Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: K7b0wpRmFUXWAfVevGrdqyUE+Uylc76aC1ytL4CNyxg=
Subject key identifier: FF:B6:55:8C:89:6E:95:7F:BE:60:9B:9A:A3:37:5C:7B:F0:EE:19:63
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019EC1B75A40ADC2188664ADD150B91D74C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 16:01:19 +0000
Manifest this update: Sat 13 Jun 2026 16:01:19 +0000
Manifest next update: Sun 14 Jun 2026 16:01:19 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: u/rk4wQiLqk7qbz4EzC1fNK4sCY+dEV8hZYcSFml5Hc=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:5a:40:ad:c2:18:86:64:ad:d1:50:b9:1d:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jun 13 16:01:19 2026 GMT
Not After : Jun 14 16:01:19 2026 GMT
Subject: CN=ffb6558c896e957fbe609b9aa3375c7bf0ee1963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:e4:d0:5c:bc:36:09:aa:71:8d:47:f2:a9:
d4:3c:1c:01:80:6b:85:67:eb:e6:d1:c9:00:d3:f4:
f4:ee:7a:97:64:17:73:f3:35:0c:82:93:f8:a0:8b:
f9:2f:bb:cc:25:42:d5:f5:e7:c1:92:d2:93:3a:dd:
44:75:8f:36:6b:4e:05:6f:60:ed:bf:12:8f:81:a3:
e2:ee:9a:a9:cf:2f:2a:19:89:b9:88:36:f4:12:25:
93:cc:dd:3a:ed:49:c6:be:6b:ed:4f:d4:12:f2:75:
c1:64:ed:e9:85:4b:92:6c:ba:90:8f:cf:a0:c1:4c:
0c:f2:6c:55:45:2e:42:ee:5f:24:d3:f9:3a:77:0b:
7d:09:a0:f2:ee:68:9e:c7:49:43:63:7e:3f:10:4e:
c2:e2:2f:7d:c9:80:df:0a:2e:4e:70:1f:78:98:fb:
db:6e:f5:79:b4:c1:19:89:6e:71:bf:21:48:9f:21:
64:5a:86:7d:4b:a2:c4:4c:2d:32:c9:65:4b:dc:b6:
00:87:08:a5:cd:6f:c5:23:32:d3:cf:08:79:1b:c1:
eb:09:31:53:30:2b:c6:9a:3f:79:9d:c1:8d:d9:cb:
5c:8d:9a:b7:59:ba:f7:fb:00:5d:0f:46:d8:6d:38:
07:a3:a3:98:38:cc:b8:c9:29:08:2c:68:bb:69:e2:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B6:55:8C:89:6E:95:7F:BE:60:9B:9A:A3:37:5C:7B:F0:EE:19:63
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ca:4b:3a:81:9b:c6:52:11:18:7d:f7:57:cf:88:02:7a:5e:
eb:e0:d3:21:77:9a:df:ff:55:92:2e:b1:db:c0:8b:26:64:a3:
7e:8c:41:da:bb:ee:1c:18:f7:59:23:6e:bd:5f:bf:21:ba:29:
1a:cd:77:0b:b1:67:fc:88:ec:54:7b:f5:ea:cb:47:2d:ae:0e:
67:96:75:66:d7:fb:e7:4c:3e:fc:30:37:ff:b2:80:ba:30:12:
44:af:94:4c:6e:72:10:20:ce:d1:93:59:8f:ae:1b:c4:e1:67:
8a:7f:bc:a7:ec:57:90:2e:86:67:58:1d:49:e8:8e:42:8e:9c:
92:96:dd:ba:bb:30:1c:ee:2a:1c:d9:e9:94:8d:47:71:b8:06:
f3:31:0f:e6:ff:21:f4:4a:80:70:73:56:5e:02:a8:42:30:63:
67:97:7c:5d:5c:36:7e:a5:4a:97:1f:8c:50:cb:da:5c:b2:ab:
c9:70:51:4c:5e:cd:11:0c:da:c1:df:25:b5:11:d0:12:94:9d:
cf:14:c1:97:c2:da:64:fa:44:98:c8:b0:33:6c:a7:31:b8:c9:
82:aa:5a:e6:bc:c8:4d:45:0e:09:45:4b:0c:92:a6:e8:07:97:
b4:0c:1f:22:0e:3f:56:3a:6d:94:d6:85:e2:04:27:e5:e7:0c:
54:a6:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:04 2026 by rpki-client