Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: gRSEIsH2OROTqix19V+pTLe2FEWJEobgCP6vCweLBQU=
Subject key identifier: 79:8E:B4:83:91:95:52:7B:ED:20:9B:99:0D:0A:0F:3A:EB:EE:E9:DB
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019D284E3D0CC8A5682E99BBA49FB4EEA114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 04:01:49 +0000
Manifest this update: Thu 26 Mar 2026 04:01:49 +0000
Manifest next update: Fri 27 Mar 2026 04:01:49 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: RzjdSSbUUU4/TuzoxCRsmlW6NdioUdQhvR2GS8sujlM=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3d:0c:c8:a5:68:2e:99:bb:a4:9f:b4:ee:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Mar 26 04:01:49 2026 GMT
Not After : Mar 27 04:01:49 2026 GMT
Subject: CN=798eb4839195527bed209b990d0a0f3aebeee9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:36:14:db:55:61:90:df:1c:17:f2:10:8e:
5f:fb:b7:2e:42:8a:34:1c:55:02:d0:8b:07:be:44:
e6:95:25:56:13:b5:ef:85:97:ef:9c:b0:cc:67:e4:
c1:cb:e1:c3:df:ab:a4:78:e4:2f:e7:00:67:6c:1a:
ee:97:43:7e:a0:89:c9:fc:86:46:e1:12:f0:d7:5e:
81:cf:2c:30:be:4b:5b:57:8d:5b:9a:92:75:ad:86:
a0:b0:dc:36:a7:8b:4f:a6:66:0a:6f:0a:b1:c5:5d:
55:82:88:9d:67:02:eb:66:a0:c3:7d:78:94:bd:7e:
16:ef:39:26:8a:cd:dc:60:92:da:fd:6f:93:b8:fa:
26:9c:d7:93:c8:3f:fb:19:b5:14:9d:a5:5b:6e:a4:
8e:15:58:b3:2d:88:03:b2:da:e5:ae:2f:55:93:66:
7b:8e:a1:ce:1a:2c:2f:c8:45:d7:28:17:32:c5:7b:
2b:91:b6:ad:c9:f7:bf:43:cc:ff:93:de:53:15:49:
85:90:4b:f9:2e:8a:8f:8c:52:74:af:54:5a:62:1c:
47:53:32:99:cd:7e:60:dc:d3:c6:82:3a:61:4c:5a:
c7:3d:fb:fd:fb:ac:33:02:09:c8:7f:0e:c4:ad:0f:
0f:bf:3e:67:fa:c4:e7:98:75:2f:53:38:e9:f5:bf:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:B4:83:91:95:52:7B:ED:20:9B:99:0D:0A:0F:3A:EB:EE:E9:DB
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:33:9a:ef:69:5a:dd:27:9d:37:88:97:91:9a:d6:46:8f:47:
66:b7:88:ef:08:39:70:bd:99:d5:8a:09:91:75:9d:50:28:35:
36:39:ab:32:74:fd:ab:96:3c:05:27:06:e0:fe:72:e0:43:10:
ba:cb:b7:b7:7d:45:cd:b3:58:6f:e7:a6:1c:a9:1a:67:a7:f4:
d7:28:11:c9:f4:66:ea:a9:3b:2f:9e:9d:cf:50:a1:e0:04:5b:
bc:9e:5a:2f:54:03:77:12:07:1e:4b:84:22:68:3e:ac:f8:ea:
00:ce:00:db:4a:60:b4:08:17:94:4a:e9:73:55:d8:f6:90:9e:
a4:82:88:17:62:62:20:5d:6a:86:10:29:9b:3e:e6:e0:82:ce:
39:fa:bf:d5:a7:35:63:c1:98:09:71:28:67:0a:c4:17:29:e3:
eb:db:b9:97:50:f9:ef:fc:d0:dd:ee:1c:1e:d4:3c:14:6a:92:
a7:e2:63:de:11:d5:43:b6:9c:e7:fb:87:e2:68:ac:4a:a7:94:
e4:5f:f4:14:0c:85:2b:42:02:7a:47:a8:09:3e:9a:9f:01:c1:
fe:f6:1b:a1:dc:fa:ce:17:a6:8e:a1:a2:df:63:f2:37:60:35:
ee:be:2f:3a:5c:69:88:70:63:ab:87:ba:46:b2:52:32:1f:aa:
d3:8c:12:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTj0MyKVoLpm7pJ+07qEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjYwMzI2MDQwMTQ5WhcNMjYwMzI3MDQwMTQ5WjAzMTEwLwYDVQQD
Eyg3OThlYjQ4MzkxOTU1MjdiZWQyMDliOTkwZDBhMGYzYWViZWVlOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TE2FNtVYZDfHBfyEI5f+7cuQoo0
HFUC0IsHvkTmlSVWE7XvhZfvnLDMZ+TBy+HD36ukeOQv5wBnbBrul0N+oInJ/IZG
4RLw116BzywwvktbV41bmpJ1rYagsNw2p4tPpmYKbwqxxV1VgoidZwLrZqDDfXiU
vX4W7zkmis3cYJLa/W+TuPomnNeTyD/7GbUUnaVbbqSOFVizLYgDstrlri9Vk2Z7
jqHOGiwvyEXXKBcyxXsrkbatyfe/Q8z/k95TFUmFkEv5LoqPjFJ0r1RaYhxHUzKZ
zX5g3NPGgjphTFrHPfv9+6wzAgnIfw7ErQ8Pvz5n+sTnmHUvUzjp9b8WXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmOtIORlVJ77SCbmQ0KDzrr7unbMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzOa72la
3SedN4iXkZrWRo9HZreI7wg5cL2Z1YoJkXWdUCg1NjmrMnT9q5Y8BScG4P5y4EMQ
usu3t31FzbNYb+emHKkaZ6f01ygRyfRm6qk7L56dz1Ch4ARbvJ5aL1QDdxIHHkuE
Img+rPjqAM4A20pgtAgXlErpc1XY9pCepIKIF2JiIF1qhhApmz7m4ILOOfq/1ac1
Y8GYCXEoZwrEFynj69u5l1D57/zQ3e4cHtQ8FGqSp+Jj3hHVQ7ac5/uH4misSqeU
5F/0FAyFK0ICekeoCT6anwHB/vYbodz6zhemjqGi32PyN2A17r4vOlxpiHBjq4e6
RrJSMh+q04wStw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:02 2026 by rpki-client