Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
File: XIZcjpK_HeLYDcPsaNYdF2HEYks.mft (raw, json)
Hash identifier: 7ixgG94aRWXCFIYsYMy9Nm8ua96tuUcoB2bnoWup1Vc=
Subject key identifier: 1D:92:0D:00:02:E7:2C:C1:DA:AD:32:ED:99:1F:13:DC:AA:9C:99:93
Authority key identifier: 5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
Certificate issuer: /CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Certificate serial: 019FAD1A8F2899C8BDC61126306CA99B5545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
Manifest number: 0115
Signing time: Wed 29 Jul 2026 09:00:26 +0000
Manifest this update: Wed 29 Jul 2026 09:00:26 +0000
Manifest next update: Thu 30 Jul 2026 09:00:26 +0000
Files and hashes: 1: XIZcjpK_HeLYDcPsaNYdF2HEYks.crl (hash: +VKkcHV6w3fwyck/bBQ9MAiNwdNhogYlmbnocMvJAqI=)
2: vx-dMynrTlhRGBj5W4xOg8tXzq4.roa (hash: dSwPN9gEJQKBHApKqv16FHfQnir8v/0ooHnc1vPcEnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:8f:28:99:c8:bd:c6:11:26:30:6c:a9:9b:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Validity
Not Before: Jul 29 09:00:26 2026 GMT
Not After : Jul 30 09:00:26 2026 GMT
Subject: CN=1d920d0002e72cc1daad32ed991f13dcaa9c9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:7e:6b:aa:f2:4e:ff:f8:f0:6c:e7:3c:c3:
d1:e3:b8:a3:c0:a6:5c:dd:79:0b:f2:51:02:59:b2:
5d:39:40:27:66:da:9f:6a:e9:a3:5a:01:40:ce:6a:
a7:49:48:b2:75:7a:18:19:d5:99:57:55:65:cf:f2:
69:82:40:1a:5c:ed:a0:d8:d1:1b:e1:de:81:82:ed:
ba:ff:1c:42:e9:3d:71:76:69:01:ae:a4:d7:ac:44:
5c:92:4d:42:43:1b:e2:89:0a:7d:4c:42:15:7e:7d:
4e:79:7d:ef:a3:a1:2e:e7:3c:43:6f:eb:60:18:d1:
bd:87:f6:ca:6f:95:36:e5:18:b4:95:b7:d5:95:40:
dc:92:62:6e:b1:02:f7:96:7b:c3:f7:b5:b1:a0:6b:
5c:8f:2a:6e:1d:1b:d4:c2:63:7f:63:8e:3c:55:4a:
86:cc:b6:be:c0:af:7f:d1:82:5c:26:9c:d5:2c:a7:
17:4e:31:90:66:cf:4b:45:e1:77:2f:24:f4:4d:cf:
ad:6a:f9:f5:c4:6a:ea:6d:5b:e7:05:0f:dd:b6:65:
85:ed:b3:33:49:95:cf:d4:8d:c7:70:c6:30:72:6e:
72:75:7d:1c:2a:2b:ef:3e:b2:16:89:ba:1d:78:60:
f8:00:9c:9a:c4:df:dc:23:06:fb:b0:6d:e5:42:e6:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:0D:00:02:E7:2C:C1:DA:AD:32:ED:99:1F:13:DC:AA:9C:99:93
X509v3 Authority Key Identifier:
keyid:5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a0:8f:52:8d:bd:87:68:ac:a4:a6:93:0a:b3:26:88:68:03:
bd:28:73:67:3f:11:7c:40:1d:38:37:92:84:1b:90:be:73:84:
30:34:79:47:2b:c2:f5:31:fc:7a:17:82:a5:f2:89:de:cb:21:
34:de:34:9b:72:9a:61:84:1c:37:d4:da:91:89:77:a2:a5:b3:
39:35:80:f8:56:c2:c6:79:fb:c9:d1:fa:55:df:14:17:75:ea:
71:49:1d:ef:c7:1d:a9:09:75:69:ad:50:9c:4a:21:f7:99:21:
c4:15:dc:35:d3:fb:0d:01:84:b1:4a:bd:c7:aa:0a:35:94:3d:
eb:33:0f:37:0f:86:a2:6f:b9:f8:4c:ab:4a:0e:1c:0f:24:7a:
33:2f:22:4e:75:07:7a:51:fa:ab:38:67:fc:06:a2:3c:d5:7f:
2c:63:95:a9:7e:b4:fb:ea:4f:95:a4:9d:cb:3c:db:d6:a4:07:
8a:e0:28:9e:40:b5:4d:90:b8:1e:47:28:f0:67:61:cf:7a:96:
7a:f2:e8:dd:38:21:99:83:2e:e5:00:25:07:3d:86:20:e0:0a:
d1:7c:b0:a8:b0:14:fa:d9:15:9f:04:c6:36:f3:df:a3:c7:76:
e9:79:48:89:72:84:69:3f:8e:4c:9f:bf:19:7a:6d:b3:c3:43:
32:a7:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:22:50 2026 by rpki-client