Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: UBcgTMq97xOvbxvYLZNN99gcSvdskVQGIGUEWBS77oc=
Subject key identifier: D9:91:6F:CD:61:DE:52:47:FC:32:74:CE:12:DC:6A:D6:50:9C:6E:D5
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01A06E7114D2954CE0CA5F032963DE9CB18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1A3E
Signing time: Fri 04 Sep 2026 22:01:39 +0000
Manifest this update: Fri 04 Sep 2026 22:01:39 +0000
Manifest next update: Sat 05 Sep 2026 22:01:39 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: VtNFk8PGhhRH5B0vZ5DP14BEGfDGT3e71DTgT6kGYgk=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:14:d2:95:4c:e0:ca:5f:03:29:63:de:9c:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Sep 4 22:01:39 2026 GMT
Not After : Sep 5 22:01:39 2026 GMT
Subject: CN=d9916fcd61de5247fc3274ce12dc6ad6509c6ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:00:4a:78:da:ec:e0:0f:4c:ad:20:ee:c8:
95:82:a5:e5:3c:bd:26:d2:99:40:c5:a8:ec:6d:30:
5b:b1:80:1f:6e:e4:10:f1:77:a6:00:a1:c7:32:50:
8a:bc:cb:dd:49:87:2a:ca:0e:61:d6:a5:7c:ee:7f:
6b:c6:f4:47:28:0b:ba:99:c9:e4:b6:39:9e:ae:28:
c4:95:4d:40:7d:21:cb:fb:46:aa:93:77:03:a9:90:
17:3b:94:51:41:e7:d7:f5:1d:3b:6d:7e:81:74:e4:
55:ad:aa:33:ec:1a:7a:c7:cc:b2:a1:b5:0d:4b:15:
21:7f:4c:d8:2d:31:a9:2b:38:b5:0f:01:45:f5:6f:
5d:78:b7:c5:79:a3:2d:c7:7c:81:9e:c0:2c:5d:d6:
21:ed:07:34:e9:43:d6:6f:c1:ca:e7:51:3c:3e:5b:
2b:7e:26:54:25:36:1a:88:23:d8:ac:55:24:86:35:
7f:d0:2b:24:4a:1e:32:16:ee:1f:7c:88:e6:0c:99:
c6:bd:54:d9:9b:a4:23:c1:b6:b7:09:95:27:e6:d5:
a2:53:f2:6e:68:01:26:b8:ad:cb:28:f7:cb:13:86:
06:b7:ef:9d:9c:93:2d:79:c5:48:7f:42:23:33:3b:
b8:12:a6:48:83:27:87:d3:c3:9a:7b:24:43:3d:b8:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:6F:CD:61:DE:52:47:FC:32:74:CE:12:DC:6A:D6:50:9C:6E:D5
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6b:61:4b:02:7f:19:ae:6a:cf:e7:2a:4a:8d:80:9f:e3:a0:
e9:01:28:89:05:4b:fb:3d:bb:f5:ef:49:4c:99:94:40:7e:58:
d7:30:2b:fd:ec:fd:c9:05:c2:89:f9:e8:54:5b:3c:14:9f:81:
f4:04:56:cb:db:46:f7:22:d4:5b:dd:78:8c:05:56:fa:ea:c4:
ba:c9:78:73:a2:21:de:63:70:1c:f5:5b:0a:95:13:d1:88:81:
5f:a1:9e:17:9f:83:28:96:7a:03:e1:c3:8d:23:c2:00:dc:ad:
83:66:e1:bf:c1:9d:21:d7:b9:b5:60:15:fb:04:a2:89:44:49:
bc:6a:86:54:7c:f6:31:72:5a:fa:b8:4b:0c:c0:96:7e:03:d8:
76:7c:e7:3f:7c:94:dc:c1:17:85:47:0c:f0:6e:6e:90:28:a5:
67:9c:a1:28:75:99:be:a7:05:87:de:48:c7:61:aa:13:cb:14:
3f:77:2e:1f:fc:59:d7:55:14:cf:1b:8b:05:5c:fa:b5:44:bb:
c1:d7:2d:37:fc:4b:91:81:01:58:22:8e:79:a6:14:e9:10:94:
ba:76:62:73:cd:dc:e2:4c:c3:70:b3:a4:03:bf:75:80:2f:93:
c4:2f:80:53:c4:19:4a:3f:59:c7:35:71:65:98:e3:6a:d7:e7:
36:1c:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:38 2026 by rpki-client