Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: NIgeaITB2i+3FHvgPhyqubIX1ykdjXlVWlsEqO69xSI=
Subject key identifier: 14:5A:9F:D4:23:9D:23:8D:D9:BC:EF:AC:9A:2E:67:33:A8:9E:01:64
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 01A13FA7C338C17591865600BBAF311C812E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 135A
Signing time: Thu 15 Oct 2026 13:02:01 +0000
Manifest this update: Thu 15 Oct 2026 13:02:01 +0000
Manifest next update: Fri 16 Oct 2026 13:02:01 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: bw7I/0R9MgXfcR7dgxXESo7GOAxjR9XaXZNc7iMmVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:c3:38:c1:75:91:86:56:00:bb:af:31:1c:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Oct 15 13:02:01 2026 GMT
Not After : Oct 16 13:02:01 2026 GMT
Subject: CN=145a9fd4239d238dd9bcefac9a2e6733a89e0164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:a9:03:32:81:9c:72:7d:5e:14:b4:49:14:
85:03:ee:bf:63:31:b3:a5:99:ef:37:37:e2:45:26:
c8:5f:ec:3e:f3:cb:1b:3a:dc:1e:b4:6a:28:0c:8a:
37:df:b4:49:02:42:93:c7:98:f5:80:c1:44:b2:fd:
8a:eb:86:20:8a:72:93:a9:08:57:f3:1e:56:db:b3:
b2:39:5c:51:77:75:db:2b:76:4c:dd:ee:8b:75:4a:
2f:01:de:23:eb:08:15:7d:2e:14:5b:33:1c:dd:81:
61:d5:61:35:c9:8a:93:b3:33:ac:89:77:dc:71:06:
eb:e1:96:8d:61:31:51:ef:65:5d:6c:76:bf:69:95:
aa:cd:5d:91:64:6b:d3:42:bc:7e:eb:0b:24:d7:a2:
15:70:1d:72:28:6a:16:95:dc:7e:cf:31:0e:40:9f:
86:63:d3:27:56:9a:20:39:e2:01:48:43:78:5a:97:
f8:98:3a:0a:50:8a:26:d4:47:ed:10:03:c0:4f:c4:
e9:a2:6b:79:4b:4b:85:4d:6e:a4:b5:de:34:e1:10:
0a:4d:75:c1:54:ba:ff:ad:ce:6c:a8:db:39:d9:cb:
d1:ba:03:5b:ce:c8:79:35:10:82:3a:29:15:2f:cd:
40:eb:a3:ee:4f:db:06:7b:99:9a:24:37:50:f1:2d:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:9F:D4:23:9D:23:8D:D9:BC:EF:AC:9A:2E:67:33:A8:9E:01:64
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:23:f7:4b:25:83:1e:d0:4b:83:12:6e:e3:aa:46:f9:d5:88:
a4:46:fe:c3:b3:41:34:29:df:d2:c1:31:0d:44:55:4b:dc:2c:
c4:cc:db:e7:2f:24:5b:a9:62:9a:92:be:ed:bb:6d:5e:72:23:
05:db:29:e3:f6:8b:30:15:33:97:51:88:0e:0f:28:44:01:26:
7e:0f:48:61:f6:f9:87:bb:5f:04:f3:18:11:80:dd:98:d5:9b:
c9:20:04:a0:7c:8a:b7:a4:a5:45:9b:8e:5f:9a:42:da:48:94:
39:f1:50:a4:34:b6:8d:11:41:ea:cb:05:75:e3:05:47:89:7b:
9a:2a:3f:7f:66:39:6a:3d:fa:09:bc:d1:24:11:ae:c7:61:71:
92:48:cd:83:4d:93:96:1b:8a:4d:53:e4:bf:f7:15:6f:38:90:
11:e8:16:d6:d7:86:c4:ab:6c:ff:de:25:10:0f:ee:b1:fb:33:
37:46:50:6c:3d:b6:3e:32:ee:e8:19:d2:bc:08:02:5e:d1:0a:
95:52:db:d2:f7:49:d5:28:5a:bf:bb:df:03:36:f3:87:fb:49:
48:a4:92:ec:b2:34:1a:fd:6e:4c:98:3d:ca:b3:f9:7d:ba:ef:
52:9b:52:3b:6d:e4:3f:b2:52:53:c6:e9:50:6c:86:bc:39:1a:
8c:6e:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:39 2026 by rpki-client