
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
File: XIZcjpK_HeLYDcPsaNYdF2HEYks.mft (raw, json)
Hash identifier: tyHKqs9m+CFHTbM2K9/XP3FVy6Pc8zN0Eh3g5gKZ7+A=
Subject key identifier: 30:AE:EF:72:45:29:39:DE:90:63:13:E2:38:74:DE:38:6F:78:B8:7A
Authority key identifier: 5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
Certificate issuer: /CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Certificate serial: 019E30A92E453BF8F287F08AB379051393FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
Manifest number: 50
Signing time: Sat 16 May 2026 12:00:54 +0000
Manifest this update: Sat 16 May 2026 12:00:54 +0000
Manifest next update: Sun 17 May 2026 12:00:54 +0000
Files and hashes: 1: XIZcjpK_HeLYDcPsaNYdF2HEYks.crl (hash: UyOQsCXaROCB5Z9z48rQAP8SqtsZhmv5O3k/lOKOAuU=)
2: vx-dMynrTlhRGBj5W4xOg8tXzq4.roa (hash: dSwPN9gEJQKBHApKqv16FHfQnir8v/0ooHnc1vPcEnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:2e:45:3b:f8:f2:87:f0:8a:b3:79:05:13:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c865c8e92bf1de2d80dc3ec68d61d1761c4624b
Validity
Not Before: May 16 12:00:54 2026 GMT
Not After : May 17 12:00:54 2026 GMT
Subject: CN=30aeef72452939de906313e23874de386f78b87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:a5:00:ae:f9:08:51:5c:7d:fd:d4:04:c5:
29:98:cf:0b:5f:25:c6:5d:4b:49:0d:23:19:22:9b:
a6:72:38:0e:5a:2b:25:84:17:56:7a:b7:3d:fc:f9:
39:dd:37:33:c2:a6:da:dc:f1:dd:db:38:66:c0:6e:
c5:ba:e1:39:2c:8e:c2:3a:19:8e:9a:8c:6c:6c:c1:
8c:1b:4c:ed:5c:19:05:f7:d9:a4:87:52:49:26:41:
dd:00:ec:1f:e7:f4:0b:b2:c0:55:b2:61:3e:ae:86:
7d:72:4c:5f:f1:67:bd:58:ad:be:b4:f3:26:7a:9a:
ba:45:09:31:1e:2b:fa:cf:3c:22:3d:23:1f:6d:ac:
f4:e6:d4:85:d1:5a:f0:7d:2f:95:e0:a8:ed:1d:b2:
e3:c5:93:18:29:82:8c:4e:ea:00:0d:39:04:23:a8:
ef:80:19:09:ee:6e:84:0b:4d:a4:46:16:35:8d:33:
79:bd:52:40:4d:3c:0e:db:b3:db:11:b8:d5:cb:11:
cc:6c:b0:b2:ca:98:f8:aa:97:f2:d9:53:11:47:2a:
d2:41:0f:bb:fd:49:39:ab:77:1d:7d:09:b1:35:7b:
da:e9:02:bc:96:53:ea:4c:88:70:c2:ab:84:97:59:
ef:92:55:42:80:66:0d:2a:13:bd:d3:0b:62:ab:f4:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:EF:72:45:29:39:DE:90:63:13:E2:38:74:DE:38:6F:78:B8:7A
X509v3 Authority Key Identifier:
keyid:5C:86:5C:8E:92:BF:1D:E2:D8:0D:C3:EC:68:D6:1D:17:61:C4:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIZcjpK_HeLYDcPsaNYdF2HEYks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/95d956-88d9-48ca-9294-5accb8c3d646/1/XIZcjpK_HeLYDcPsaNYdF2HEYks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e5:bc:9b:b6:07:a2:b1:a5:a9:81:d6:bd:03:4e:0c:c2:c7:
d1:ab:32:e7:2b:97:09:7a:ca:6d:08:23:7a:a3:fa:e8:97:69:
62:9c:b2:25:7b:69:c0:72:59:94:55:29:55:28:3e:ad:42:ec:
1e:2a:02:af:81:68:2e:45:cc:7c:47:ef:eb:05:c6:72:84:42:
be:9b:5e:28:d7:a4:db:2b:3e:7c:0a:3c:e3:f3:20:84:7b:73:
d0:e5:8b:a9:af:7a:80:a2:6a:7d:7a:94:5a:c8:08:8e:5e:d9:
e8:65:74:c9:a9:82:fa:e3:8b:fb:e7:81:ed:fe:3a:3a:0d:cf:
49:89:e2:a0:ce:02:73:40:89:8c:a9:ef:c2:90:c0:93:56:96:
7e:11:3c:45:84:09:33:f7:49:2e:a3:6a:2e:75:c6:f4:4c:b9:
2a:6f:9e:9c:6c:02:d3:72:d1:15:c5:b8:be:59:27:c6:b6:d4:
79:eb:69:d9:78:42:00:9c:4a:bc:e2:b6:de:70:f7:53:2a:7d:
e8:dc:e5:aa:e7:cd:4f:dc:09:4d:c5:a7:2b:bd:ce:f4:2a:33:
f4:34:42:e1:bb:7e:f7:1f:c4:5b:3d:20:d3:b6:ce:25:ab:7c:
fc:e3:49:64:6f:fd:1b:b0:58:9d:ec:91:86:cf:1d:16:8e:5d:
fe:df:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:59:18 2026 by rpki-client