Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: U3bZK1NKHh9k1mYY5wZoz9rnOMsKbz68jVHUc4AJfnA=
Subject key identifier: 42:3E:1C:90:6D:25:70:6E:89:88:A5:E3:A9:89:2F:BC:0D:2B:C7:AE
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019D9A3EEAB0B9ACB143BECF5A7C171920CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 07:01:47 +0000
Manifest this update: Fri 17 Apr 2026 07:01:47 +0000
Manifest next update: Sat 18 Apr 2026 07:01:47 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: PSloqKXshLGcP/UrYGndY5yd8bkWi5RLWH9BRjgdvf4=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ea:b0:b9:ac:b1:43:be:cf:5a:7c:17:19:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Apr 17 07:01:47 2026 GMT
Not After : Apr 18 07:01:47 2026 GMT
Subject: CN=423e1c906d25706e8988a5e3a9892fbc0d2bc7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:9f:ff:20:78:39:ba:a4:2f:e9:93:69:ae:
42:b4:55:30:9a:0f:2f:94:9f:84:56:6d:c1:95:2e:
7c:ac:1f:2d:98:23:3c:b0:70:8a:ef:0e:c5:23:96:
5f:a6:bb:a9:c9:10:aa:75:f6:79:76:57:04:30:e9:
f4:b9:39:8d:85:19:34:5e:95:8f:54:41:6a:46:22:
e3:5e:07:85:f0:43:a3:dc:27:12:8c:4d:df:d9:2f:
02:2c:25:89:03:de:76:43:ad:1d:00:36:d5:71:15:
33:d4:7b:85:63:9f:bd:71:08:bd:ea:18:9b:9a:fc:
95:57:07:66:d9:f6:04:0d:d5:32:df:f7:d5:78:b3:
e7:90:8d:1b:64:1c:2e:5a:72:8e:b7:79:57:63:8d:
9b:2b:f7:55:53:0c:68:0b:d3:dd:74:1b:3b:37:37:
5e:f0:8a:30:e8:ba:8a:89:6b:eb:17:b4:d7:a9:6a:
5d:93:e1:ea:90:a4:ab:a3:62:68:1e:ec:aa:f6:bc:
5f:70:57:d1:a3:43:ad:1e:db:46:71:a4:23:82:24:
cc:77:98:d5:28:e4:8d:f8:2f:d2:44:7c:98:ea:1b:
83:0e:98:cc:2c:93:da:50:33:17:c3:7d:87:53:3b:
99:15:5a:7c:bf:ac:c1:c6:ed:04:a8:55:94:5d:26:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:1C:90:6D:25:70:6E:89:88:A5:E3:A9:89:2F:BC:0D:2B:C7:AE
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9d:75:68:f1:b7:59:36:7c:be:6a:3e:09:39:45:37:54:02:
0b:44:80:2a:41:2c:b7:7a:6a:74:7d:17:b3:0f:f7:f4:c1:77:
c0:88:10:11:25:48:a7:56:63:3d:4b:30:2a:e9:2c:8f:36:14:
96:b9:65:46:8f:04:75:95:29:ec:41:98:ac:92:e1:0a:dc:07:
c7:67:b1:63:a7:fa:3c:4c:57:38:9c:ba:1d:6e:e1:df:57:14:
ab:61:0c:92:22:ae:6c:c3:65:9f:26:b2:a4:9c:53:1d:2b:75:
f2:01:2f:b9:78:03:ca:9b:cf:85:be:86:1b:28:98:df:21:f2:
ec:6f:e1:c7:ab:39:b4:83:b6:ee:fa:f7:78:10:69:aa:79:0c:
56:90:27:2b:00:2d:73:48:9c:b9:a1:2a:92:63:f2:00:f1:e3:
4b:4b:65:89:c7:1c:0b:d5:31:2a:09:0d:34:df:95:7c:21:59:
75:87:e3:8d:50:d7:03:15:f2:6b:c3:39:a4:61:2b:43:b6:19:
2c:35:cb:10:66:c7:be:b7:be:69:64:03:c6:fe:60:f9:b3:a0:
4e:ed:86:ee:e9:86:7e:ce:b4:ac:6b:b1:8a:23:83:e7:9a:d0:
3a:52:cd:49:4e:6e:bf:fe:df:32:bb:3b:c0:cd:ab:36:48:7a:
f1:b2:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:42 2026 by rpki-client