Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: V1rvnNaW5dTf8LYD1srGHF/vRzq3O6M252oFgVsknew=
Subject key identifier: D4:81:EC:E7:52:DA:85:B0:24:5D:70:10:31:5F:B2:0A:17:B7:50:44
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019D37F74282CA61338AE490E641F780B0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 15CB
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: DmuauwFuu197tqtfwAK6k6pweLofb15VwcsZZa6wf7w=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:42:82:ca:61:33:8a:e4:90:e6:41:f7:80:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=d481ece752da85b0245d7010315fb20a17b75044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:dc:53:f9:dd:3a:e6:ac:ad:33:92:0b:c5:
43:20:42:c0:98:ac:d2:aa:74:d5:74:60:90:f1:52:
2a:a7:9f:79:5e:0b:f0:89:11:81:13:3b:7c:fd:c0:
76:7e:dd:be:ea:02:c3:61:38:82:78:19:1f:05:ca:
ad:9c:af:d8:fe:eb:5d:5c:9a:4e:61:84:8d:2c:7e:
cc:c4:dd:85:75:72:1b:ef:03:5d:25:c7:49:3a:03:
4a:a8:45:4a:fe:5c:05:2d:0f:2a:12:60:4f:a4:36:
fa:aa:b5:83:2b:c8:90:02:83:1d:22:16:92:8d:3f:
df:6a:88:1a:3f:c8:f4:76:45:6b:71:fb:20:e2:11:
c0:b1:0a:ee:e9:e6:45:8b:ab:ef:83:17:b9:33:e2:
d9:a5:44:c0:b3:df:27:f2:0f:24:a6:8d:ee:0b:d7:
e0:b8:f9:9a:27:4a:3d:e3:ff:c9:20:f0:e4:cc:d4:
04:bc:02:30:8d:f4:e5:cf:60:2e:b2:5b:b7:82:f6:
1e:1f:ef:7b:6f:33:0b:24:f4:a7:70:56:95:36:f7:
98:0d:2d:ae:7e:b3:fb:b7:19:9e:fb:fc:36:b8:ec:
16:c5:4c:9d:13:28:8c:39:05:03:c8:fe:1c:97:9f:
55:cb:3d:13:98:8c:93:f2:b3:45:fe:e6:56:1b:2e:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:EC:E7:52:DA:85:B0:24:5D:70:10:31:5F:B2:0A:17:B7:50:44
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:5e:d7:ab:7a:cb:55:3f:b0:a9:14:b3:fe:7f:d8:eb:f4:
65:a4:23:6c:eb:a3:49:b0:6e:28:11:d5:a3:1e:a0:df:9b:28:
98:e8:ae:2c:b7:58:8b:d7:af:50:f7:ab:8f:68:a2:61:d8:92:
35:04:73:e5:dd:28:00:68:5d:3c:37:7e:98:90:7e:6b:34:44:
d6:21:17:7e:2a:e5:ee:b0:63:dc:cb:20:60:c9:5a:67:3b:a8:
6b:18:78:c9:36:1e:6f:7b:89:bb:18:c6:77:56:3c:8c:b4:58:
73:19:37:8c:56:72:6f:2a:bf:7d:3b:0c:46:38:61:34:88:25:
c2:32:7d:df:51:00:0c:3e:50:fc:92:0a:8d:03:2c:cd:44:c1:
d2:7f:71:77:0e:c8:54:82:94:ec:43:95:0a:98:b4:f9:c9:4c:
6a:39:6c:22:df:b8:ce:e3:fe:a8:ba:d8:b2:b9:c0:b5:66:fd:
21:39:37:b7:83:f9:68:42:a7:93:02:7f:a6:e1:97:a7:e1:15:
46:8f:90:1e:e0:06:75:6f:33:62:17:62:34:ac:d6:23:2b:2a:
82:29:b0:8f:ca:e6:6d:87:fd:48:d8:24:5b:13:02:c2:97:52:
02:dc:85:9b:c0:40:54:38:fe:ad:7b:b2:50:86:65:31:4c:68:
8f:92:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:47 2026 by rpki-client