Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: oYKgYNT2yRg7MrUv5ch29sNEXI7ujux0YEy6yireJgA=
Subject key identifier: 8F:BF:FC:2D:98:F0:18:5B:16:31:97:E8:0E:AA:46:6D:97:3B:28:F7
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 01A178834AA0660DD815AB85926459A650CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 0218
Signing time: Mon 26 Oct 2026 14:00:32 +0000
Manifest this update: Mon 26 Oct 2026 14:00:32 +0000
Manifest next update: Tue 27 Oct 2026 14:00:32 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: XnkKVexAciHQkRUoOsGrnxwtRcvgw82kJNpwXBioMdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:4a:a0:66:0d:d8:15:ab:85:92:64:59:a6:50:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Oct 26 14:00:32 2026 GMT
Not After : Oct 27 14:00:32 2026 GMT
Subject: CN=8fbffc2d98f0185b163197e80eaa466d973b28f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:32:1c:63:74:0e:03:cd:23:9a:80:19:5c:
a1:56:dd:6b:cc:99:d4:c0:ff:3b:a5:b4:d0:c9:3b:
3a:ea:97:92:01:41:95:ac:c9:ef:8e:c8:c6:0e:b4:
8d:d6:dc:eb:3e:29:dd:76:33:88:93:bb:f4:88:f4:
4c:ef:89:41:c7:67:f5:d9:d1:05:c7:70:1f:78:28:
d6:c2:4a:3f:74:c3:94:9e:42:f7:94:19:47:11:04:
ee:9b:f8:02:9b:2e:d2:15:ed:97:a1:c6:17:55:46:
16:40:44:29:8b:dd:54:35:46:e1:b0:c1:8a:dc:df:
7b:ba:ef:86:5a:4e:51:ae:91:24:8b:d8:ca:dd:a1:
62:c0:d0:f2:9f:5c:75:ef:7c:30:b4:69:4a:d2:95:
6b:7c:d7:3c:2f:d5:31:6c:10:7b:55:d4:f7:ae:74:
81:3d:8b:d1:7f:82:70:10:d8:10:51:0d:08:82:d6:
10:ba:46:4d:37:ff:dc:1e:21:5b:91:fc:03:e7:00:
7c:0e:e8:13:65:c6:fb:84:01:91:22:66:81:f7:64:
0d:ab:a0:f6:63:ab:3e:0b:24:9e:f1:0b:59:0f:16:
79:73:e1:f0:fe:e9:2c:44:fe:1f:cd:a0:ab:55:d4:
1a:f5:69:27:dc:8e:b7:85:20:ca:1c:11:a7:05:5e:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:FC:2D:98:F0:18:5B:16:31:97:E8:0E:AA:46:6D:97:3B:28:F7
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f4:06:a3:21:02:01:4f:2e:a6:d8:32:3a:a0:f7:5c:13:c0:
f9:31:fc:b3:d6:59:aa:95:16:c1:9c:12:af:0d:98:ba:1f:a5:
58:0f:9f:5b:dd:09:f8:20:d7:f9:37:d7:da:e2:d1:a8:f3:25:
fa:c9:cf:84:52:23:6c:7b:b5:87:60:97:aa:f8:28:0b:08:55:
a5:92:cf:45:bc:81:5d:43:3e:26:be:ac:e3:80:8d:f9:5f:02:
b8:e6:77:7b:e9:c3:fd:2e:38:65:fe:b6:c1:9b:be:18:47:22:
ef:4d:89:84:51:a3:43:6b:f9:c6:87:f5:45:88:15:a9:7c:18:
08:16:14:58:79:ad:37:b9:52:66:2a:bd:14:b3:d0:92:bc:c2:
2a:6e:fe:40:c6:35:1f:99:ee:c1:ea:e5:25:04:89:21:77:e7:
18:71:59:f3:97:4e:82:b3:82:39:9d:e5:7a:ec:99:6b:c3:ca:
ef:a8:1f:c5:2c:95:db:ce:2c:ad:77:fc:92:f9:1d:59:36:70:
a0:87:49:3a:06:b2:15:48:56:72:be:bf:4d:61:b2:95:a1:b3:
38:b8:64:c1:1c:f5:6e:83:14:3b:c3:33:9d:f6:d5:9f:e5:d2:
2c:b3:95:5c:b6:69:d9:a0:fa:4f:16:17:7d:37:36:a6:03:e1:
5f:71:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:10:53 2026 by rpki-client