Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: JWZDosWn0CSSF6KgKD5mOYlR8fjlK7enOrjXP45vVqU=
Subject key identifier: E6:41:4B:26:04:89:B0:11:DC:69:B5:47:BC:00:D7:64:E1:68:DC:58
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 019D26960AF45724731B8C61F4C880CC6669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 14AA
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: M-ZAizH3Jyc9LZTBrwMFMfJ5Pjs.roa (hash: ewZ193jdLfT/L5MLXvV3UajNvvWjflDdyAMOaO98puY=)
2: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: BaL7Hl5LR6rWAepdqwN04XeeQU3gNDiNaprG/1qyVLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0a:f4:57:24:73:1b:8c:61:f4:c8:80:cc:66:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=e6414b260489b011dc69b547bc00d764e168dc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:5d:0f:32:43:7e:8a:96:85:ec:6d:1f:64:
d1:f7:11:75:0b:17:ab:e4:dd:88:9d:53:4e:ec:ae:
42:18:48:a2:72:16:ae:0e:31:02:89:ba:65:26:87:
a1:87:47:2d:80:d6:d4:f1:e6:12:eb:76:59:fe:4a:
7d:f2:e0:ae:70:5a:82:88:47:18:79:3e:c4:9e:d6:
42:5c:20:0e:51:2a:31:4b:41:f1:0b:2e:9e:78:92:
29:91:35:5d:05:ad:26:11:61:74:51:a6:10:4a:ec:
cd:25:89:98:eb:74:7f:c5:b7:9e:e8:f7:1e:b6:c0:
ec:68:22:90:65:ab:f0:ba:a5:c3:7f:8d:0c:63:5a:
16:1f:bf:bd:bc:d5:ad:3b:d3:0c:11:5c:da:9c:1e:
84:75:b7:c1:00:15:1f:76:13:69:15:51:ab:81:a6:
fa:b5:43:34:3f:2f:40:2a:86:5d:c5:c5:ae:94:b7:
51:f6:76:2d:f7:88:a2:98:93:fe:4f:fb:5d:da:66:
23:1f:de:01:0f:7a:33:4e:57:b5:5e:e2:e1:5b:91:
e1:a6:3b:a4:08:64:41:b2:fc:44:91:bd:14:43:a3:
0a:50:37:16:09:2b:37:9e:63:48:8f:0c:36:35:1f:
6c:09:8f:35:70:58:68:7b:98:37:26:51:19:46:06:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:4B:26:04:89:B0:11:DC:69:B5:47:BC:00:D7:64:E1:68:DC:58
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8f:4f:d7:d1:5b:f9:14:9a:46:09:5f:72:af:e6:3c:95:d0:
a4:e9:c7:b6:04:79:a4:1e:87:5b:ab:da:6d:de:6d:3b:34:ba:
2c:b5:19:a1:9f:21:a8:8a:5d:bd:b3:b2:07:be:50:57:a2:7a:
22:89:95:4f:3a:ca:c1:d5:a9:18:17:28:f2:ba:8d:bc:fd:c5:
67:8a:07:a1:a8:8d:5c:ea:0c:58:c0:6c:96:c7:9a:db:93:46:
aa:f6:50:51:85:84:94:26:e6:ea:95:c7:14:51:8f:b5:89:6e:
da:54:78:25:8c:fc:b7:5e:ba:c5:92:b1:00:62:bc:97:ce:01:
d3:18:39:eb:a2:ea:28:a6:b3:26:27:5f:1e:16:4d:c0:50:f5:
6c:bc:eb:9d:07:86:ba:2e:1c:53:94:19:c0:74:7c:77:2e:8c:
c4:d0:d1:67:7f:64:d8:00:fa:20:90:6f:f4:7d:56:83:63:5e:
06:2b:75:8d:ba:73:06:61:ee:e7:73:5f:9f:05:0c:6f:2d:ce:
eb:09:10:02:da:16:f6:12:fb:48:17:17:a4:b0:9c:f3:b2:c3:
d4:ce:e4:47:bf:ea:35:3c:a4:2d:3e:29:35:a5:2b:f5:10:87:
5a:d7:65:c6:fa:17:cb:26:2a:60:35:a4:1a:8f:18:a6:1d:6b:
e8:b1:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client