Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File: 29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier: dSd/yd+JISEWjPNfIyj0gR/eSbBJ9O1nJ5cYimPlXZ4=
Subject key identifier: 39:02:1A:0C:7A:5C:88:BF:F1:11:8C:FE:DD:2D:EF:76:A0:91:A8:3E
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 019D3AC1142ED710F336F0650DE27A68482F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 18:00:25 +0000
Manifest this update: Sun 29 Mar 2026 18:00:25 +0000
Manifest next update: Mon 30 Mar 2026 18:00:25 +0000
Files and hashes: 1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: p9Bj3Qg+iVyMhkDiPugbeNlkxSD6Ul3etckKkb2aJu4=)
2: 78AdnPlYxxNRvG7yIsV4H0dQ3uU.roa (hash: ZTu1Ha6s4A0bZr6OWIB0UemduSdBco4nDQ6ul5K7k/o=)
3: pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa (hash: zi9P3PwATT1zpaHWwrjwAJyWvhGqfYUdHlC1nMks7rY=)
4: ws9IrMCFTsyujEnp3NM74auDbZo.roa (hash: rNmcUDMhWLisI/rUnE9X9Uz3aN70rmmRCgpG26lV2pk=)
5: zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa (hash: /UJhdA7Jh+uSEIMl9lW07vSFGCaa6lBIOlAIZUdipFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:14:2e:d7:10:f3:36:f0:65:0d:e2:7a:68:48:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Mar 29 18:00:25 2026 GMT
Not After : Mar 30 18:00:25 2026 GMT
Subject: CN=39021a0c7a5c88bff1118cfedd2def76a091a83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:02:b4:61:94:43:d6:a2:f9:f9:d7:a5:1b:
26:26:68:11:3f:fb:f6:91:26:39:e8:39:77:e0:29:
6c:8d:e6:df:4b:10:50:b4:c2:0e:a5:0b:c3:04:7e:
4e:3c:10:9b:d0:d4:93:63:ba:12:ca:33:60:af:15:
e4:a3:f9:de:75:26:4d:51:93:79:f9:17:07:ec:fa:
04:1e:63:d9:36:0f:26:cf:46:67:0f:46:75:ef:7a:
f2:3a:30:a1:5a:f9:8d:37:ea:3b:94:2b:23:95:fc:
f9:d4:34:bd:de:6a:8d:11:43:48:99:1b:6c:9c:74:
71:da:84:26:2f:0e:29:2e:a5:87:21:e9:30:7e:bb:
81:18:d5:b9:f2:67:64:0b:49:fe:b5:a9:29:2a:40:
3c:4c:52:06:5b:c1:bf:f3:d0:a6:6e:06:71:0f:da:
a7:69:df:40:2a:81:ef:2c:32:71:3b:c6:83:16:d1:
76:22:7f:e1:bc:8c:b2:4a:62:6e:9e:61:5c:f4:26:
9a:9a:6d:f4:7d:6e:78:58:a6:6d:24:66:36:07:15:
79:4c:0e:97:00:44:a6:4e:d3:5f:46:a2:c0:15:e9:
e4:8f:4c:f1:5d:18:12:56:2f:ab:89:48:7b:b0:f3:
79:af:3f:43:fa:d2:84:dd:03:40:a7:4b:e5:f0:00:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:1A:0C:7A:5C:88:BF:F1:11:8C:FE:DD:2D:EF:76:A0:91:A8:3E
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4e:17:13:f9:ac:65:9f:1e:ff:b0:b5:ff:47:56:d1:f0:61:
d7:5f:1a:97:ed:4c:60:b1:ad:7f:d3:65:e6:b1:9e:15:7c:dd:
90:7f:9d:f4:a2:9e:fa:81:05:d0:9f:06:f8:0b:a5:f5:d0:8e:
d5:93:7c:9c:78:60:0a:49:9d:d7:ca:22:fc:37:19:93:4d:2d:
e0:83:07:e1:22:26:77:b0:dc:22:6b:95:09:28:1c:ce:2a:8c:
f4:ac:d0:e2:8e:de:47:64:5b:09:b6:80:41:e5:20:b2:d6:9e:
f2:29:d2:06:5a:9d:1a:76:4a:9e:42:07:79:b2:36:2f:b9:e1:
59:09:81:7c:8a:8a:a0:89:78:9c:25:31:1d:44:2d:ff:90:3c:
9c:78:d2:e7:61:13:81:c7:b4:a8:03:ca:18:c9:aa:2a:4b:59:
d1:cb:c8:ee:1e:87:e4:48:64:9c:63:ff:71:06:a6:f6:73:c8:
e3:80:d4:09:c9:9d:c5:69:67:ba:dd:03:06:a9:69:7b:34:9a:
19:58:b3:bd:43:54:ea:1f:dd:86:78:b9:c8:f1:fe:b0:7b:f3:
3e:3c:22:18:e6:a7:3b:29:6d:87:3f:6a:f3:4c:1f:cc:7e:15:
9a:be:3a:0e:79:ff:f9:6f:c2:7b:ab:a7:05:4e:ee:49:27:4c:
03:68:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 04:19:37 2026 by rpki-client