Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: Y2Uxb8ZCYoGaVzoVB8sWXPCawgNoHpA26/yvBSDAIGs=
Subject key identifier: 76:76:E5:63:9B:4B:ED:DB:63:25:8C:62:F4:EE:6C:5E:EC:5C:A5:26
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 54331C5F8A051E0E80092488B82CE0399AEF2D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 062A
Signing time: Sun 29 Mar 2026 09:43:20 +0000
Manifest this update: Sun 29 Mar 2026 09:38:20 +0000
Manifest next update: Mon 30 Mar 2026 09:43:20 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: 0Dl6N4K45gumMxVCWw9BnIjY84wwmhJ/VF+sbchc05Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:33:1c:5f:8a:05:1e:0e:80:09:24:88:b8:2c:e0:39:9a:ef:2d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Mar 29 09:38:20 2026 GMT
Not After : Mar 30 09:43:20 2026 GMT
Subject: CN=7676E5639B4BEDDB63258C62F4EE6C5EEC5CA526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:68:bf:5a:03:76:9a:3c:5a:d3:8a:a0:fa:
f2:c9:fc:78:90:28:c4:ed:57:76:55:ef:6f:fd:b7:
7b:45:f6:f1:10:15:3d:8c:81:13:7b:68:1e:af:ee:
30:12:ec:20:d1:4d:bb:ae:fb:a2:ef:4c:28:95:66:
b2:c6:e4:7f:95:61:a9:e0:43:09:41:88:67:fe:5c:
43:a9:4a:d1:73:b1:73:6d:30:ce:16:00:8b:9e:6a:
b2:07:ae:06:f7:a9:6b:8e:a3:8f:6e:93:61:d5:a3:
65:a5:6a:1f:63:dd:4a:90:c4:c9:b3:e5:2e:96:80:
95:4a:0b:7d:62:7b:13:84:64:60:bb:0a:56:97:e0:
7d:23:17:38:07:e3:2b:f0:e4:10:c1:e6:ac:ba:30:
11:43:2d:71:87:45:d5:e4:1c:b2:ea:3b:2c:7d:0c:
d7:55:52:b1:52:9d:39:8c:10:e8:f9:6d:18:d3:0d:
56:74:a0:bf:55:bf:7c:c6:09:fb:10:ac:a4:6e:ba:
72:1d:bb:2f:d3:1c:49:85:84:55:7e:1f:42:ef:eb:
f2:48:90:c3:06:f7:b5:25:66:bf:d1:33:f4:63:49:
8d:d1:76:c7:1a:16:43:ba:c5:c8:82:6e:41:8d:24:
35:00:73:5b:19:11:15:87:c6:09:d3:5c:a3:a9:ef:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:76:E5:63:9B:4B:ED:DB:63:25:8C:62:F4:EE:6C:5E:EC:5C:A5:26
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:28:5a:b3:85:7f:ac:ce:ee:49:3f:ec:ef:d6:38:9b:14:
6c:b4:9b:ec:69:7b:fe:ca:6e:00:59:76:7b:f4:df:b1:a6:cd:
86:da:c3:4b:0b:82:2a:c4:17:ed:b5:d5:d0:81:39:e4:9b:f3:
8c:c7:e2:f6:e7:65:1b:59:55:55:48:0e:1b:03:77:1d:e2:36:
65:a6:e7:fc:c6:17:38:ef:34:42:c8:6e:5d:65:c5:a0:14:7c:
18:60:fd:4d:df:51:72:e9:ed:c3:9c:f1:64:22:4b:8e:9d:26:
5b:6e:cd:71:be:d4:c0:b5:a0:3f:b9:32:e5:0f:0a:1f:22:66:
c3:4e:a5:0c:f2:97:ab:6b:8b:0a:f3:a5:d1:a5:25:9e:a6:a3:
91:fb:02:ce:a7:a9:c5:74:f9:78:e0:8e:f6:1e:0b:df:00:87:
ba:62:59:cb:86:fd:2f:c9:19:06:85:c0:a7:e3:a6:1a:5d:7c:
97:73:14:32:22:8d:0f:8e:f8:bd:2b:ea:56:e9:52:62:6c:e2:
3b:ec:1a:bd:e4:11:58:9b:b7:bd:27:6c:fd:50:1b:47:3e:b1:
d4:e0:55:ea:2a:88:02:dc:85:ca:b7:fe:0f:df:20:21:db:f0:
9f:8e:5b:d4:1c:7e:81:0c:f0:f1:e1:47:9c:96:c1:5a:56:35:
bb:1f:27:82
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVDMcX4oFHg6ACSSIuCzgOZrvLRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjljOWM4Y2EzMmExMmRlN2M2ODZiNTI0MGQwMTE3M2Zj
NDNjNzFmZjAeFw0yNjAzMjkwOTM4MjBaFw0yNjAzMzAwOTQzMjBaMDMxMTAvBgNV
BAMTKDc2NzZFNTYzOUI0QkVEREI2MzI1OEM2MkY0RUU2QzVFRUM1Q0E1MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5a2i/WgN2mjxa04qg+vLJ/HiQ
KMTtV3ZV72/9t3tF9vEQFT2MgRN7aB6v7jAS7CDRTbuu+6LvTCiVZrLG5H+VYang
QwlBiGf+XEOpStFzsXNtMM4WAIuearIHrgb3qWuOo49uk2HVo2Wlah9j3UqQxMmz
5S6WgJVKC31iexOEZGC7ClaX4H0jFzgH4yvw5BDB5qy6MBFDLXGHRdXkHLLqOyx9
DNdVUrFSnTmMEOj5bRjTDVZ0oL9Vv3zGCfsQrKRuunIduy/THEmFhFV+H0Lv6/JI
kMMG97UlZr/RM/RjSY3RdscaFkO6xciCbkGNJDUAc1sZERWHxgnTXKOp7w3TAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdnblY5tL7dtjJYxi9O5sXuxcpSYwHwYDVR0j
BBgwFoAUKcnIyjKhLefGhrUkDQEXP8Q8cf8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvMjlDOUM4Q0EzMkExMkRFN0M2ODZCNTI0MEQwMTE3M0ZDNDNDNzFGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tjbkl5aktoTGVmR2hyVWtEUUVYUDhR
OGNmOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS8yOUM5QzhDQTMyQTEyREU3QzY4
NkI1MjQwRDAxMTczRkM0M0M3MUZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMEoWrOFf6zO7kk/7O/W
OJsUbLSb7Gl7/spuAFl2e/TfsabNhtrDSwuCKsQX7bXV0IE55JvzjMfi9udlG1lV
VUgOGwN3HeI2Zabn/MYXOO80QshuXWXFoBR8GGD9Td9Rcuntw5zxZCJLjp0mW27N
cb7UwLWgP7ky5Q8KHyJmw06lDPKXq2uLCvOl0aUlnqajkfsCzqepxXT5eOCO9h4L
3wCHumJZy4b9L8kZBoXAp+OmGl18l3MUMiKND474vSvqVulSYmziO+waveQRWJu3
vSds/VAbRz6x1OBV6iqIAtyFyrf+D98gIdvwn45b1Bx+gQzw8eFHnJbBWlY1ux8n
gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:08 2026 by rpki-client