Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: cezqhxIax3E7fSfzOIseFaYmXVXg+lGF4zr24qdqk5E=
Subject key identifier: 21:89:9A:A4:C7:98:13:FF:D1:3B:F4:B0:24:9B:D8:98:37:49:B1:2B
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019D394083867B44D35EE0C1FB1405A21736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: Pg/aqztIdTyk2YEl7772AWaERx+cu8i4iR3TH5L509k=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:83:86:7b:44:d3:5e:e0:c1:fb:14:05:a2:17:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=21899aa4c79813ffd13bf4b0249bd8983749b12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:db:54:81:8a:da:27:c8:c6:c1:81:82:4c:
2a:dd:56:e1:45:3b:b5:d9:c3:03:ce:25:19:2a:3c:
96:a3:7b:6e:54:05:50:fe:91:24:5d:5d:3d:dc:ee:
d1:f9:7a:cc:1e:6c:44:03:2d:6d:72:11:e1:cf:d9:
ec:45:b4:d9:d4:27:f4:fb:b0:31:d7:cf:f1:8f:d2:
9b:f3:54:8e:1c:38:6a:d5:02:a9:91:31:24:61:24:
2a:b6:87:c5:f1:9d:be:3d:3a:77:ea:05:9b:a5:82:
2d:41:93:ea:a8:4f:16:a7:7c:db:d0:74:7c:69:ab:
fb:fd:86:86:f1:23:24:5b:06:43:c8:ab:cb:76:ce:
54:42:fe:33:66:8e:2f:75:e1:00:fe:65:0d:9b:0a:
87:9a:f0:4f:8e:87:bb:52:ab:c2:29:60:ca:cc:2e:
09:a4:ae:59:49:bd:ec:36:ba:ef:ad:1c:18:58:a1:
57:e3:ad:b5:21:63:c3:46:d3:d4:8f:83:6c:38:3a:
08:f1:f9:ab:0b:d8:90:bc:92:72:ca:c0:ed:5a:62:
f6:2f:4c:d3:f3:fa:68:8d:03:60:b4:74:9a:6f:75:
c9:10:d7:9e:d2:3e:05:f8:6a:5d:1f:7a:94:49:82:
4b:40:fb:19:3c:78:71:4a:04:ba:75:60:16:1a:a8:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:9A:A4:C7:98:13:FF:D1:3B:F4:B0:24:9B:D8:98:37:49:B1:2B
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:47:dd:75:b7:38:53:ed:75:c4:64:66:5c:a3:52:3e:20:
1b:aa:09:b9:00:15:38:cf:9c:84:a2:1d:78:ac:16:4f:ce:17:
d8:e1:33:a0:75:fb:6e:b8:04:c1:ed:4f:02:5b:76:0e:39:34:
23:7e:e9:a7:71:bb:61:dc:8c:79:48:b2:64:89:d3:bd:9f:f8:
53:99:7c:cd:4b:16:3f:de:a5:e6:67:6b:68:a9:2c:a9:06:84:
81:ec:b6:c8:19:3c:52:e5:d5:e1:35:63:a9:4f:68:ee:ec:03:
45:df:f9:58:18:1e:34:f7:17:19:43:4d:53:24:0b:94:4a:d9:
8e:6b:57:75:6e:de:41:1c:70:16:d7:8e:ea:9e:93:d7:ce:5f:
3a:1a:8f:d8:7b:2c:ea:20:b6:99:fe:f4:a7:ab:50:99:93:2a:
65:7a:49:13:44:3d:67:32:20:a8:c0:87:0d:93:a2:45:32:4d:
f8:05:53:97:d6:14:0c:7c:19:cd:22:d7:f4:0a:23:0f:7b:0a:
4c:4b:ea:16:fc:c5:1a:7a:c9:62:b3:fc:3a:6b:b7:46:ae:3d:
90:83:c0:a7:e1:b7:66:76:7c:ee:5d:d8:97:c0:0c:de:2f:58:
34:ce:cd:ed:c8:3f:df:96:82:3d:06:10:bc:91:52:8e:12:79:
c8:0c:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:43 2026 by rpki-client