Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: AE43/vlidwNn4xb/j9SXI+Emw7PBRGX22Db7/NPIqnc=
Subject key identifier: A4:7D:04:A8:CB:63:22:B9:5F:5A:56:5F:6F:48:FA:0E:F7:0F:79:D1
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019CAAC6FBEA5403E16AB8D82F65A0290DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: OBEbCeyIPcqdtHv+X/zfyD8R0uUitdemGiAd2NSemSs=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fb:ea:54:03:e1:6a:b8:d8:2f:65:a0:29:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=a47d04a8cb6322b95f5a565f6f48fa0ef70f79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:95:16:80:c9:37:f9:2d:ee:55:04:4b:b0:
c4:27:69:80:31:f5:37:df:01:f5:b1:37:f4:86:05:
96:df:3b:cc:cf:8f:40:e6:5a:2c:a1:28:41:88:bf:
e3:a1:10:d0:ff:9f:50:2a:2c:a2:60:10:92:3c:be:
a2:fe:32:d4:a7:3d:62:18:6d:a5:05:d0:4e:9c:11:
c2:88:5a:80:85:4c:2c:c8:a1:af:13:7d:70:31:21:
66:04:fe:cb:5c:af:04:56:c5:cd:68:d7:89:6a:43:
a3:a3:6e:c0:7a:03:b8:ba:71:f8:50:bd:a3:59:00:
1e:77:50:50:15:5b:9a:54:6d:69:36:66:f9:b9:2d:
b3:13:da:02:3f:ed:a9:47:b1:62:01:a6:e3:33:42:
53:5e:ed:66:d3:6b:af:32:4e:dc:20:b0:c2:cd:dd:
2c:e0:b6:d0:a4:93:82:a4:4f:1c:25:51:03:5b:59:
2b:ba:de:b9:81:99:93:bc:68:97:6d:fc:86:ce:42:
78:f8:df:11:a4:50:74:97:a4:ac:c4:e5:ee:47:87:
87:1e:05:08:04:f5:ac:68:7c:c9:bf:b0:b5:b6:3f:
c1:50:eb:ee:2e:a9:fc:87:0c:48:d7:fb:cc:2c:01:
c1:d0:3e:7b:7f:f9:fd:5d:47:6d:c3:03:26:95:89:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7D:04:A8:CB:63:22:B9:5F:5A:56:5F:6F:48:FA:0E:F7:0F:79:D1
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:ae:7a:1e:79:19:8c:7c:c0:60:7d:63:46:bd:f8:7e:d0:
d5:fe:73:6a:1a:98:57:42:cd:5d:87:d7:92:10:8f:58:cd:51:
80:c7:fc:9d:73:f9:de:85:60:f6:03:d6:d5:a0:e0:6c:14:6b:
df:1b:cd:9a:4f:5c:09:09:e2:a0:b5:45:d2:dc:5c:db:3f:e2:
b1:aa:ef:73:92:1b:70:c8:c4:24:d7:58:73:5b:04:b7:1b:21:
a0:5c:5e:26:f3:73:98:53:92:77:a8:20:53:10:b9:bb:af:49:
83:9a:49:e1:3d:c1:89:8c:5e:f1:3f:af:b4:ff:ca:1b:7d:3a:
02:e2:82:36:fc:e7:0d:81:c3:45:3a:5a:6e:ad:bf:f7:2b:81:
b4:75:3d:d2:a6:46:b4:dd:95:ab:0c:ae:1d:be:4a:cf:32:3c:
2f:e6:c8:17:0f:23:95:2a:89:20:1a:fc:af:77:19:31:2a:df:
3e:a7:6f:af:a4:05:17:89:f8:65:eb:a1:90:57:fd:bd:9b:16:
11:6c:6f:16:a9:ed:e1:ad:46:98:31:8f:7e:c6:d7:23:9c:4a:
4f:56:02:53:45:4f:6b:8d:e8:fe:6e:08:72:e4:65:1a:11:e7:
c1:d9:c4:96:57:10:ec:eb:7c:c1:28:01:49:cf:8f:2a:df:77:
4d:36:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:59 2026 by rpki-client