Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: 8zwuIppQc3GLSsmccLa0ffRA9qCcJSOVLjQWJrZDzY0=
Subject key identifier: 29:8A:32:76:0F:E2:8B:EA:49:E6:DE:52:B1:57:ED:6F:1A:2E:12:E0
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019CE5233799DC9B9AB96118361EFC159C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 03:00:16 +0000
Manifest this update: Fri 13 Mar 2026 03:00:16 +0000
Manifest next update: Sat 14 Mar 2026 03:00:16 +0000
Files and hashes: 1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: I4aUOFJrwW/v0zOjkPZzb2HXXkiJqWI5P6sAou2Qk1A=)
2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=)
3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=)
4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:37:99:dc:9b:9a:b9:61:18:36:1e:fc:15:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Mar 13 03:00:16 2026 GMT
Not After : Mar 14 03:00:16 2026 GMT
Subject: CN=298a32760fe28bea49e6de52b157ed6f1a2e12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:22:a2:78:f1:89:e2:1d:02:1c:fd:a8:86:
73:d5:40:36:b1:ca:f7:4c:97:9b:f7:e1:bb:92:ba:
ab:76:28:f4:47:32:1a:7f:7b:90:41:d4:7d:55:8f:
cf:8d:a3:d7:ea:b1:fb:47:7c:35:10:6c:8f:12:a6:
26:27:2c:8a:f1:d1:0a:59:07:cc:86:e8:81:61:e7:
2a:4d:80:4d:3f:0d:b7:aa:e0:46:e0:85:ad:94:b2:
fa:08:f3:7f:a9:82:69:44:5a:5f:95:d5:db:00:4a:
40:cb:5f:39:8e:69:22:69:3e:9f:3b:82:7a:29:4a:
61:26:ea:f4:78:52:4e:aa:53:9c:56:69:c0:ef:67:
f9:11:1f:a7:d3:a7:49:90:b3:47:ef:01:f3:e1:d5:
57:ac:93:f2:27:9f:fc:95:c0:3c:b7:c6:77:95:75:
d7:a0:e3:aa:71:c8:04:f0:42:a1:6c:24:f2:61:d5:
fc:79:7f:20:13:ff:c8:68:7e:81:3e:88:98:09:05:
1a:35:14:69:0b:5f:57:5a:0b:f0:ac:18:ba:69:46:
4f:28:ee:28:f7:e0:64:5e:08:2f:40:bb:06:00:89:
a0:36:7b:53:b5:7d:39:83:d0:2e:3a:47:68:51:1b:
c4:ba:12:fb:67:a7:f0:4e:17:28:69:18:3a:22:f8:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:32:76:0F:E2:8B:EA:49:E6:DE:52:B1:57:ED:6F:1A:2E:12:E0
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:aa:4a:71:cb:e9:4e:f2:a8:3b:c8:4a:8b:bf:6e:c5:e0:
7b:ef:48:c0:c6:71:f2:6b:02:75:b1:96:9d:67:af:c0:4e:27:
cd:91:26:32:aa:64:99:82:6c:08:ed:a0:4f:27:e2:e7:2c:6e:
af:da:12:45:c1:97:e8:60:4c:25:1b:98:d6:2f:65:a4:8b:78:
3e:01:ef:2b:fe:ba:c8:97:3a:5a:c9:fd:bb:a8:ae:4d:be:15:
3b:69:11:89:b0:b2:b4:fb:64:48:01:8d:15:3a:d0:db:4f:ad:
95:8f:e5:20:3e:ee:09:06:67:12:72:63:af:d5:45:cb:c3:7c:
d0:d1:52:7c:e0:74:d0:44:fc:32:c4:c9:02:8a:42:c1:d5:67:
a7:e1:3c:4e:11:7a:49:8a:0d:e4:22:c4:cb:09:f3:b4:85:6e:
ee:96:e9:9c:62:e2:09:ae:a9:3e:c3:3d:bf:65:52:66:14:73:
40:b5:b8:ce:67:eb:22:97:56:92:25:69:fe:aa:53:0b:e9:f7:
78:ab:71:18:61:cb:9f:39:62:04:70:c6:08:43:a6:01:df:63:
2b:12:52:67:8a:5f:5e:cc:3a:26:63:d7:28:68:6c:9a:90:d7:
b2:da:ac:8e:57:35:93:1b:c3:60:cd:24:17:b1:1b:ba:04:35:
44:76:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:14:17 2026 by rpki-client