Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: aejqL+35V7jOdL1srpBlhUwrF4lXiFKoE9wZ4gfoqVY=
Subject key identifier: 0E:07:2C:04:CA:93:95:F0:BE:F2:3B:BC:D6:6F:BF:AC:0D:AE:5D:6B
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019F8E6BEA34E9B211C599B647A6CC504A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 10:01:04 +0000
Manifest this update: Thu 23 Jul 2026 10:01:04 +0000
Manifest next update: Fri 24 Jul 2026 10:01:04 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: njjjd7gpMgYNViyigdxPFTjmmD/yWSGrU+5yPFlkXlo=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:ea:34:e9:b2:11:c5:99:b6:47:a6:cc:50:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jul 23 10:01:04 2026 GMT
Not After : Jul 24 10:01:04 2026 GMT
Subject: CN=0e072c04ca9395f0bef23bbcd66fbfac0dae5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:8e:67:54:a6:8a:54:19:10:80:6a:cf:cf:
84:ce:7b:6d:a3:ba:28:c9:70:45:93:84:f0:04:ac:
25:d9:2b:4d:1e:7a:0d:dc:10:f4:67:4d:11:32:a9:
de:c0:f6:c9:31:7e:4f:1b:09:b8:98:f6:ea:02:c4:
55:56:84:ae:c9:76:c4:ab:27:d2:d9:e9:cb:67:04:
bd:85:3f:85:8c:cf:3f:17:52:e2:26:90:52:f3:74:
ed:09:2c:53:ec:f5:91:85:31:85:77:21:a2:33:5b:
d4:47:b0:11:11:23:90:b3:9c:d0:06:e3:3c:5a:f6:
10:e1:21:25:e1:45:b7:d7:7c:19:6c:3f:53:4b:95:
8d:b1:b7:af:cd:35:8b:98:40:e3:70:20:ed:38:12:
ac:bc:a3:f8:19:ab:9b:2b:4d:27:86:5f:29:7c:8f:
7f:09:39:73:0d:64:44:d3:0a:cd:39:60:c5:84:f8:
10:c1:50:d9:f3:c6:72:c1:31:bd:56:ce:2c:64:df:
59:3a:84:aa:ea:ee:ba:a2:21:11:d0:75:9f:e0:b8:
f5:b7:9c:f8:35:8a:c8:02:72:fa:ac:5a:97:c6:ed:
bb:a7:7f:c5:e9:4e:28:35:60:66:52:00:03:6d:32:
cf:d7:0a:4a:a5:b8:c8:10:21:b1:c2:e0:cf:95:37:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:2C:04:CA:93:95:F0:BE:F2:3B:BC:D6:6F:BF:AC:0D:AE:5D:6B
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:94:b6:fe:bd:e4:bf:35:8b:9a:18:e8:6e:ea:ce:61:fe:
97:af:f2:24:de:ea:45:94:16:2f:0f:13:ee:63:a9:9a:28:e7:
a2:d0:6b:a2:02:e7:de:8a:ee:dc:76:9d:b9:f1:d8:03:14:df:
4b:c9:94:e0:3e:aa:8b:a0:28:5b:a8:57:ad:54:c7:73:aa:b0:
66:fd:24:20:97:f9:83:e5:7d:b0:d2:59:fa:9a:8e:65:7f:ce:
76:35:5a:3f:03:ac:64:89:06:a9:9f:28:46:68:57:a6:1d:e0:
70:a2:f6:ee:6b:16:03:28:f1:4a:1f:21:d8:fd:6d:bf:f7:50:
ef:33:68:54:48:97:64:e1:f3:1e:11:a3:d2:36:c2:f9:10:1d:
9e:55:29:ce:b1:02:99:71:09:9d:8b:b2:ad:c1:fe:b0:24:e8:
4f:31:5f:b3:e5:dc:59:40:f2:d1:61:2c:c2:05:f6:9d:eb:35:
65:f8:30:b5:80:a5:c9:f7:17:14:ba:78:7b:95:4b:6b:97:6e:
37:49:68:c9:f5:5e:8b:74:f5:80:2e:ea:26:63:8b:5d:e1:e8:
a2:ba:7c:ba:1d:a3:1c:8e:54:65:01:c9:44:10:a8:fc:24:58:
02:7e:d4:5a:c7:43:a2:63:64:6b:46:e3:e2:ac:f2:fe:53:75:
ab:00:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:33 2026 by rpki-client