Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: wie697bjgftO0H/PKI7dy/k3QAK+o2IlzeBpMlIqQec=
Subject key identifier: AB:41:D2:1E:2E:E8:86:8E:DA:3C:59:6B:B7:B3:BD:B6:2E:5B:28:C1
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 01A000934AA6E0807C3181228EC0C7E241A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 173C
Signing time: Fri 14 Aug 2026 14:00:47 +0000
Manifest this update: Fri 14 Aug 2026 14:00:47 +0000
Manifest next update: Sat 15 Aug 2026 14:00:47 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: Tc2v1QfPmzXcMZh05+xXYl6MrDJ4KpzMR5QBDNzWLE8=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:4a:a6:e0:80:7c:31:81:22:8e:c0:c7:e2:41:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Aug 14 14:00:47 2026 GMT
Not After : Aug 15 14:00:47 2026 GMT
Subject: CN=ab41d21e2ee8868eda3c596bb7b3bdb62e5b28c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:cf:03:12:c3:6d:e9:08:db:2b:c3:27:a8:
d5:69:0a:2f:61:0f:79:8a:f1:1d:27:3a:15:bb:be:
cb:26:c9:04:65:a8:84:53:49:3e:4c:74:0f:5f:df:
92:a3:5e:e9:2d:c3:1b:83:d1:6e:92:04:ce:ac:8f:
19:a1:55:c5:2c:b0:44:23:79:b3:93:3b:0b:8e:ee:
80:5b:7c:dc:54:6d:6d:20:e3:44:2f:94:4b:41:95:
1f:50:86:92:a2:57:f5:59:3b:6f:5c:83:3e:81:8e:
31:bd:a1:70:bd:e4:73:ed:c6:4d:d9:b2:64:80:ef:
77:1d:c0:cc:76:17:f8:3e:c7:df:2b:a4:81:bd:33:
41:da:7c:86:2d:47:03:0d:f2:06:66:90:3f:97:cd:
b9:e9:ff:b5:8d:50:27:b6:e4:65:0f:aa:7a:3e:b4:
4f:e5:1f:dc:f4:0a:80:a2:b4:56:15:94:75:37:09:
4d:e4:98:5a:95:f7:e9:9f:59:37:dc:f0:c4:2b:b2:
91:56:1d:25:db:23:8d:d8:82:24:8e:d3:0c:4b:70:
2a:87:a4:7b:0d:28:bc:8d:7c:fa:23:2a:a5:cb:bd:
a5:e2:a1:ee:e1:ba:59:31:e6:1c:79:3a:30:55:22:
dc:45:9f:08:d1:8d:d4:92:d9:bb:c3:94:02:54:30:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:D2:1E:2E:E8:86:8E:DA:3C:59:6B:B7:B3:BD:B6:2E:5B:28:C1
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e3:9e:c2:f4:fd:13:cd:b3:52:02:12:b7:5b:26:6a:f0:5b:
b9:96:f4:49:6a:55:11:3c:5b:3d:7e:c6:f6:40:8a:d4:b9:8f:
eb:68:be:42:0d:93:8e:e2:d3:63:aa:e4:5e:a0:ff:61:87:51:
c4:db:f8:05:63:6d:0b:98:17:ca:de:c4:7d:93:d5:29:60:b9:
cf:05:80:ab:f6:f2:1b:ec:80:d8:4f:e6:cf:db:19:9e:a6:e8:
de:62:67:a1:91:24:54:80:47:68:9d:7d:4b:0d:12:49:eb:1d:
0e:56:93:10:a1:cd:46:31:02:c1:9d:8c:7a:7c:30:3c:fb:22:
39:eb:da:78:6c:63:f5:3f:0e:30:64:63:e1:04:f3:6c:e9:22:
92:02:ef:08:6e:7b:dc:52:04:2c:ef:22:ba:1c:ee:04:4d:a2:
76:5f:ae:d3:db:fb:b7:22:c5:3e:6b:12:7c:ec:16:4c:68:48:
7e:dd:0f:76:26:55:ef:95:7a:17:98:f3:e4:81:cb:3a:79:37:
c1:b2:65:b1:44:50:80:5a:70:75:fb:8a:00:2c:5e:c1:0e:b7:
8d:e9:f8:d8:1e:b8:78:11:03:1a:0e:fd:62:43:0f:39:b9:e6:
44:12:26:96:53:5f:da:5b:90:1d:21:5a:53:a9:04:73:de:b5:
8f:88:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:47 2026 by rpki-client