Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: Rch42vv9aXpJRrNObqK1NUMGA3+2Eqn99ympLfORzsY=
Subject key identifier: 63:CC:D1:C9:E0:76:7E:93:63:D2:AF:EA:63:81:7C:6B:F2:26:16:AB
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 01A17694E8F80BDFC33F118F72AC4CA08A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 053D
Signing time: Mon 26 Oct 2026 05:00:32 +0000
Manifest this update: Mon 26 Oct 2026 05:00:32 +0000
Manifest next update: Tue 27 Oct 2026 05:00:32 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: j/Lcnko1fmOc3zgvPj8DytMFhec6gKX95H17F6/c3m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:e8:f8:0b:df:c3:3f:11:8f:72:ac:4c:a0:8a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Oct 26 05:00:32 2026 GMT
Not After : Oct 27 05:00:32 2026 GMT
Subject: CN=63ccd1c9e0767e9363d2afea63817c6bf22616ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:31:d0:f5:60:ef:cc:dc:e1:22:52:13:f2:
5b:ed:11:75:32:f2:d6:60:29:01:bb:90:4a:4d:ee:
1c:3b:c2:cd:35:cc:14:f3:5a:19:58:28:37:ff:84:
01:ab:c0:d1:d1:89:cf:71:f1:ae:4c:d8:9b:fb:1a:
15:26:96:3c:ae:34:30:f3:af:9b:b4:e7:84:ee:e5:
32:8e:01:d3:16:11:53:a4:47:51:e7:46:58:c5:6d:
25:44:78:a1:23:59:6a:d2:6a:bb:f1:92:17:1b:66:
98:ef:b6:48:4c:ae:26:e3:66:b7:46:28:94:40:c4:
6a:ae:8a:a7:03:d8:e9:18:45:14:86:93:ce:9b:52:
83:84:ac:04:6e:8f:bb:23:ad:96:d9:3e:95:f7:29:
05:ea:58:b1:54:41:a3:83:9e:4e:3d:f2:73:6f:62:
35:18:df:85:61:81:ec:8d:60:b6:f8:74:ac:bc:84:
7e:c2:c7:18:da:3d:ca:ad:bf:fd:bd:2a:5b:ee:56:
79:1e:3d:d1:66:35:7e:05:2f:83:de:07:59:c1:6b:
2a:75:cf:7b:33:21:bf:a2:b7:ac:47:d9:43:c1:70:
9b:c7:07:9f:cc:f5:88:71:3d:db:2b:e9:16:bb:71:
fb:71:80:36:35:f8:a3:00:ed:41:6c:82:72:9c:54:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:D1:C9:E0:76:7E:93:63:D2:AF:EA:63:81:7C:6B:F2:26:16:AB
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:22:c3:47:77:80:99:de:bb:40:91:a1:3c:7e:7b:16:b4:fb:
d9:e5:87:af:8e:1e:61:66:e4:0c:e5:85:cb:ee:dc:2c:a5:22:
65:e8:11:10:0f:84:d7:ff:87:66:a0:c0:27:e6:2a:92:86:84:
10:30:e6:17:dd:d2:92:ed:09:43:b2:ba:4f:7d:23:e2:a5:87:
71:93:65:c5:85:bd:b6:ad:91:b7:92:22:a8:96:a0:00:62:5e:
ce:51:58:e1:67:70:54:17:ee:f5:8c:e7:33:cc:d0:22:36:e5:
da:fb:8b:91:43:27:68:7b:a5:28:43:16:f4:b3:b2:f9:dc:70:
ce:ac:8b:dd:22:2f:24:4a:54:42:dd:2e:bb:35:a8:03:b6:d4:
73:4b:e3:f8:1c:c0:54:7b:ed:0a:77:46:11:ff:75:e3:83:49:
8e:fb:3e:db:c3:ff:a3:1b:f7:93:88:fd:fa:33:2a:8e:c5:bd:
af:08:cf:d9:2b:78:db:52:83:52:79:28:60:1f:06:30:79:1b:
d0:02:98:11:9a:11:16:c0:db:b0:3a:ca:17:5c:48:d2:6c:90:
bb:f8:f0:b2:8f:61:4a:c2:43:d1:db:a7:9b:14:ec:c7:c0:a4:
15:9c:5d:a5:b7:e5:d0:ed:14:bb:8a:ee:6b:c8:b7:a7:ca:dc:
1a:06:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:26:48 2026 by rpki-client