Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: Og0DxWkrqSPCnjjMKi6T0LkwgdiC9c7DVXaE9wCS0U8=
Subject key identifier: 83:88:74:6A:7C:35:37:57:50:D4:FB:13:5D:0C:77:CA:4E:88:C4:2F
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019D37C0F8D5705A2938624C3FE4A9B63E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: 8g/GPHABvYuYh1o6jJypfv3PC0uvsKVTgsd4ZgyYTWA=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f8:d5:70:5a:29:38:62:4c:3f:e4:a9:b6:3e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=8388746a7c35375750d4fb135d0c77ca4e88c42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:f1:a9:93:76:eb:bc:fd:24:db:18:11:2c:
6d:f2:ab:b9:64:46:7d:9a:dc:6d:8b:58:fc:44:6e:
b4:2a:48:3b:02:38:7e:4e:ba:6f:d7:85:f1:c0:49:
22:4b:a7:c5:3c:01:7a:11:9f:2b:d1:06:8c:d8:c0:
51:7e:d4:1d:82:05:bd:fd:f6:02:a4:e9:bc:ba:2e:
9b:a1:d5:30:2c:83:80:01:ef:67:12:bc:d0:78:9a:
04:88:37:13:11:2c:08:93:29:68:09:e2:9b:8d:b7:
9e:7b:7b:c7:ea:c7:ba:b3:7b:1a:fd:c2:6e:e4:ab:
3f:fa:9f:1d:64:27:54:7a:65:61:a0:e2:ef:ba:98:
c9:c0:a4:93:f8:ee:fa:da:1f:68:2c:5e:ed:cb:f9:
6e:1c:93:48:45:17:f9:67:df:2f:a6:ec:5e:55:3f:
5a:8f:9e:6b:2a:07:b1:0e:47:77:b5:be:85:ef:7b:
e4:3e:41:7f:38:7c:d9:1a:c8:b5:9f:83:7b:f9:4c:
72:3d:63:4f:78:7b:b8:de:60:3a:ae:e8:64:54:d1:
cd:21:81:5d:e4:90:71:90:df:60:64:97:63:37:27:
6c:12:d2:a2:98:c7:b7:d6:6d:9a:d2:ac:98:bf:bd:
79:63:4a:a9:f4:ba:e5:2e:81:55:83:d7:4b:22:97:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:74:6A:7C:35:37:57:50:D4:FB:13:5D:0C:77:CA:4E:88:C4:2F
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:55:8e:ee:a1:23:2f:34:4a:7f:86:75:08:63:7e:ce:5a:
2d:ba:94:9f:a4:d9:f8:09:31:78:d2:02:72:1b:c3:c3:77:2d:
ff:a5:80:bd:ea:67:4d:e1:f7:b3:17:12:96:3a:89:c7:98:8e:
6b:65:50:7d:3b:c1:01:60:91:7c:8d:d4:bd:ce:58:1e:72:54:
88:4a:a3:13:4b:94:34:2d:38:de:bf:2e:84:f8:76:28:da:94:
6c:25:f0:fd:2b:2c:ce:a9:bf:83:3e:fb:a0:aa:a8:9d:27:69:
01:13:85:c1:0b:96:70:0b:cc:50:25:1a:55:e2:fd:16:3a:b8:
95:b1:63:92:a6:20:bc:4c:9d:8c:49:7d:c9:40:a2:2a:71:87:
ce:44:5c:9f:3c:11:13:53:17:f8:28:58:99:e8:1e:ff:dd:a2:
70:98:f4:bc:13:fe:16:be:13:3c:22:50:05:84:11:2f:26:4d:
ed:ca:b4:60:0f:80:a6:16:5c:33:13:b0:73:82:f2:8e:06:e5:
f9:16:b8:b1:93:9e:b4:12:46:e7:fe:e6:55:3c:83:ea:d2:63:
d8:44:21:73:7c:05:4c:ad:54:31:bf:0a:4a:9b:b3:21:71:2e:
52:94:b5:e1:90:28:5d:04:29:8e:2b:1f:f8:22:e8:bf:3b:d1:
3e:7b:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:31 2026 by rpki-client