Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: H6ZxPxCWLyPr70t8oEOxOlwyY/IRlLW+PaBOalaL/14=
Subject key identifier: 4D:F2:C3:20:4E:C0:20:71:1D:88:C1:B0:60:70:47:7A:F9:CB:EE:5E
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 019CAA58AF0BBFD7B85C499B01076D7ED702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 02C1
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: TUBl73HLRz/zUuCL1Wj2grn0YJ6yrhgSdhVU7gsnITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:af:0b:bf:d7:b8:5c:49:9b:01:07:6d:7e:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=4df2c3204ec020711d88c1b06070477af9cbee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e6:21:7b:a2:1c:b9:f7:af:04:fb:18:4b:ea:
77:63:1c:e3:48:9b:71:a3:03:31:0a:3b:8c:d8:28:
da:2b:e4:ec:1f:b8:32:75:00:05:21:0d:e6:d7:1a:
16:af:2e:5f:88:25:08:8a:a5:b3:30:fa:3a:ce:57:
b9:86:5d:b2:25:74:42:aa:12:d3:9d:f5:89:a6:e3:
02:f9:b4:88:18:33:00:72:20:05:85:2c:d0:1d:ca:
57:2b:ce:c4:38:0c:1e:45:d5:b7:a7:d6:41:5b:17:
dc:2a:5c:d0:b3:91:51:4a:9f:21:48:45:67:04:d1:
83:4d:da:57:df:bf:61:02:f1:a0:e6:8c:7c:04:a9:
71:b5:ed:bf:a6:09:c7:21:6d:23:b7:4c:77:dd:4a:
2e:a6:e9:d6:b6:18:27:33:46:66:5c:8e:e0:d5:97:
0e:56:7b:8d:05:7b:be:b0:13:93:d9:28:ac:2d:a9:
69:bd:91:4f:7b:c1:08:a4:e3:7d:64:96:a6:86:67:
0b:5f:fb:59:b4:63:5c:54:45:36:b3:9f:95:2a:44:
c0:47:69:7a:78:de:4d:3f:f0:13:23:e0:97:bf:7a:
79:3e:78:da:54:a9:38:c5:d7:f2:60:73:c4:d7:a6:
5a:1e:b5:3b:a3:08:0f:f9:25:b3:fa:12:b5:c5:a1:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:C3:20:4E:C0:20:71:1D:88:C1:B0:60:70:47:7A:F9:CB:EE:5E
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:37:95:87:3d:d9:45:d4:a9:c8:b5:2b:14:44:c3:dc:50:9c:
82:2b:41:fb:8c:86:0a:65:d2:d8:a0:1d:66:6c:2c:60:ef:5c:
68:57:3d:87:50:4d:f5:4d:2a:92:d7:85:ec:07:3f:2c:85:a3:
b6:a5:d4:97:a1:07:11:e9:c0:d8:70:f0:fa:55:3e:e2:2f:52:
52:e4:1d:86:3d:41:20:3c:47:eb:1c:db:1f:c4:0c:8b:66:7a:
da:91:22:41:68:1a:ec:14:ee:d0:cc:ae:54:5e:94:fc:81:71:
31:a3:e1:89:f4:e0:7b:a1:b0:9e:8e:65:e1:f9:52:c9:83:d7:
09:a2:9d:2a:a3:b8:0d:cd:53:37:88:32:a2:8f:cd:9a:08:dd:
d5:94:cd:10:2f:90:fb:6a:e3:1a:99:75:bb:61:b8:a7:64:82:
d6:b9:c6:a6:7d:76:99:82:5f:e6:4b:54:6e:b1:cc:2b:1d:6a:
45:02:83:3b:ff:6b:e2:18:fe:89:45:6c:a6:a1:9c:da:a1:e1:
58:fb:08:24:2b:6e:91:2b:23:cd:b3:e4:5e:fe:24:80:db:fc:
a1:b4:ec:47:d8:79:63:26:4b:a8:9f:f5:2b:f5:10:f8:fc:be:
bc:65:5b:3e:01:20:25:20:26:1d:4b:a1:9a:71:67:6e:54:49:
d7:2b:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:29:28 2026 by rpki-client