Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: SJV3Ph8zajuLOy0v7JWgAHUvVa6SHHarVukYIFBN+S8=
Subject key identifier: 52:55:BC:2F:12:D3:54:33:9F:E6:2F:EB:19:FE:5F:78:61:1D:E3:93
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 019D38D2B029204906C93CF31F9000C99963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 0708
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: BPaDPKTEMEpX1Fzv_jvryI3ZhZs.roa (hash: dyyBL506kK/U4ZZnY6jdH+HEkq9epTy/PSVjs7aWPIM=)
2: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: q23Gxw3SKOHt86R6nwq8itJOukTptIMSGUBAmZr7sws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b0:29:20:49:06:c9:3c:f3:1f:90:00:c9:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=5255bc2f12d354339fe62feb19fe5f78611de393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:e4:ab:1e:02:cc:db:9d:5c:35:1c:6b:0a:
36:e3:8f:ba:17:9e:87:da:3c:8a:a9:90:99:e9:d6:
b0:49:a5:33:f2:59:26:65:85:bf:f0:32:31:df:7d:
53:f1:f1:d6:b0:32:e4:84:73:25:0b:b5:e7:f9:c1:
29:28:35:26:5e:a4:4a:77:ee:4b:fe:7c:c8:eb:e9:
bb:d2:49:ee:2f:c0:fd:06:f7:ea:fe:ab:c2:55:c3:
92:93:bf:1b:b7:37:14:a8:17:57:35:fd:4e:14:3f:
90:46:8d:55:ae:20:ad:e8:d9:8f:28:36:2b:b5:d6:
ae:8a:b2:0b:a8:6e:4a:e7:96:f4:a3:3f:d2:d8:5d:
b6:34:8d:ee:35:23:3a:ea:74:e2:c0:2f:d7:fd:b4:
90:b9:4c:fe:dd:00:e6:bd:94:72:1a:e4:0c:38:c3:
7d:9e:55:53:d2:25:9f:c3:97:74:8f:f8:14:e9:20:
8d:24:fb:ec:78:9d:46:fa:98:f6:de:c6:a8:b0:97:
e3:27:40:f5:6e:a9:81:bf:20:be:9e:df:49:f9:5c:
8e:67:c5:82:64:09:a5:4b:42:8b:c7:82:c5:98:da:
6e:2f:e8:83:ed:fe:84:62:1b:52:da:14:c1:40:b1:
c0:cd:1d:74:de:3b:c7:0f:90:f0:70:b7:9e:55:8c:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:BC:2F:12:D3:54:33:9F:E6:2F:EB:19:FE:5F:78:61:1D:E3:93
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6b:f6:47:41:c5:e7:76:a3:91:c9:d6:e7:b9:a4:8d:bc:1d:
30:bf:52:3b:51:4c:05:fa:82:0f:8a:3b:e3:21:f5:b2:b1:d8:
cc:8d:97:f4:05:86:80:69:03:98:77:1c:06:3f:63:98:7b:1f:
0f:fc:bc:01:b6:8d:0e:f5:89:ba:d5:9d:dc:05:8f:16:a8:d7:
3c:a1:57:dd:f2:ff:9e:34:af:e2:e5:16:47:9a:0a:e9:0a:f3:
89:3f:eb:8f:60:0c:bd:e1:cf:1d:cd:15:14:9b:aa:f3:0e:e5:
c5:ac:10:e8:86:db:81:29:ba:08:ca:b6:fa:58:31:34:36:a5:
2e:dc:d8:0b:4f:1c:e1:41:75:53:e1:99:ce:26:ac:39:15:a6:
de:98:5d:cf:52:66:40:50:18:ae:e6:11:5e:b2:e3:7e:e6:87:
d7:4c:d5:25:c5:5e:a2:3b:37:d2:ca:20:05:2c:0d:b6:97:b6:
6a:54:6a:83:37:5f:8f:d5:07:d5:1d:7c:59:84:51:57:5f:66:
a2:be:1c:d6:0a:d1:58:d5:12:0c:ec:5c:95:e7:0d:b3:6e:28:
3f:8d:ec:ac:77:b7:4d:9e:ce:6e:9f:da:99:d7:43:ec:c5:da:
b9:77:38:a0:03:25:8d:6c:c2:1c:1e:8a:47:86:6b:d6:eb:e7:
d6:83:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:25 2026 by rpki-client