Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: 6dMpcwb5hITUDfA14YJNVqKdjo7f9wcCu+3Ymx8adzQ=
Subject key identifier: 64:CC:79:45:90:F1:FC:63:98:06:FC:53:3C:C9:84:2F:8E:50:39:85
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019E9AA93A7D18B09456E59672AB79300939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 9C
Signing time: Sat 06 Jun 2026 02:00:42 +0000
Manifest this update: Sat 06 Jun 2026 02:00:42 +0000
Manifest next update: Sun 07 Jun 2026 02:00:42 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: 7MWYDmGe4PITVOEhmMCVZJsnm9smsCAp60+fopvc2/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:3a:7d:18:b0:94:56:e5:96:72:ab:79:30:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Jun 6 02:00:42 2026 GMT
Not After : Jun 7 02:00:42 2026 GMT
Subject: CN=64cc794590f1fc639806fc533cc9842f8e503985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:53:cd:c9:ed:3e:32:c7:c2:f3:aa:0b:ad:
75:6e:52:e8:be:36:5f:9b:1b:ca:8e:ec:e3:2a:80:
0b:b2:cc:54:9d:44:c8:f5:9b:fa:56:d4:d4:91:bf:
f1:16:54:f7:6b:26:40:31:38:fd:03:40:af:7d:ed:
7c:e5:6f:49:7a:dc:09:69:53:73:11:c7:3d:5a:17:
b2:c1:65:66:15:c3:b7:fb:41:bc:7b:33:9a:e7:5e:
75:b4:30:54:8e:1e:70:5e:19:93:f4:60:24:d5:0c:
e8:a8:64:25:e3:8b:c2:ff:8f:36:32:32:4b:f7:0d:
ee:e5:8e:af:4d:ac:4c:22:46:83:22:ea:3a:98:7d:
ae:73:f7:05:f3:b1:ab:c8:0c:f2:f6:e2:31:91:b6:
79:49:b7:ef:f3:29:70:c3:af:d5:33:9a:6e:82:d9:
5e:8e:2f:51:96:28:72:ea:a9:6d:ed:b8:13:05:20:
71:a3:4e:42:04:09:ce:72:5f:aa:8c:7d:42:fb:86:
d9:1f:32:36:a5:c3:4b:52:53:99:d6:2c:f8:1e:b9:
a0:4d:27:cc:25:1b:34:c3:e5:29:31:66:4c:db:89:
20:e5:1d:45:39:e6:75:9e:ce:7b:7b:c8:86:50:b6:
ed:15:fe:ef:65:ef:e3:0a:64:ed:fa:52:fc:5c:64:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:79:45:90:F1:FC:63:98:06:FC:53:3C:C9:84:2F:8E:50:39:85
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:23:32:79:4b:5b:15:78:dc:66:26:d2:6a:2f:5c:97:84:09:
b2:71:3a:0f:18:ec:25:aa:11:a1:1d:01:05:45:e2:02:2f:f9:
05:0b:e3:d1:ad:23:14:c0:2b:b8:4b:36:db:0b:56:20:5f:9b:
07:3e:c0:84:a0:8e:39:ec:af:a1:df:9a:d2:a4:ed:d8:51:fd:
9b:ca:ec:c8:2b:f3:02:65:ae:11:b5:99:49:a7:85:5c:16:0e:
87:82:36:1a:d9:45:e4:2b:4c:a3:61:2e:c0:13:15:e1:f7:8f:
65:db:e6:4a:ae:89:2c:34:e8:b6:05:9e:2a:07:0b:41:23:0c:
ea:cb:96:15:ab:75:17:87:81:15:68:21:10:a8:8a:ab:ae:ac:
2e:38:c2:fc:33:b3:ee:fa:32:c0:d0:95:52:90:bb:3c:81:01:
b1:49:b7:0b:55:da:89:6e:07:e7:6e:02:d3:82:d9:09:47:c0:
32:bf:95:80:ae:be:ad:e5:54:81:c6:6f:43:0e:07:27:0d:91:
ef:8e:92:c8:ac:c7:a2:a7:af:a4:1e:1b:26:8d:19:39:cf:37:
4f:20:e1:91:c2:39:65:89:a1:75:eb:98:d0:bc:37:0c:e4:5c:
12:00:9f:f9:85:21:4d:7a:f0:24:81:e8:77:cb:2c:01:c8:8d:
b3:a0:92:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aqTp9GLCUVuWWcqt5MAk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzMzZDFjMjk0YzhiNmJhY2M1ZWRlMjQzZGVhYmQ1MzIz
MWRiZjcwHhcNMjYwNjA2MDIwMDQyWhcNMjYwNjA3MDIwMDQyWjAzMTEwLwYDVQQD
Eyg2NGNjNzk0NTkwZjFmYzYzOTgwNmZjNTMzY2M5ODQyZjhlNTAzOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/hTzcntPjLHwvOqC611blLovjZf
mxvKjuzjKoALssxUnUTI9Zv6VtTUkb/xFlT3ayZAMTj9A0Cvfe185W9JetwJaVNz
Ecc9WheywWVmFcO3+0G8ezOa5151tDBUjh5wXhmT9GAk1QzoqGQl44vC/482MjJL
9w3u5Y6vTaxMIkaDIuo6mH2uc/cF87GryAzy9uIxkbZ5Sbfv8ylww6/VM5pugtle
ji9Rlihy6qlt7bgTBSBxo05CBAnOcl+qjH1C+4bZHzI2pcNLUlOZ1iz4HrmgTSfM
JRs0w+UpMWZM24kg5R1FOeZ1ns57e8iGULbtFf7vZe/jCmTt+lL8XGTHdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTMeUWQ8fxjmAb8UzzJhC+OUDmFMB8GA1UdIwQY
MBaAFMUzPRwpTItrrMXt4kPeq9UyMdv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jNzZjODgtMGVkYi00NWRiLWEwMjMt
ZDI0OGQ5OTQ0NDA0LzEveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jNzZjODgtMGVkYi00NWRiLWEwMjMtZDI0OGQ5OTQ0NDA0
LzEveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSMyeUtb
FXjcZibSai9cl4QJsnE6DxjsJaoRoR0BBUXiAi/5BQvj0a0jFMAruEs22wtWIF+b
Bz7AhKCOOeyvod+a0qTt2FH9m8rsyCvzAmWuEbWZSaeFXBYOh4I2GtlF5CtMo2Eu
wBMV4fePZdvmSq6JLDTotgWeKgcLQSMM6suWFat1F4eBFWghEKiKq66sLjjC/DOz
7voywNCVUpC7PIEBsUm3C1XaiW4H524C04LZCUfAMr+VgK6+reVUgcZvQw4HJw2R
746SyKzHoqevpB4bJo0ZOc83TyDhkcI5ZYmhdeuY0Lw3DORcEgCf+YUhTXrwJIHo
d8ssAciNs6CSng==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:12:17 2026 by rpki-client