
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: SHTxyuM0bZ9Z5UK5MidWZmaqvRKuNtH5k9CQK4SeVoc=
Subject key identifier: DE:EC:7C:4A:E9:38:FB:08:08:C0:B2:47:09:EA:4E:32:6E:C8:0D:1E
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 01A08C43D165AE25D32BCF41EEC75A09067A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 17:00:49 +0000
Manifest this update: Thu 10 Sep 2026 17:00:49 +0000
Manifest next update: Fri 11 Sep 2026 17:00:49 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: caESTKn1hMfiWcsw/XB4TCoosHF5nF6rwiu2HEhSN+0=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:d1:65:ae:25:d3:2b:cf:41:ee:c7:5a:09:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Sep 10 17:00:49 2026 GMT
Not After : Sep 11 17:00:49 2026 GMT
Subject: CN=deec7c4ae938fb0808c0b24709ea4e326ec80d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:cb:1a:5d:e0:d4:44:d5:65:a2:13:4e:b1:
df:37:a7:37:fb:b4:b2:95:46:f1:a6:1c:90:17:0f:
5c:68:e0:6e:76:8e:74:18:df:0b:56:3e:85:63:86:
0f:52:e9:ff:03:9c:e1:07:5f:1d:25:cc:3c:a3:c7:
c3:93:63:19:b5:cd:c2:d9:ab:7b:b4:67:86:14:19:
6b:ac:53:fe:81:88:4a:b1:2b:8c:50:29:0a:3a:de:
e6:aa:ec:81:3d:f8:03:90:59:69:85:0c:7b:08:07:
cf:0f:2b:79:72:51:39:62:48:c2:57:a0:e8:79:43:
a6:1d:9f:66:82:5f:98:cf:93:5a:20:5a:38:64:15:
99:5d:c8:1c:b1:d7:2e:96:f8:a6:c0:1f:4e:0f:63:
de:06:aa:83:81:1f:e5:d1:2e:f4:8e:3a:94:7a:0b:
df:c4:9b:7b:73:c6:32:bf:f0:f5:14:f2:ee:98:d8:
1b:dc:e0:29:cd:50:4e:18:90:80:f2:f7:05:a4:91:
c9:65:e8:46:2b:65:ce:db:60:a5:ed:f1:4f:65:ce:
26:04:15:8d:8f:27:fe:6d:53:46:08:90:29:13:c5:
43:54:e6:02:76:58:87:cc:93:b9:02:88:3f:83:c2:
a7:ef:32:3e:e4:e9:7b:03:66:b9:7d:d9:a9:da:0d:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EC:7C:4A:E9:38:FB:08:08:C0:B2:47:09:EA:4E:32:6E:C8:0D:1E
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a4:ed:51:d3:e0:4e:e4:37:b3:b3:bf:05:38:92:c7:46:e9:
c3:f6:e2:fc:34:15:62:67:86:46:d7:8e:24:a8:0a:46:91:b6:
b9:70:51:96:ea:16:f6:f0:25:8d:95:f0:7e:09:78:de:60:00:
7a:10:1b:86:9c:44:d6:fe:1a:b7:c7:40:20:e5:f3:44:0a:06:
27:91:45:e1:08:6f:5f:22:a4:78:03:7b:f6:9a:eb:29:f7:5a:
69:2d:d4:33:10:98:22:1f:21:95:c2:e6:b6:8b:03:73:b3:62:
13:9b:d5:01:85:7d:03:b4:cc:c5:eb:ab:e9:f4:92:1b:f3:e5:
0e:29:57:8a:7e:c4:a6:d7:89:0a:b5:38:58:3e:58:c1:24:52:
88:cf:4b:5d:2d:14:c1:ec:61:f4:55:2e:42:82:8e:e9:e0:24:
b4:12:f1:5c:dd:25:55:69:b9:bf:81:3e:77:e7:d4:38:15:7c:
10:c9:69:9e:1e:4b:af:d2:c9:b9:5c:83:23:03:58:dc:5c:6a:
48:c9:2c:d9:66:e0:c4:f8:59:e2:24:44:f9:7b:9b:a0:69:52:
d6:48:53:63:b6:70:4d:1b:5d:36:88:52:7a:99:f9:7b:8c:75:
67:40:17:9c:f3:70:84:f0:a5:74:4c:70:5d:4d:ea:92:e8:ee:
46:7d:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:12 2026 by rpki-client