Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: y0Q9OWQv3ehqLC/ukKt5408sJS/aB8uAF1QB0sG3dtY=
Subject key identifier: B9:69:AB:9E:FE:C2:21:55:5B:9D:FE:AE:55:3E:C6:81:9D:05:6E:BB
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01A10324E8BA1F3CB4107B3D376E2225DA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1A8B
Signing time: Sat 03 Oct 2026 19:01:52 +0000
Manifest this update: Sat 03 Oct 2026 19:01:52 +0000
Manifest next update: Sun 04 Oct 2026 19:01:52 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: 16NPcOQZn5SRvuj8/rqsaXuWAzpxd0iQ3QLQq8dA+Gw=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:e8:ba:1f:3c:b4:10:7b:3d:37:6e:22:25:da:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Oct 3 19:01:52 2026 GMT
Not After : Oct 4 19:01:52 2026 GMT
Subject: CN=b969ab9efec221555b9dfeae553ec6819d056ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:61:b0:72:3d:22:9c:d7:1d:d5:27:64:e0:3f:
49:32:ef:f4:2b:09:9b:a8:72:41:ef:bf:7a:bf:67:
c1:e2:11:8a:3b:7f:15:75:1c:b2:0c:92:62:7e:ff:
98:c1:29:db:42:ff:0e:f4:b6:b1:04:7b:76:5c:f3:
3d:de:e2:d6:65:4b:b3:7f:f0:ba:9e:b5:f8:0f:bf:
24:2f:d2:37:d3:ca:c7:05:78:f9:b4:86:12:61:d8:
f6:44:42:97:81:2f:23:ed:60:75:6f:76:a4:70:8a:
7f:0e:57:60:fe:1a:99:75:42:7c:81:9e:31:cb:a6:
54:39:58:de:db:28:11:0b:82:e6:2b:21:fa:df:49:
1a:1d:6e:42:d3:4a:7e:f4:cb:39:2d:6a:53:47:10:
66:33:96:0e:e7:4d:a6:ea:42:09:e3:bb:33:b9:73:
38:ef:b8:b5:e0:26:8b:d1:d2:f4:95:cf:40:d1:6d:
41:16:a0:8f:ea:96:10:39:ca:79:ca:24:df:86:1f:
b2:76:b9:0d:3b:cf:34:9e:65:b6:7c:c9:27:bf:38:
4b:b1:77:82:8a:a3:4b:48:29:29:5c:c9:ec:7f:63:
51:97:d5:8b:8d:e9:75:c9:b1:33:a8:51:7c:a6:cf:
aa:28:09:12:19:63:60:da:f0:1f:3a:ca:75:ce:eb:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:AB:9E:FE:C2:21:55:5B:9D:FE:AE:55:3E:C6:81:9D:05:6E:BB
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a0:fd:fa:59:89:a3:2d:f6:04:42:81:87:5d:49:17:9a:89:
21:21:78:e4:01:fa:55:2c:c8:9b:3d:3a:ee:6e:2f:f4:84:7b:
43:43:d9:d8:2d:46:42:da:fc:f6:2d:01:b1:3b:52:30:7b:11:
51:57:01:8d:dc:19:88:65:fc:86:df:98:2e:0f:7c:5f:66:b8:
e2:b0:96:2d:3f:53:a5:89:5b:de:29:db:05:a2:75:58:ed:d3:
53:c5:7b:9a:ab:7a:cd:eb:4b:2c:8c:0e:34:66:24:60:a2:95:
b3:35:e3:47:68:bd:65:0f:f1:21:e4:da:44:53:0b:5b:b5:bb:
49:af:27:4e:47:a7:cd:2c:8c:de:c0:95:8f:d4:6f:41:de:76:
6f:84:28:0c:54:cf:fd:ca:d9:4b:7c:e3:11:35:c4:a5:dd:0a:
0d:54:e5:c1:73:0a:fd:5c:63:f6:cf:e6:57:4b:03:1b:05:28:
7f:48:e2:89:0e:8f:86:68:06:89:5b:8e:70:40:ca:5d:c6:24:
8b:6b:74:02:c3:0a:f7:ca:37:46:0a:58:dc:28:41:09:50:2b:
24:55:29:69:98:5d:93:2b:44:b5:45:ab:fa:f9:b9:2b:c7:00:
7c:64:14:e1:1d:c9:b8:ac:40:56:d5:3e:85:a5:46:0f:5f:c8:
61:88:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:22:57 2026 by rpki-client