Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: 5K4Ue5mYTtsuDUkzzC+3N6tIZmNqLWo0eW50kXp5TKM=
Subject key identifier: 54:54:56:C8:E8:E3:D1:11:E9:37:4C:BC:1C:59:A1:4D:7D:C6:1F:60
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019F84C448947192348B0AEC1FDB3E084228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 19C5
Signing time: Tue 21 Jul 2026 13:01:23 +0000
Manifest this update: Tue 21 Jul 2026 13:01:23 +0000
Manifest next update: Wed 22 Jul 2026 13:01:23 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: bnxvDU6vox+MHa9/rAk5utces5KLXIGQ7ANjjlN2V/0=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:48:94:71:92:34:8b:0a:ec:1f:db:3e:08:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jul 21 13:01:23 2026 GMT
Not After : Jul 22 13:01:23 2026 GMT
Subject: CN=545456c8e8e3d111e9374cbc1c59a14d7dc61f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:2b:08:4a:2a:15:02:80:97:4d:d5:83:06:
af:df:9b:a1:6e:83:70:fd:bf:68:3b:18:03:f0:f6:
26:92:a2:df:25:b6:63:cd:0e:dc:70:7c:90:c1:dc:
a5:ac:10:56:29:47:cc:b2:9a:46:5b:7e:fd:51:a5:
f9:4a:7e:96:7e:0e:6d:de:8e:63:ef:79:92:24:bf:
9c:a6:cc:06:ae:8a:8e:00:0f:6e:e1:79:d9:b7:fa:
3e:66:04:db:d3:a0:15:94:a0:06:98:56:01:f4:68:
52:fc:9b:0b:04:20:21:39:a1:34:2d:1b:e1:3e:ba:
1b:43:3f:39:ec:e8:5a:71:ca:7a:e9:78:d4:d6:f3:
e6:9f:05:e0:ee:00:25:42:d7:9c:18:f3:07:85:79:
ab:ae:80:0f:e2:e5:2e:48:0f:54:fa:48:94:0a:39:
2b:a2:23:16:15:a8:ec:31:31:8a:41:95:6a:cc:e6:
a8:f6:f1:27:de:47:41:03:64:36:fd:e7:99:6a:bf:
6e:9a:7a:8b:d2:af:50:f8:64:3a:d6:3a:6b:36:78:
14:9f:49:c6:52:eb:f2:34:07:f9:c4:19:74:30:81:
84:ea:fb:ea:12:82:63:11:b6:11:49:a2:e6:a9:1a:
d5:4b:0b:3c:e8:77:a1:d1:31:6b:c9:f5:56:f2:e7:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:56:C8:E8:E3:D1:11:E9:37:4C:BC:1C:59:A1:4D:7D:C6:1F:60
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:61:9e:17:58:23:ce:21:40:e2:7f:01:aa:7d:58:46:52:2e:
a5:17:25:f5:45:de:9e:9c:c6:5c:76:ec:9a:3e:cf:3d:19:f1:
a1:c2:1a:ad:da:c4:6a:37:a7:3a:76:8c:e6:3c:3b:51:41:78:
a9:22:dd:b3:c6:95:f7:3c:72:db:a0:dc:38:bf:0e:b0:c9:c2:
2a:fc:8f:d9:50:b6:43:d6:a0:fe:08:31:a0:5f:de:08:ac:ed:
a5:02:c9:b8:71:82:e8:63:8b:f7:77:fb:1b:b9:a0:bb:8d:fe:
41:dc:58:cc:ea:72:49:73:2d:f2:cb:e5:0e:30:07:e9:1a:01:
17:1c:6a:2a:de:01:1b:fc:ce:06:07:2b:53:38:6c:7b:f5:73:
d2:d2:28:fc:b5:f0:f1:de:f9:1e:f5:46:d9:27:2e:52:92:7c:
44:e5:86:3f:40:1d:52:b7:1f:47:d3:18:a6:4c:a5:45:f4:6e:
18:e9:97:9d:bd:b2:fb:f6:31:97:c3:10:f6:78:c1:53:f4:64:
18:2d:7a:e9:3d:56:6b:74:aa:02:2f:93:55:73:b7:c9:aa:a8:
2d:d5:f0:ea:3a:af:23:d1:12:e4:45:31:ad:9c:e5:5e:b6:fb:
d4:af:d3:e2:2d:9c:ce:11:24:91:4d:75:d5:32:97:ca:c9:2e:
ba:c3:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:30 2026 by rpki-client