Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: 33F+wyaPX2CtVhwqnQmA3SSK54FV/duGgXMxjTabMgc=
Subject key identifier: DF:48:C2:2A:24:81:2B:7E:95:94:E7:CD:B5:F5:0E:C9:6B:D9:1D:FA
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019E1F7F23C30980F654378FB50820D08455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 04:01:26 +0000
Manifest this update: Wed 13 May 2026 04:01:26 +0000
Manifest next update: Thu 14 May 2026 04:01:26 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: IThfwyXWAW3lIvXeH0nIUmEGVC7elIi+LV9OKppEyzE=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:23:c3:09:80:f6:54:37:8f:b5:08:20:d0:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: May 13 04:01:26 2026 GMT
Not After : May 14 04:01:26 2026 GMT
Subject: CN=df48c22a24812b7e9594e7cdb5f50ec96bd91dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:f3:07:cb:6a:13:7b:09:29:9d:cd:8b:a3:
a1:05:37:c5:40:f5:a5:c5:f5:34:5f:3e:e7:19:82:
db:b3:bf:4c:17:22:d6:93:8d:42:be:99:d0:88:54:
18:5c:29:74:f2:0d:a3:25:54:55:f1:ab:91:87:99:
6e:8c:b3:8e:2f:8d:fe:77:12:13:40:95:17:58:fb:
0c:0b:a2:50:5f:a8:b9:72:77:d8:02:b7:3b:7d:8e:
fc:d8:3b:e1:bf:f0:32:46:f9:7a:ed:3b:46:ea:ec:
2c:3d:7f:87:2d:19:a6:66:3f:cc:e7:e0:32:23:1d:
0f:b0:f2:bb:42:13:97:3b:10:71:1d:e4:9b:fe:62:
5c:f5:56:35:ba:d6:62:e7:5a:d7:18:31:01:50:6e:
e7:40:49:c7:e2:6a:70:a1:3f:ab:be:c1:1f:40:29:
dd:4f:89:14:74:80:64:3c:43:e6:da:a6:ec:35:77:
9d:20:2e:a8:c9:81:51:df:95:c4:ab:7b:30:74:ec:
95:52:dd:6a:3c:38:46:15:c5:65:2d:a0:cd:fa:7e:
52:a1:6a:c5:80:30:d5:1d:cc:5c:a6:fb:19:87:40:
1f:43:3b:4b:38:e3:64:6f:a9:7e:f2:74:a6:49:b8:
e5:c7:f1:aa:8f:88:74:6f:2a:a7:de:ab:18:a9:d0:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:48:C2:2A:24:81:2B:7E:95:94:E7:CD:B5:F5:0E:C9:6B:D9:1D:FA
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:3a:a4:47:5d:0d:79:f7:b8:de:30:01:14:8d:43:d4:aa:
e8:ae:3d:19:aa:0a:5c:a5:f7:12:26:b7:26:54:3b:bb:e2:c3:
5b:40:15:89:29:de:0a:23:a8:57:c6:b2:52:cd:3a:4f:1f:e9:
34:12:e8:3f:68:6e:52:82:b3:67:d5:84:4b:a1:9b:70:0e:a4:
4d:0d:0d:19:32:46:9a:84:74:fa:8a:4a:d2:18:80:05:e2:2c:
17:07:fa:62:5b:3a:bd:f6:54:ac:df:f9:88:c8:89:19:4e:78:
4a:7d:d6:4f:a9:01:cd:57:de:1c:15:43:70:b9:20:41:1a:57:
ca:12:d2:db:f1:fd:0f:aa:4d:3c:a8:bf:cc:d7:98:22:b9:15:
8f:fc:e7:87:65:bb:bf:2d:40:5c:b2:3e:7e:36:b8:cf:e2:d2:
62:10:b5:8b:5f:85:b1:55:8a:4c:d9:5a:c5:cc:3d:a2:d6:47:
8b:14:eb:f3:cd:f5:63:fa:a1:44:ee:33:80:e2:9f:a9:49:c6:
ba:05:c3:69:45:59:78:c9:f2:69:02:f3:55:76:19:8e:24:05:
05:f5:c8:03:23:ff:9d:d8:76:a5:90:80:2c:e1:54:15:83:91:
84:f5:a3:9a:af:e9:5a:4f:d8:28:3f:20:88:db:7e:56:3d:dc:
55:ce:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:40 2026 by rpki-client