Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: xS9pUVEZKi8PjbVcgld0pi31FdzzjTw1cOs5jY6QcZo=
Subject key identifier: 6E:C5:6C:D8:05:A6:13:4E:2C:D7:87:56:51:B7:AC:8A:E2:A3:02:A8
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01A0D8A8180B9B98F3D3630AEA7AC01749D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 13:01:29 +0000
Manifest this update: Fri 25 Sep 2026 13:01:29 +0000
Manifest next update: Sat 26 Sep 2026 13:01:29 +0000
Files and hashes: 1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: i7/sgKchgoRdmKA/fhbH6lx2Pd6KVjr5sTDIRWVZZvE=)
3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:18:0b:9b:98:f3:d3:63:0a:ea:7a:c0:17:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Sep 25 13:01:29 2026 GMT
Not After : Sep 26 13:01:29 2026 GMT
Subject: CN=6ec56cd805a6134e2cd7875651b7ac8ae2a302a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:21:62:4b:d0:12:13:19:8a:38:e9:18:2f:
6f:ae:3a:7f:21:2c:7a:a0:ed:0f:d8:d8:3e:11:92:
33:61:85:99:8a:70:3c:72:15:d9:e1:fb:9d:e2:d5:
9f:a3:ec:67:cb:dc:e8:2f:41:35:a9:40:2f:83:fb:
48:e8:5b:ad:93:f6:25:02:08:49:60:79:29:40:50:
9d:45:17:ec:7d:0e:04:ee:9e:7d:71:0d:4f:0f:b9:
d4:68:1e:97:d8:be:10:4f:15:e9:91:a4:fe:45:7d:
73:91:6a:86:11:69:fd:48:f4:5a:1b:07:5d:91:cc:
89:a7:4e:7d:e5:7e:3c:25:60:0c:ce:6b:f4:35:97:
cf:de:cc:83:b3:2d:da:91:cb:f0:1a:2b:e0:a5:f5:
a3:43:02:b9:65:b8:bf:2f:3c:8f:06:a3:e2:96:81:
0c:12:1c:70:07:d1:f4:c7:86:31:24:d1:1d:34:b9:
4e:e5:d9:d3:aa:26:34:74:6d:08:9b:42:21:08:a9:
3e:00:2d:fe:42:75:5b:5a:7d:03:56:4d:ab:d2:4c:
6f:d0:07:3a:62:f7:fa:65:c0:ad:14:54:a2:b4:8a:
5e:ec:9f:06:b6:c5:32:36:6f:17:dd:05:b5:f6:2e:
0a:bc:ae:cc:26:8b:63:3f:c8:e9:c5:d4:39:32:bd:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:6C:D8:05:A6:13:4E:2C:D7:87:56:51:B7:AC:8A:E2:A3:02:A8
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:f3:41:39:d6:85:d1:d2:2c:93:4d:4c:d2:f7:83:03:88:
9d:fb:29:5a:1f:24:ca:9f:4a:03:22:12:6e:92:33:fe:81:16:
34:83:f7:36:fd:bd:a7:c1:49:09:9e:21:35:42:fa:e6:02:df:
7a:0b:b1:1f:3a:fb:80:1c:ef:8d:48:5f:9d:98:df:d7:32:da:
39:43:32:16:a9:dd:47:dc:c7:f7:e8:a2:45:a6:cd:86:86:11:
b9:60:10:f4:76:29:21:a2:d1:be:a2:a7:54:9b:75:8b:45:ef:
ce:d6:c1:dc:fa:1a:16:87:60:9b:d7:c3:ec:d2:51:8c:4a:56:
c2:bd:33:0e:93:82:1e:be:c8:1c:e6:d5:2c:02:12:1f:9f:d5:
fd:65:78:b6:d6:22:a5:da:d1:7c:6b:4a:d5:f6:27:7e:f8:9c:
fd:86:73:c4:22:c5:57:3c:f1:f4:b0:d9:8c:51:89:a0:42:a2:
b0:04:3e:d7:60:06:82:db:ff:af:fa:1a:16:3c:ec:bd:10:72:
32:6a:92:6b:a7:8f:24:99:ef:1d:d2:4c:66:e3:f8:68:e1:96:
76:52:38:23:8d:a2:6a:06:e7:3d:ba:01:79:32:ab:8f:cc:4a:
b2:4f:37:17:18:79:86:c1:ef:ee:24:1f:fa:cf:b0:0b:e7:69:
23:6d:c6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqBgLm5jz02MK6nrAF0nQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjYwOTI1MTMwMTI5WhcNMjYwOTI2MTMwMTI5WjAzMTEwLwYDVQQD
Eyg2ZWM1NmNkODA1YTYxMzRlMmNkNzg3NTY1MWI3YWM4YWUyYTMwMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntohYkvQEhMZijjpGC9vrjp/ISx6
oO0P2Ng+EZIzYYWZinA8chXZ4fud4tWfo+xny9zoL0E1qUAvg/tI6Futk/YlAghJ
YHkpQFCdRRfsfQ4E7p59cQ1PD7nUaB6X2L4QTxXpkaT+RX1zkWqGEWn9SPRaGwdd
kcyJp0595X48JWAMzmv0NZfP3syDsy3akcvwGivgpfWjQwK5Zbi/LzyPBqPiloEM
EhxwB9H0x4YxJNEdNLlO5dnTqiY0dG0Im0IhCKk+AC3+QnVbWn0DVk2r0kxv0Ac6
Yvf6ZcCtFFSitIpe7J8GtsUyNm8X3QW19i4KvK7MJotjP8jpxdQ5Mr0n8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7FbNgFphNOLNeHVlG3rIriowKoMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBXzQTnW
hdHSLJNNTNL3gwOInfspWh8kyp9KAyISbpIz/oEWNIP3Nv29p8FJCZ4hNUL65gLf
eguxHzr7gBzvjUhfnZjf1zLaOUMyFqndR9zH9+iiRabNhoYRuWAQ9HYpIaLRvqKn
VJt1i0XvztbB3PoaFodgm9fD7NJRjEpWwr0zDpOCHr7IHObVLAISH5/V/WV4ttYi
pdrRfGtK1fYnfvic/YZzxCLFVzzx9LDZjFGJoEKisAQ+12AGgtv/r/oaFjzsvRBy
MmqSa6ePJJnvHdJMZuP4aOGWdlI4I42iagbnPboBeTKrj8xKsk83Fxh5hsHv7iQf
+s+wC+dpI23GEg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:14:25 2026 by rpki-client