Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: DBpx2um5BO6gRoFjFeiEo70X6yOGbyZjpeZoVmzyD0Y=
Subject key identifier: 98:5A:AC:73:0B:52:A5:1C:35:B7:6B:26:2C:DF:A3:E7:C8:CB:F7:99
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019E9B17FA6E11D44AA7C40F52BF227ADB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 194C
Signing time: Sat 06 Jun 2026 04:01:40 +0000
Manifest this update: Sat 06 Jun 2026 04:01:40 +0000
Manifest next update: Sun 07 Jun 2026 04:01:40 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: Nk8GsrA3KxclxMjJQqFg0HRMneuM08El5CQ2foAUDwE=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:fa:6e:11:d4:4a:a7:c4:0f:52:bf:22:7a:db:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jun 6 04:01:40 2026 GMT
Not After : Jun 7 04:01:40 2026 GMT
Subject: CN=985aac730b52a51c35b76b262cdfa3e7c8cbf799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:75:36:a6:22:a9:76:c1:63:85:18:cc:5e:
63:8f:25:77:4c:6f:05:6f:fd:5d:7f:49:a7:13:5b:
07:a9:ce:94:a9:e5:c1:ab:fe:c2:7d:c2:55:dc:fd:
05:37:9f:26:1b:c9:d0:5c:b3:b1:23:6b:fd:33:bb:
40:3e:93:65:f9:b1:61:a4:01:54:b7:b6:3e:c8:5d:
69:0d:b6:c5:e9:b4:da:b0:a8:5f:38:7a:84:47:cc:
05:df:f1:5f:0b:f1:30:36:fd:a1:f0:29:c4:2b:1d:
ca:a0:ce:98:18:2b:eb:14:fb:b6:56:f7:18:a9:9d:
b6:dc:ec:b5:a8:73:70:72:7a:b9:f2:9e:3a:53:ac:
33:4f:d8:5b:fb:31:a4:7a:36:f8:8f:ab:69:7d:70:
7b:dd:b4:a8:2d:b8:8e:f8:b2:95:db:78:4c:a2:2f:
8b:52:17:14:90:03:f4:b5:c6:d3:9d:83:b7:e8:06:
ce:9b:e7:d0:c0:38:a3:f8:c3:02:dd:e0:90:cd:c2:
43:93:7c:f7:6d:93:34:04:e8:7d:e9:86:a6:71:ca:
89:ee:1b:1f:62:e5:1c:9a:2d:27:92:3c:0a:a5:40:
0f:44:a7:6f:5d:5a:13:a8:39:db:5a:6e:6c:5f:f3:
e5:d1:b9:47:b8:e0:cc:c7:24:f3:7d:dc:fe:54:07:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:AC:73:0B:52:A5:1C:35:B7:6B:26:2C:DF:A3:E7:C8:CB:F7:99
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:39:47:d7:49:7f:f3:48:c3:28:f1:a6:ae:fa:d3:99:22:
08:95:c8:b4:c1:6f:aa:c1:4f:28:2a:4a:4f:64:5c:93:46:3a:
78:37:bd:a2:96:e7:7c:4b:1e:4c:f3:57:be:47:07:cd:b6:e3:
6a:ee:68:40:1e:70:c0:63:4f:8c:df:61:69:ad:e9:a0:0f:e1:
b4:20:52:dc:a0:1d:22:81:a7:1f:3e:1c:fb:f2:22:03:5b:04:
b2:8d:66:f9:a3:03:9f:59:3f:41:f8:39:24:c0:84:10:2c:64:
68:3a:aa:34:de:d8:40:18:e4:20:31:9a:bb:84:a8:a7:aa:d3:
e8:32:c4:e4:2d:6a:cd:ba:be:95:0e:92:2f:03:ae:7a:55:61:
e8:5f:97:47:a9:89:29:ae:e0:27:03:9d:f9:47:a0:89:04:fc:
8f:bd:86:be:11:87:3a:6f:99:d0:d8:eb:c5:8d:f9:bc:5a:e0:
f0:7a:96:c9:cd:08:1c:98:2c:fc:36:d0:92:d6:f6:58:80:4c:
7c:1e:34:5a:f8:13:ec:5e:21:6a:ca:1c:4d:3f:6e:02:b5:1d:
b2:4d:1a:9d:c5:f7:72:cd:20:b6:8b:f5:1b:6f:92:64:55:c2:
7a:51:d6:b5:98:70:8a:30:f1:78:a2:83:f5:35:42:d7:1a:74:
b4:59:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:38 2026 by rpki-client