba:36:19:d6:82:9a:d2:87:
bb:3b:dd:0a:6f:68:d8:a1:34:07:d5:d5:c1:5e:ef:81:31:e8:
58:ae:55:04:9c:b0:3d:e0:9d:f3:59:f7:4d:6e:df:0b:2d:c1:
50:ab:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:35 2026 by rpki-client