Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
File: xTM9HClMi2usxe3iQ96r1TIx2_c.mft (raw, json)
Hash identifier: jD2ia7gAFtMjjDLBElJTYNfEwZjObLbLmWRC45NRglM=
Subject key identifier: BB:4F:24:C0:F5:A2:51:6B:F1:1B:94:9D:4C:34:36:BE:84:FE:E2:B9
Authority key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Certificate issuer: /CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Certificate serial: 019DB0FCCE9AA969BB351C9711599674E492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
Manifest number: 23
Signing time: Tue 21 Apr 2026 17:00:50 +0000
Manifest this update: Tue 21 Apr 2026 17:00:50 +0000
Manifest next update: Wed 22 Apr 2026 17:00:50 +0000
Files and hashes: 1: eizuLEY1urx3aSnIhqEymsiH6MQ.asa (hash: XK8TSZqyILkyJeceXis5FA8SxeSnkQDiUO5T48Zvef4=)
2: xTM9HClMi2usxe3iQ96r1TIx2_c.crl (hash: 5x0ES73Mv2UyvG1F9tEYzQuVeonQQ4ic7iJafenyxXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fc:ce:9a:a9:69:bb:35:1c:97:11:59:96:74:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Validity
Not Before: Apr 21 17:00:50 2026 GMT
Not After : Apr 22 17:00:50 2026 GMT
Subject: CN=bb4f24c0f5a2516bf11b949d4c3436be84fee2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:50:e4:9b:73:b1:5a:1d:71:dd:da:fa:45:
dc:c5:9c:05:76:3d:d9:dc:fc:51:0a:7e:72:08:94:
12:5d:18:47:5b:08:a0:00:82:c1:1b:a8:59:c3:01:
f2:a7:de:b3:fa:fa:6b:98:6b:7a:0b:4e:5b:e4:e6:
63:ea:52:60:20:29:36:e2:dc:19:0a:a1:0e:51:bd:
aa:0c:48:c3:9d:ea:33:67:34:06:1a:be:4e:4a:90:
c0:0c:7e:96:ae:a5:a9:e9:e8:e1:53:40:be:4e:e8:
d5:16:64:c1:8d:29:02:c8:b9:09:39:cd:2b:fb:f2:
db:68:68:61:ec:b7:71:08:19:0e:7f:7e:6d:8c:41:
cc:97:f1:3a:08:4b:d8:5e:00:c1:df:24:56:8d:f2:
19:0e:35:02:95:3b:25:9c:ea:be:d1:13:6e:bc:e9:
1e:4b:1f:ec:47:65:18:b1:df:9d:2b:b2:6c:95:ed:
5b:8b:81:f7:39:14:9f:78:f0:6d:36:db:e6:88:06:
c5:fa:1e:09:a0:31:23:96:af:dd:d0:2d:80:4e:85:
03:48:2c:ba:15:b0:f8:9f:77:13:2f:33:2b:86:dc:
07:05:63:fe:f5:77:16:4c:19:ba:b0:3c:82:b1:2c:
ec:e8:ff:c4:a0:1e:60:d7:7e:3d:64:91:30:6f:d6:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4F:24:C0:F5:A2:51:6B:F1:1B:94:9D:4C:34:36:BE:84:FE:E2:B9
X509v3 Authority Key Identifier:
keyid:C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1e:fb:66:c8:8c:ba:47:95:8a:49:82:9d:bb:2f:b0:bb:b2:
aa:52:1f:61:85:f9:dc:af:ef:80:f6:cb:23:b1:5c:2a:32:1f:
8f:db:36:4b:cb:23:5c:e8:fd:09:39:b6:54:92:85:76:9c:62:
53:3d:52:29:7c:63:5a:47:3a:b8:9c:c2:9d:ec:73:ea:97:04:
c3:43:77:73:80:96:9d:67:9d:9b:27:c3:e8:66:ba:e5:ee:76:
99:2c:30:f9:f9:fd:5e:41:02:aa:ed:03:76:bd:24:82:01:ff:
dc:1a:4b:5d:1e:4f:45:35:d0:9d:6b:26:14:76:61:f8:bb:ab:
70:bf:aa:76:27:66:f2:df:f7:63:07:29:eb:24:94:0b:4c:f5:
5f:0e:26:4c:63:89:a9:f8:a8:9a:cc:b8:33:21:61:98:91:28:
7c:02:6a:42:b2:2f:2e:7b:03:5f:29:b4:e3:95:df:f2:5d:d7:
7f:27:f6:8b:48:77:bb:99:73:59:59:40:61:8b:c5:2e:9e:6a:
c6:16:67:c6:7f:b9:29:9a:23:cd:72:ab:c5:c5:a2:1e:40:da:
1a:06:62:14:62:36:e0:11:5c:d9:b8:45:3b:42:e7:63:ae:49:
4f:68:80:82:4e:d0:36:80:32:ec:f9:dd:db:98:48:72:db:82:
02:7f:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:51:19 2026 by rpki-client