Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: BPI+gPdawTcLNflRWcsFZseYoZNXm1nxbeKSZOH2nRw=
Subject key identifier: 46:C7:14:29:BA:14:E1:A5:15:1B:00:5D:09:31:3D:B8:A7:34:14:47
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019F8643CA8656AAEC0AC854E36B339FB631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 0116
Signing time: Tue 21 Jul 2026 20:00:17 +0000
Manifest this update: Tue 21 Jul 2026 20:00:17 +0000
Manifest next update: Wed 22 Jul 2026 20:00:17 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: xc0GWrTxNfRdgYOwIKJeY85UAb5xt7QIMTYEBPWnb1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:ca:86:56:aa:ec:0a:c8:54:e3:6b:33:9f:b6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Jul 21 20:00:17 2026 GMT
Not After : Jul 22 20:00:17 2026 GMT
Subject: CN=46c71429ba14e1a5151b005d09313db8a7341447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:71:b2:40:00:79:c8:d5:27:3b:83:51:95:
92:bc:eb:4e:a6:17:32:a8:56:fa:ef:62:a2:b0:dd:
c8:9f:da:d4:bf:3f:3e:82:4e:a5:42:02:fd:48:01:
10:f8:42:9a:8d:20:35:ef:11:d0:da:dc:de:69:67:
ba:5c:bf:24:9a:fd:92:15:a3:b7:fc:e3:24:e8:fb:
96:00:bb:74:d1:8b:a4:e7:dc:28:c0:e8:18:4a:9a:
b7:cc:10:26:b6:0d:79:3c:c9:94:fa:17:d4:2d:03:
0c:b9:bd:5a:eb:cf:a9:84:50:e7:29:37:f5:07:ab:
0b:fe:3c:5d:23:7a:f5:84:e1:dd:ec:50:9b:32:e3:
58:86:fc:b0:8e:27:56:c0:b8:44:19:26:59:2a:dc:
32:58:a7:9e:16:e4:82:8d:dd:71:fe:93:e4:56:28:
62:4d:37:c4:15:d1:e9:ff:cb:7a:3c:64:87:1c:15:
68:b0:69:07:d6:e5:dc:bd:6d:38:d2:b0:04:25:e2:
55:f8:e5:c4:92:07:e6:21:c7:88:a7:9b:b0:1f:c6:
98:a2:ae:ba:8f:68:b6:eb:0c:cb:42:59:c8:69:b3:
07:ca:67:21:25:16:a5:ff:82:63:f1:41:aa:f7:ec:
e1:65:4f:cc:04:5b:b6:1d:c3:f6:62:6b:65:d1:65:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:14:29:BA:14:E1:A5:15:1B:00:5D:09:31:3D:B8:A7:34:14:47
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:aa:21:d9:2d:57:14:dc:c3:7b:7b:6f:62:e9:7c:77:5e:
1c:69:2d:be:f7:41:71:55:da:1c:35:48:da:64:f8:ed:6f:3a:
8d:22:64:f8:3a:e4:81:be:1e:fb:fc:b8:99:d1:a1:57:34:39:
60:89:9c:d4:0d:e3:2f:e3:90:7c:a0:b8:69:d5:d8:b6:ec:4f:
79:98:aa:a5:50:fc:62:13:74:cf:bd:be:8b:1b:26:04:d2:01:
96:76:89:1b:1f:53:e4:a5:6c:b4:d6:1f:8c:b2:af:67:95:4d:
3b:4b:d5:b4:58:d3:38:3f:26:f0:0b:ed:0a:54:b8:7e:48:37:
6d:68:11:15:30:74:ca:69:db:4b:09:b2:7d:61:8b:48:53:ce:
e0:4e:5b:a3:16:86:a7:05:47:a2:fa:f1:70:f3:71:e9:b9:10:
47:40:f2:13:20:cd:26:28:84:9b:31:3d:c9:62:12:fb:b8:0e:
28:5a:68:2c:b7:de:04:bb:a7:5e:e4:2d:df:ea:66:83:ec:4a:
5d:8f:66:78:f5:bc:bd:9c:54:35:9f:dc:c9:0a:3e:8e:73:3d:
7d:9f:83:5c:ab:13:ea:98:fd:93:d3:12:aa:90:65:55:61:6a:
3e:d1:81:8e:f4:3e:d1:06:0f:a8:30:e1:ed:d9:96:22:53:6c:
bc:df:cd:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GQ8qGVqrsCshU42szn7YxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzMzZDFjMjk0YzhiNmJhY2M1ZWRlMjQzZGVhYmQ1MzIz
MWRiZjcwHhcNMjYwNzIxMjAwMDE3WhcNMjYwNzIyMjAwMDE3WjAzMTEwLwYDVQQD
Eyg0NmM3MTQyOWJhMTRlMWE1MTUxYjAwNWQwOTMxM2RiOGE3MzQxNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dxxskAAecjVJzuDUZWSvOtOphcy
qFb672KisN3In9rUvz8+gk6lQgL9SAEQ+EKajSA17xHQ2tzeaWe6XL8kmv2SFaO3
/OMk6PuWALt00Yuk59wowOgYSpq3zBAmtg15PMmU+hfULQMMub1a68+phFDnKTf1
B6sL/jxdI3r1hOHd7FCbMuNYhvywjidWwLhEGSZZKtwyWKeeFuSCjd1x/pPkVihi
TTfEFdHp/8t6PGSHHBVosGkH1uXcvW040rAEJeJV+OXEkgfmIceIp5uwH8aYoq66
j2i26wzLQlnIabMHymchJRal/4Jj8UGq9+zhZU/MBFu2HcP2Ymtl0WVhxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbHFCm6FOGlFRsAXQkxPbinNBRHMB8GA1UdIwQY
MBaAFMUzPRwpTItrrMXt4kPeq9UyMdv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jNzZjODgtMGVkYi00NWRiLWEwMjMt
ZDI0OGQ5OTQ0NDA0LzEveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jNzZjODgtMGVkYi00NWRiLWEwMjMtZDI0OGQ5OTQ0NDA0
LzEveFRNOUhDbE1pMnVzeGUzaVE5NnIxVEl4Ml9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElqqIdkt
VxTcw3t7b2LpfHdeHGktvvdBcVXaHDVI2mT47W86jSJk+Drkgb4e+/y4mdGhVzQ5
YImc1A3jL+OQfKC4adXYtuxPeZiqpVD8YhN0z72+ixsmBNIBlnaJGx9T5KVstNYf
jLKvZ5VNO0vVtFjTOD8m8AvtClS4fkg3bWgRFTB0ymnbSwmyfWGLSFPO4E5boxaG
pwVHovrxcPNx6bkQR0DyEyDNJiiEmzE9yWIS+7gOKFpoLLfeBLunXuQt3+pmg+xK
XY9mePW8vZxUNZ/cyQo+jnM9fZ+DXKsT6pj9k9MSqpBlVWFqPtGBjvQ+0QYPqDDh
7dmWIlNsvN/NZw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:07:12 2026 by rpki-client