Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
File: XIZcjpK_HeLYDcPsaNYdF2HEYks.mft (raw, json)
Hash identifier: f9zK1FzW0V/ufPE2QomA4d5hlrOv6zmBjlxm3HwcIxw=
Subject key identifier: 84:C3:A4:B4:9F:93:C4:2C:96:75:51:1C:1E:2E:CC:EC:69:27:82:16
Authority key identifier: 5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
Certificate issuer: /CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Certificate serial: 01A14C501D8BE8FCCE3A2BD3950041E3B361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
Manifest number: 01EC
Signing time: Sun 18 Oct 2026 00:01:21 +0000
Manifest this update: Sun 18 Oct 2026 00:01:21 +0000
Manifest next update: Mon 19 Oct 2026 00:01:21 +0000
Files and hashes: 1: XIZcjpK_HeLYDcPsaNYdF2HEYks.crl (hash: 6s5w4z24cQAos1nkYVx6spCJGwE2sz5tbXHqfc2uS8c=)
2: vx-dMynrTlhRGBj5W4xOg8tXzq4.roa (hash: dSwPN9gEJQKBHApKqv16FHfQnir8v/0ooHnc1vPcEnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:50:1d:8b:e8:fc:ce:3a:2b:d3:95:00:41:e3:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Validity
Not Before: Oct 18 00:01:21 2026 GMT
Not After : Oct 19 00:01:21 2026 GMT
Subject: CN=84c3a4b49f93c42c9675511c1e2eccec69278216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:a4:e8:72:39:65:68:fd:b5:3e:92:f8:22:
a0:c4:a7:9a:6a:dc:87:21:9c:0e:4a:f1:2a:49:0f:
a4:fc:bb:b2:36:8c:d9:e4:fb:cf:ea:45:2b:67:ab:
72:c1:f7:61:01:fb:c9:96:18:e1:8b:54:38:74:ca:
95:a3:b7:48:4b:e8:ee:5c:0d:f6:e1:f1:93:2b:52:
c3:26:03:02:9d:6b:88:a4:f5:65:c0:b3:eb:2e:83:
cf:82:34:cc:b5:23:0c:36:e4:58:f1:5a:75:d8:47:
3e:ce:8d:87:00:35:0e:59:2d:c5:47:23:70:c9:c7:
c3:fb:07:ba:7d:7f:02:4d:b8:04:53:cb:7c:c7:14:
cd:8b:fe:eb:26:01:f8:9e:f7:d6:2d:e4:49:22:de:
03:8f:79:fc:b9:04:e1:6d:78:d9:bf:db:c0:94:a1:
c0:02:b1:e0:9f:aa:fa:13:e7:28:cb:a5:39:ac:69:
a5:42:a8:53:a0:58:b1:a0:50:61:72:2a:4b:22:d4:
8a:a8:82:0b:01:e0:cd:dd:5e:6e:96:bc:9e:42:1c:
38:04:73:91:9d:70:ab:18:61:a0:90:c0:b7:1a:5e:
1e:15:dc:2f:e2:62:5c:f9:db:3f:d8:35:31:b1:2c:
86:5d:db:ce:b1:21:f6:4a:20:3f:15:6f:3e:7c:c1:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:A4:B4:9F:93:C4:2C:96:75:51:1C:1E:2E:CC:EC:69:27:82:16
X509v3 Authority Key Identifier:
keyid:5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d6:63:f0:34:3d:72:26:a1:03:9b:26:86:e2:2f:98:f7:48:
e9:f6:49:57:c6:30:e7:39:a7:46:a9:6c:05:b0:c8:2a:28:64:
13:80:6b:d8:42:ff:c5:f7:b0:2a:8f:9b:18:1e:fb:6f:46:94:
be:09:c7:ab:a5:44:4f:83:9f:2a:a7:2d:dd:0f:ac:72:36:bc:
da:0f:5a:81:c5:95:e5:33:bd:a6:d0:1a:70:b6:ae:43:e4:03:
22:93:88:aa:aa:df:30:38:f2:a2:9b:f3:ae:51:f4:a2:9f:08:
f7:ac:ad:77:c6:b1:d3:04:7a:68:0b:fb:9b:93:dd:e6:bb:42:
ed:c9:be:f4:93:29:4e:94:16:b6:75:9f:b7:94:49:9c:5a:ea:
cb:99:fb:f8:b3:a8:da:0f:70:ee:72:5e:03:d7:c5:80:4c:2c:
07:8a:6f:9b:1d:4c:3b:5b:03:64:a4:e7:38:29:bd:3c:6b:6e:
28:59:25:2d:bf:9a:9f:19:e6:1e:0e:76:ce:8f:0b:73:45:1d:
67:93:d2:f3:8f:c1:b9:2e:67:06:d3:fa:a6:91:f5:f4:23:46:
30:94:4d:29:56:f4:36:f3:74:88:41:ac:87:56:b2:7e:3a:08:
1f:bd:d0:79:25:52:ea:b3:b9:3b:08:4f:23:5e:d4:bd:46:51:
fa:d0:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:18:48 2026 by rpki-client