Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: vJd0ZB//8mdkzeU0xhzscdvDDs0q/BXJ5COT6h0Vtf8=
Subject key identifier: 14:5F:EF:3A:CF:49:4E:6E:CC:A8:6F:45:4B:F3:DF:87:82:86:3C:E8
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01A16B6C5CB5B7FD3BC91DCBAC025AD1668E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1AC1
Signing time: Sat 24 Oct 2026 01:00:25 +0000
Manifest this update: Sat 24 Oct 2026 01:00:25 +0000
Manifest next update: Sun 25 Oct 2026 01:00:25 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: MLiNlJN04YG/Oma2jOgO0FPtRiWMrh8xC4/Rrw7SF5k=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:5c:b5:b7:fd:3b:c9:1d:cb:ac:02:5a:d1:66:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Oct 24 01:00:25 2026 GMT
Not After : Oct 25 01:00:25 2026 GMT
Subject: CN=145fef3acf494e6ecca86f454bf3df8782863ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:a3:ee:71:6f:11:dc:6f:dc:ab:99:72:44:
af:a2:e3:f7:15:e7:47:53:ff:c7:bf:ec:2b:98:79:
72:06:3e:2e:63:ec:0e:5a:f7:20:09:9c:ae:7d:69:
2c:bd:7b:70:3e:ee:7a:8e:81:89:7d:9d:75:cd:1d:
3c:89:41:ef:32:ce:b5:ba:8b:aa:26:c3:b8:8b:ec:
06:aa:fb:b4:1b:27:1e:3f:eb:45:f6:ff:70:bb:f2:
36:b6:95:a7:2c:91:01:e1:2b:76:fb:51:60:85:52:
4d:3f:53:ca:69:69:83:64:28:56:55:ab:d4:78:3a:
77:93:1e:23:bd:4c:64:34:03:a9:e6:54:a3:6e:c4:
63:97:7e:7b:6d:72:5f:f9:af:21:9d:b4:6c:df:9f:
5d:92:73:60:57:89:45:9a:87:9f:f1:f2:59:2f:08:
2e:b7:ac:40:97:64:59:41:5c:2d:a9:8d:32:23:a6:
8c:fe:37:4b:ea:01:e3:5f:e7:dc:ec:3f:96:a4:e8:
17:1b:d8:61:9a:a0:e8:e4:ce:92:5f:03:77:89:83:
51:cf:df:67:1d:9d:04:cc:3c:64:ba:4a:9f:22:e9:
09:a6:6c:65:e6:57:ca:60:53:11:b0:e4:ad:46:6d:
1f:19:05:be:e5:19:69:71:7a:5e:3e:1f:0e:40:37:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:EF:3A:CF:49:4E:6E:CC:A8:6F:45:4B:F3:DF:87:82:86:3C:E8
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:27:9d:eb:62:d5:cf:b9:9b:28:35:43:aa:65:e9:8e:ef:b0:
bb:87:0f:7a:92:ca:fd:72:34:fe:d8:fb:0a:07:58:86:a9:75:
c7:3a:45:ec:43:d9:55:06:4d:a0:92:bc:71:00:fc:ab:cf:62:
70:eb:c7:a4:c2:84:43:63:8c:d7:05:ec:5f:5e:81:a8:b5:6a:
9f:78:8a:7a:a1:29:90:33:de:48:fb:75:4e:f8:0a:13:68:75:
86:ba:a7:b1:36:f3:14:96:d7:fd:81:c0:34:49:e7:e2:89:9e:
d7:32:15:f1:f2:29:ba:a5:70:fe:0f:84:fa:bf:66:0b:7a:3e:
7e:fb:81:90:d2:ac:94:49:51:26:75:1e:ce:f6:0c:c0:ff:8d:
0b:7d:40:b4:55:ce:8a:d6:8d:c6:98:e6:a4:0e:ca:41:4a:9a:
e7:f3:88:f4:48:f4:2e:c4:dd:38:af:94:34:1f:6c:15:e7:64:
e7:ef:3c:12:7a:c2:cd:16:07:b6:37:74:66:f9:7c:23:21:a5:
35:ab:7f:bd:42:c0:41:13:27:52:b6:e3:d3:23:95:1b:5b:29:
c9:d2:54:a8:e6:7b:6a:82:49:9f:bc:06:cf:64:c1:3f:dd:aa:
67:06:8e:87:4b:46:82:f5:96:92:30:16:eb:74:9f:3c:e7:7a:
72:7e:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:03:06 2026 by rpki-client