Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
File: XIZcjpK_HeLYDcPsaNYdF2HEYks.mft (raw, json)
Hash identifier: 4kVeNhbyexkxaAgPRo2MD4kXoBqT6P9neoPtMyTtd4I=
Subject key identifier: 81:98:15:5F:26:9C:56:B3:1B:75:CE:F1:F3:F3:F0:E5:EF:88:83:67
Authority key identifier: 5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
Certificate issuer: /CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Certificate serial: 01A125AFCD621490BB486F5FC9CF01EE4F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
Manifest number: 01D8
Signing time: Sat 10 Oct 2026 12:00:40 +0000
Manifest this update: Sat 10 Oct 2026 12:00:40 +0000
Manifest next update: Sun 11 Oct 2026 12:00:40 +0000
Files and hashes: 1: XIZcjpK_HeLYDcPsaNYdF2HEYks.crl (hash: neXVhifqB4RwMAD3ETDxg0zUnWuquxN4OAuFQ5BawqQ=)
2: vx-dMynrTlhRGBj5W4xOg8tXzq4.roa (hash: dSwPN9gEJQKBHApKqv16FHfQnir8v/0ooHnc1vPcEnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:cd:62:14:90:bb:48:6f:5f:c9:cf:01:ee:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Validity
Not Before: Oct 10 12:00:40 2026 GMT
Not After : Oct 11 12:00:40 2026 GMT
Subject: CN=8198155f269c56b31b75cef1f3f3f0e5ef888367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:e1:93:4b:06:7c:64:f8:1d:18:37:87:d0:
7f:53:a2:5e:6f:a0:69:f8:64:ac:f5:2b:d7:e0:21:
7f:ff:c2:cd:28:e9:c9:e7:3e:a6:ea:fb:70:9d:c7:
dc:e2:8e:a3:b2:15:17:d3:80:50:8c:e2:d0:92:fc:
fb:df:c6:86:ee:2c:3a:c3:cd:3f:52:25:a5:9b:c4:
1a:88:fd:7e:8c:39:2f:d2:b6:e2:c4:28:a6:36:e4:
18:16:ec:df:8d:44:32:25:a8:d9:68:a6:76:bd:62:
b7:cd:8d:85:10:a7:76:98:42:24:7c:b7:18:2b:aa:
db:d2:07:0f:c4:8b:03:2c:fa:11:1b:fe:5f:e7:83:
31:b6:e8:bd:c3:a8:8b:d0:2d:80:36:4d:0d:f1:9b:
2e:4c:59:60:c7:33:d2:9c:dc:ab:06:ca:66:d0:85:
c7:71:0e:69:a7:14:a9:bf:ba:91:c5:1c:99:df:55:
68:12:a4:90:fd:b3:a7:07:6d:5b:6d:a9:a0:8f:f6:
66:5f:02:7d:84:a8:4f:2e:6f:3a:9d:c4:df:80:3e:
f1:7e:84:d8:0a:e4:d0:1e:b7:03:3e:04:43:fe:1a:
be:64:51:c5:b5:02:d5:86:63:37:2e:16:a8:83:21:
fa:c7:c0:de:41:11:e6:b9:e8:77:84:c7:88:ea:42:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:15:5F:26:9C:56:B3:1B:75:CE:F1:F3:F3:F0:E5:EF:88:83:67
X509v3 Authority Key Identifier:
keyid:5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:68:49:2a:fc:e7:ef:c9:08:ca:ab:33:b6:1c:cb:e2:77:2b:
d3:07:a5:c4:f9:19:78:e8:87:dc:3d:67:c0:72:0d:7c:1e:84:
c9:c4:85:21:02:fd:cb:a9:16:d0:91:90:de:9b:13:1f:ec:ee:
7b:40:0d:fb:9a:2a:72:43:6f:7a:51:af:e1:9a:89:16:03:d4:
5a:1c:75:ef:60:15:74:9c:56:89:5f:d8:4e:99:19:72:cf:21:
e7:ad:c6:e1:a2:6b:49:fd:1f:af:b9:15:68:6e:2c:d6:4e:fe:
1e:2a:ef:a8:37:05:db:b7:03:e7:58:cc:2e:1e:1d:6a:d8:75:
ae:7f:00:fe:1c:7e:86:3d:91:69:e7:ee:5e:34:fe:4d:6a:60:
ea:17:b6:52:aa:f5:51:4d:9d:6f:91:d4:1b:8f:24:e7:d3:75:
bb:4f:13:69:18:8f:45:13:86:c1:36:32:e2:1d:4a:41:bc:9a:
56:1a:f7:eb:81:71:ac:1f:71:6c:09:2a:23:59:1c:5f:a8:fa:
ff:49:fd:8c:3e:bc:ee:2b:7f:2e:07:46:ac:35:49:88:16:e3:
ef:51:5d:02:36:f3:3d:79:30:e0:f6:d6:5c:08:39:86:bc:b1:
79:e4:6c:e9:e1:61:08:d6:de:92:ad:ee:41:b4:37:88:77:82:
7e:14:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:44:29 2026 by rpki-client