Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: xNKzxtOjxOm6mRLbSbTsGeRsu1BGwyBudwk4kYVqkAw=
Subject key identifier: 69:48:F6:AF:CB:D8:AA:D6:53:43:C1:A2:25:F0:B7:60:42:29:63:1B
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 019D3752C7C84ECAD61790CE50043854AE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 030A
Signing time: Sun 29 Mar 2026 02:01:05 +0000
Manifest this update: Sun 29 Mar 2026 02:01:05 +0000
Manifest next update: Mon 30 Mar 2026 02:01:05 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: 99qKCNkCigPGc4vRfQpFhyrsL5m/1WBXtZIW/IsrRc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c7:c8:4e:ca:d6:17:90:ce:50:04:38:54:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Mar 29 02:01:05 2026 GMT
Not After : Mar 30 02:01:05 2026 GMT
Subject: CN=6948f6afcbd8aad65343c1a225f0b7604229631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:ec:09:d3:68:44:af:bd:ab:58:f9:f0:8d:
12:85:be:f7:02:7e:91:51:32:60:4e:c5:4d:89:11:
44:2b:04:33:60:54:b0:5f:c9:f5:77:04:5e:82:c5:
3b:dd:1d:6a:cb:e4:9f:4b:40:f4:fe:a2:ff:6a:05:
23:66:95:f0:9f:12:1b:2b:2b:dc:8b:75:ee:70:ca:
36:5d:ba:8d:32:82:71:c0:e9:80:33:e7:c4:fc:34:
b5:3f:0a:c0:11:98:92:6f:87:af:3c:0a:d8:27:5e:
a2:20:3e:8c:07:0e:9c:1e:5d:79:f2:71:2f:b2:29:
54:55:bb:f7:59:0b:3c:e1:d3:dc:05:67:09:d6:2d:
9a:50:6c:71:1c:95:9b:2d:e1:47:e7:d1:40:c4:9c:
97:f0:5a:e8:d7:37:a4:46:59:61:44:c2:24:34:35:
1e:fa:de:2f:d0:86:53:ef:7a:47:1a:30:c7:7d:4f:
e4:00:c9:0c:2c:1f:17:3f:1e:52:9e:b9:a3:38:bb:
13:51:a8:fe:a9:1a:78:ea:e6:34:8c:e1:c0:e9:6f:
b7:20:ce:90:e6:08:c5:46:76:4a:92:b8:c1:1e:45:
15:eb:39:b5:3d:6b:81:00:0f:8a:5c:b8:21:c2:57:
dc:5a:c2:0c:ca:ad:c6:80:ea:f2:eb:4c:05:77:76:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:48:F6:AF:CB:D8:AA:D6:53:43:C1:A2:25:F0:B7:60:42:29:63:1B
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ff:42:0c:00:47:df:28:7c:72:7c:cd:ce:e8:2d:11:d7:be:
55:7b:d2:73:aa:1d:c3:a6:0f:7f:a4:a4:01:1f:9e:ab:5b:5b:
85:fa:84:4a:04:11:13:1b:d4:99:51:df:3c:5f:8c:7b:6d:8e:
0e:0a:75:9a:65:41:ab:16:4e:d8:89:07:4e:69:4a:05:41:d0:
e5:e2:14:87:5a:01:27:66:3b:72:eb:57:f7:47:29:1c:c5:55:
69:34:4c:a4:69:ab:4d:96:af:89:67:eb:84:b9:ff:2c:37:f7:
11:3a:1a:39:78:57:32:34:bf:dd:ce:b3:ae:5d:48:42:56:3a:
b9:2c:94:75:bf:d5:81:b9:bb:a5:30:54:17:15:98:3c:49:b5:
7f:a4:15:33:22:e6:96:7e:d0:ab:61:ca:aa:61:bb:53:a1:32:
5a:71:45:39:a6:10:58:47:40:c7:08:04:46:52:6d:36:de:91:
71:5b:e7:22:46:77:86:cb:f4:14:00:5f:af:59:70:2a:fb:31:
a9:79:a7:cd:1b:ac:98:36:aa:37:57:b7:d8:83:6d:2a:f5:b3:
3d:ad:d3:f8:10:89:6f:90:62:d2:f0:4e:b1:13:8f:a5:75:b1:
46:0e:8d:6d:ec:cb:1a:16:d8:f0:03:cb:41:65:02:f3:6c:a5:
df:13:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:37 2026 by rpki-client