Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: i0qfq3d+zMhG31C8yn6ah1tXXNCwfg5wB9XYPLHcuHQ=
Subject key identifier: 80:0D:49:A4:4D:11:E4:AB:1A:99:86:DB:E9:40:30:1A:A6:AB:F1:11
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019E307287EB91258891F1A57C284CE559B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 11:01:12 +0000
Manifest this update: Sat 16 May 2026 11:01:12 +0000
Manifest next update: Sun 17 May 2026 11:01:12 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: vgCSvgq94KAP+bPLjg7Yij/5ZSMknerlEvbvcEzHyjM=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:87:eb:91:25:88:91:f1:a5:7c:28:4c:e5:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: May 16 11:01:12 2026 GMT
Not After : May 17 11:01:12 2026 GMT
Subject: CN=800d49a44d11e4ab1a9986dbe940301aa6abf111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:69:ef:cd:5c:69:23:31:60:d9:cc:38:1b:
a3:b8:7c:06:f9:87:35:41:00:fd:38:3a:c7:cb:9f:
bb:10:62:14:37:33:df:7f:f8:81:d8:48:3d:81:ca:
8b:1f:8e:6c:9d:ac:67:cb:69:5f:07:3a:aa:8c:cf:
8b:7f:6e:75:eb:44:00:1b:5e:43:17:6a:6d:58:d4:
4f:70:9c:9e:80:0e:f8:1e:a9:ad:be:3c:c4:7b:fa:
aa:1c:07:03:3d:55:e2:de:69:34:f7:b7:d1:f7:ac:
da:63:b2:f1:5e:21:15:24:22:5c:2f:9a:a3:1d:af:
98:ee:06:51:9e:76:db:aa:85:1e:e9:b5:07:74:fa:
ea:8c:6b:fc:bd:60:07:df:08:15:76:df:29:3b:74:
5a:3e:fd:37:6e:d2:92:7b:67:d8:b6:f5:ac:6c:7f:
a0:7a:80:a5:ba:ed:b7:48:35:02:b3:ea:90:6b:a5:
5e:fe:e7:15:f1:fd:ce:47:93:26:57:7d:58:35:81:
d5:96:ad:bd:12:55:d8:32:d9:8e:b8:46:65:ea:13:
a7:5b:5a:d5:00:74:d4:71:ac:69:db:64:fa:5a:d8:
88:7b:ef:91:18:41:52:b3:e6:ef:a4:36:e1:ba:cb:
12:88:63:e6:7b:b3:05:1e:5c:42:da:55:31:b9:08:
3b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:49:A4:4D:11:E4:AB:1A:99:86:DB:E9:40:30:1A:A6:AB:F1:11
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:82:a4:38:4e:d9:30:bf:bd:4e:b2:ec:b8:fc:f9:3d:52:91:
ce:f8:f2:c7:c1:ff:49:c1:0b:7e:57:e3:98:ef:97:90:0e:d1:
db:20:d8:b6:f3:98:5a:6b:a9:71:24:a3:cc:a7:b5:95:d1:7b:
63:19:d8:64:66:5d:cb:e6:f8:2d:55:ed:7e:c8:17:db:10:f0:
50:5a:37:1d:37:47:be:f0:80:79:0d:e7:68:f3:3f:5d:7b:5c:
9f:f9:eb:5c:14:ec:10:75:86:2f:cb:42:b3:c1:1a:95:aa:c6:
aa:a5:b4:3d:29:79:4e:58:2a:b6:bc:1f:e5:c9:21:42:72:dc:
a6:cd:04:d5:71:92:1b:ad:5c:a6:ed:ac:cb:15:ea:80:cb:37:
40:be:c8:ed:4e:77:e4:5c:67:4d:e6:63:43:5c:61:44:38:9f:
0e:34:46:f2:93:78:11:1e:53:eb:d8:14:34:9a:22:9f:2b:47:
7a:3d:3b:dd:da:09:34:ae:01:83:4f:8b:ee:e7:dd:3f:b4:0d:
5b:5b:a4:30:4f:fd:26:9c:51:15:4c:be:1e:73:21:72:47:b9:
cc:fb:f1:d7:7a:04:d3:d4:2a:0f:a7:47:6b:e1:95:37:52:b7:
c8:9f:23:a9:aa:e1:1e:3a:43:c6:e2:2b:94:bb:0c:0c:75:03:
9f:71:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:28 2026 by rpki-client