Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: jhCVUsW1+DaWCL0U7sGIaLpKnSX7+06DyKTCECpsZXc=
Subject key identifier: A5:09:9C:C9:66:90:5C:BD:8E:DB:CD:16:EA:B8:DA:4A:33:5C:88:B1
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 01A06E036C066969FA802B6F1513353C6FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 018E
Signing time: Fri 04 Sep 2026 20:01:52 +0000
Manifest this update: Fri 04 Sep 2026 20:01:52 +0000
Manifest next update: Sat 05 Sep 2026 20:01:52 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: oEIi3ac+QeF5Rw5aEfCMZ48BAL6Pal8fH6Zx1xnVtm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:6c:06:69:69:fa:80:2b:6f:15:13:35:3c:6f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Sep 4 20:01:52 2026 GMT
Not After : Sep 5 20:01:52 2026 GMT
Subject: CN=a5099cc966905cbd8edbcd16eab8da4a335c88b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:d8:13:76:58:ca:56:04:d4:80:39:0e:f6:
3e:39:95:6d:69:78:0d:2f:1d:5a:97:25:b4:84:b3:
e5:8a:da:d1:9f:3f:d6:2c:02:65:2a:56:7e:8b:17:
d3:8f:a9:8e:f1:35:0d:fe:24:74:c3:3c:4e:61:bc:
fd:e3:43:b1:53:6b:39:dc:80:a1:7b:47:0e:dc:06:
72:91:9b:b2:fb:ee:15:cc:2e:d5:2d:ab:87:7d:6e:
2b:d2:b0:c3:f3:fb:48:da:65:ec:43:db:e3:a9:e3:
62:2c:55:98:7e:cd:2c:57:93:3f:b4:23:57:bd:dc:
a1:dc:c8:7b:68:98:d8:a0:15:99:30:3d:76:ac:d3:
7e:0c:ff:04:ec:f7:80:69:3d:3c:24:80:8c:ad:cd:
39:75:a3:91:63:25:60:8b:03:41:a8:91:13:43:b3:
d9:d1:86:a7:82:5e:00:44:5d:e5:09:b4:9f:de:45:
40:62:82:c8:76:96:60:4b:15:54:d7:43:20:d6:58:
89:73:aa:4d:43:0f:a0:f8:15:06:38:f4:98:37:e5:
7b:54:3f:25:aa:21:6a:f2:5f:67:1a:4f:83:52:86:
95:71:c9:b7:f5:58:5c:ff:6f:02:50:07:53:2b:f4:
27:c8:cf:bf:27:50:d9:42:9d:7e:c4:02:36:30:13:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:9C:C9:66:90:5C:BD:8E:DB:CD:16:EA:B8:DA:4A:33:5C:88:B1
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:8d:44:54:bf:4c:30:7c:45:e5:29:08:f8:6d:e1:f9:0d:34:
5e:12:56:59:ec:c8:92:5b:9b:37:97:f6:0f:8e:9c:ad:2c:6e:
5e:b1:bf:42:f4:ab:6d:3c:16:34:6d:6f:ef:52:1b:c7:d2:fb:
16:4a:56:d0:b8:9c:ef:7d:d9:89:d1:0c:6c:48:39:ba:df:a8:
65:dc:6a:7e:9d:0a:52:e1:d8:c9:b3:df:59:65:2e:a2:ca:18:
3a:ba:ea:e0:90:fd:2d:bc:d0:41:c1:1e:3d:17:7a:3c:ab:90:
97:c3:5d:56:89:7d:bc:28:3f:23:c0:0d:98:5f:d6:58:05:ae:
e1:ad:ee:49:d1:fd:2d:aa:9d:14:30:39:90:75:73:29:7c:15:
a4:db:44:90:56:97:e9:b8:78:9e:32:33:2e:b3:35:6e:aa:f1:
1f:aa:ab:b7:de:bf:a7:41:82:6a:d0:03:7a:4a:77:27:55:a8:
54:80:b4:57:26:87:18:66:8f:bc:d9:6c:8f:b0:7e:75:46:18:
63:68:f4:20:55:7a:43:30:05:7a:f7:4d:36:e5:6c:48:e6:84:
c6:64:5e:6a:60:9c:96:a5:ac:99:35:e8:58:51:21:13:da:7f:
f8:6e:55:94:fb:4f:4c:86:2a:a9:2b:94:1a:7d:7e:7c:62:79:
a6:f8:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:28 2026 by rpki-client