Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
File: XIZcjpK_HeLYDcPsaNYdF2HEYks.mft (raw, json)
Hash identifier: D5oQbs98dnfl94Iw6+BLtgqtpr1fN0ezUaPnYuGIKeA=
Subject key identifier: 01:DA:60:88:F4:9D:86:2F:05:12:79:D1:1A:CC:CF:CE:85:01:5C:32
Authority key identifier: 5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
Certificate issuer: /CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Certificate serial: 01A004026C689B47E2BA30C08BF3E680ABAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
Manifest number: 0142
Signing time: Sat 15 Aug 2026 06:01:02 +0000
Manifest this update: Sat 15 Aug 2026 06:01:02 +0000
Manifest next update: Sun 16 Aug 2026 06:01:02 +0000
Files and hashes: 1: XIZcjpK_HeLYDcPsaNYdF2HEYks.crl (hash: 0UTQCb94vl42lxLqqXFG7IoLT2TZRWXav2P1bbjc1BU=)
2: vx-dMynrTlhRGBj5W4xOg8tXzq4.roa (hash: dSwPN9gEJQKBHApKqv16FHfQnir8v/0ooHnc1vPcEnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:6c:68:9b:47:e2:ba:30:c0:8b:f3:e6:80:ab:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Validity
Not Before: Aug 15 06:01:02 2026 GMT
Not After : Aug 16 06:01:02 2026 GMT
Subject: CN=01da6088f49d862f051279d11acccfce85015c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:d3:b9:f2:25:0e:49:fc:31:21:d8:e2:77:
3a:d5:a6:74:73:e9:67:21:1f:7b:ab:41:b4:2e:8f:
f8:fb:2c:0f:d9:62:f0:b8:87:57:8c:25:91:56:07:
ca:5a:1c:20:07:4d:43:53:9f:64:eb:34:2f:6f:6a:
49:6d:f7:69:a4:d6:f5:33:bf:ef:2c:ce:c1:f1:02:
94:fe:15:8f:ec:16:f9:39:06:fd:11:98:55:7a:52:
30:ed:94:f2:d7:61:d1:89:99:a0:70:b0:72:d1:cd:
c5:56:00:c3:12:41:dc:37:a0:0b:48:a5:69:67:58:
b2:64:b5:6b:99:d0:23:d4:88:b3:35:72:e0:c4:2f:
1c:66:59:28:db:19:b5:69:2b:d6:9f:1b:e9:36:76:
93:72:4c:d0:82:c8:be:ae:9e:2f:85:d6:25:bd:c6:
5b:89:1d:4b:ed:ad:99:aa:8b:72:5d:0c:31:47:90:
98:77:b5:81:14:7c:09:50:b1:6f:d8:a9:da:af:c3:
13:3f:49:75:e3:95:f2:d3:f8:9f:9e:33:b3:b6:62:
4a:3a:42:36:ae:71:e2:64:e8:22:e2:84:33:da:96:
bd:4d:8d:07:db:9f:9d:48:d6:7d:14:91:6f:33:7f:
c1:a9:b9:4a:c0:1f:7b:3e:06:4a:b3:f3:b4:94:54:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:60:88:F4:9D:86:2F:05:12:79:D1:1A:CC:CF:CE:85:01:5C:32
X509v3 Authority Key Identifier:
keyid:5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:09:d9:24:62:c3:b6:0a:4a:31:c5:28:6c:8b:29:1f:b2:
33:4b:e0:4f:53:45:73:0b:d5:01:79:38:31:0d:8b:74:90:c7:
cc:97:73:4c:9b:2d:7f:2a:90:ef:b1:32:11:9d:9e:f1:94:22:
7b:8d:c7:9e:54:64:cb:1b:66:35:44:d2:7f:00:d3:59:4c:2b:
48:86:e2:57:bc:fc:7c:36:6c:a9:6e:3d:c0:67:66:d2:4f:0c:
86:42:2e:5e:d8:a4:63:7e:26:ee:57:87:a2:47:26:ce:ec:b1:
d9:0f:4e:3f:27:d2:05:4b:a4:77:0d:d9:7d:1d:51:d7:e6:70:
70:49:09:c6:43:79:7c:68:6d:07:12:2e:dd:39:de:e1:e2:1a:
7b:e5:11:6b:2b:f1:ec:de:f1:d7:51:84:3e:de:99:a6:39:59:
a3:9f:a8:57:8c:fc:05:6a:81:84:81:19:c3:e0:70:9b:1d:fa:
74:da:55:7f:ac:af:68:ed:f9:aa:a2:5e:15:20:cc:6a:80:61:
da:a7:bc:cf:2e:79:bd:80:d1:90:44:a7:2c:28:97:c5:6c:43:
7e:03:ef:0f:c0:96:42:57:81:f2:07:00:96:26:00:31:50:8c:
06:27:12:b8:17:67:5d:ab:29:d1:5b:81:8a:d3:be:20:0d:18:
ce:43:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:29:38 2026 by rpki-client