Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: JW9h6FI/Rj+ryYwGFt8ZBnYHTQHrmMJATD3sYC5OKHc=
Subject key identifier: F9:AD:47:C0:16:F4:86:21:E2:3A:DD:F4:B5:70:5E:B2:19:E5:AA:8E
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 019E1DC78C0ED02D61E0FAB606AC23E1AA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 152A
Signing time: Tue 12 May 2026 20:01:17 +0000
Manifest this update: Tue 12 May 2026 20:01:17 +0000
Manifest next update: Wed 13 May 2026 20:01:17 +0000
Files and hashes: 1: M-ZAizH3Jyc9LZTBrwMFMfJ5Pjs.roa (hash: ewZ193jdLfT/L5MLXvV3UajNvvWjflDdyAMOaO98puY=)
2: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: fUczliFOFKPRF3RgkzfzlR9yBlFf9AxTA56DEHd2PmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:8c:0e:d0:2d:61:e0:fa:b6:06:ac:23:e1:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: May 12 20:01:17 2026 GMT
Not After : May 13 20:01:17 2026 GMT
Subject: CN=f9ad47c016f48621e23addf4b5705eb219e5aa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:7a:e0:03:5e:09:b2:89:b5:9c:7e:4c:8a:
a6:80:38:4c:e1:a8:31:43:5e:49:ac:2d:cd:2e:27:
39:98:f7:3c:a0:b3:00:a5:1a:fb:35:06:d2:e2:5c:
b3:e6:ec:13:c8:c1:90:27:61:33:0d:2e:ef:43:52:
e8:b2:15:de:90:12:94:bf:62:c1:25:c3:8c:89:75:
6b:36:b9:f2:39:7d:0f:f2:5f:3a:33:71:29:29:f7:
b9:b4:01:27:03:b5:23:d4:8a:80:f5:05:ba:7a:59:
d4:e3:9e:87:9c:c8:b1:06:69:3d:72:6c:40:d6:50:
a5:39:c5:fb:7e:13:ba:ff:9c:33:4c:2a:ad:5f:ed:
07:bf:0b:b2:83:f3:c0:61:42:8e:68:32:09:14:f0:
b3:db:5d:51:4b:f5:d6:30:69:75:f0:7d:2f:18:ee:
c6:cd:ac:7f:e7:e0:7f:5a:21:ca:fc:e1:29:08:e1:
9c:39:af:14:e3:3a:ba:92:94:24:d6:25:5c:36:40:
91:ce:3c:ed:e8:8a:c2:fe:ee:cd:13:e7:5b:f0:9d:
a8:df:d5:64:af:25:9c:b1:56:c2:22:31:af:ec:30:
68:06:9f:28:6e:28:c9:82:ab:4e:2c:dc:82:fe:56:
e8:09:04:ce:f3:89:c9:23:9c:69:0d:b7:ed:c4:c8:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:47:C0:16:F4:86:21:E2:3A:DD:F4:B5:70:5E:B2:19:E5:AA:8E
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:43:cc:0c:7c:a3:86:eb:ba:9f:37:03:7c:85:71:1f:b2:51:
35:78:81:ed:50:f5:3f:50:83:2e:7b:7f:33:c2:cd:c3:e6:d1:
86:d5:ae:48:6d:18:1f:f3:1e:b6:4f:59:fb:5e:6f:54:8f:41:
1d:be:f3:50:70:a8:9c:73:07:e5:2c:e5:8a:c4:f6:8d:9c:d7:
ac:36:3f:9c:f5:cb:ee:7f:3e:f7:ba:b6:30:c4:e3:3d:3d:4f:
48:db:6f:40:56:c3:c2:78:ea:90:a5:c4:09:e3:69:aa:ae:86:
0a:93:e8:ba:5b:30:7f:c1:95:51:72:3f:1f:e4:6d:16:2a:68:
0a:cc:9f:cf:e3:6e:d1:ec:c1:ff:a6:73:c4:83:1c:a5:11:35:
4d:38:13:93:cb:c9:b6:aa:d8:dc:b3:c0:f4:a4:7a:36:45:f3:
8b:08:49:1e:ba:ad:dc:24:12:2b:b0:18:cc:3a:3c:aa:b2:2d:
53:12:c0:97:d0:96:92:b4:8c:e0:10:2a:d6:31:11:ba:62:a2:
01:b4:24:b6:57:95:fe:08:f7:af:af:e9:ce:97:87:c8:1a:da:
10:a1:be:b7:23:29:d0:99:cb:a8:ea:ef:82:96:e4:b2:7e:c4:
29:12:37:26:6d:bc:59:a7:16:58:3c:d1:6e:de:d2:6b:e1:3a:
a5:25:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:48 2026 by rpki-client