Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: sJYVqiomHHEG6W+Tl6Yj0FnOkEARz2AqE4Od7stqhPQ=
Subject key identifier: B1:03:6C:7A:9A:39:48:B0:48:09:99:68:B8:70:CD:44:47:91:56:F7
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 01A0C8C6468E74CF490E11FB5A8A1F12CE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 04E3
Signing time: Tue 22 Sep 2026 11:00:32 +0000
Manifest this update: Tue 22 Sep 2026 11:00:32 +0000
Manifest next update: Wed 23 Sep 2026 11:00:32 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: jHB7j7wt1ZlvXoQD2RzuxEQuifCiNBTTqN4hZsKTYyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:46:8e:74:cf:49:0e:11:fb:5a:8a:1f:12:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Sep 22 11:00:32 2026 GMT
Not After : Sep 23 11:00:32 2026 GMT
Subject: CN=b1036c7a9a3948b048099968b870cd44479156f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:80:4f:72:cf:5e:e8:17:1e:87:6c:db:56:
c1:ed:82:dd:54:f9:7b:16:d0:39:15:91:17:cf:ed:
70:24:9a:8c:ac:b5:66:d7:7a:5f:1b:21:0f:3b:dc:
a5:02:f1:f0:8f:bf:29:cd:74:5b:78:8d:72:d8:f8:
81:3b:7c:6f:f8:5a:33:f5:64:b2:b1:c5:2b:ac:73:
b6:6a:b9:49:3e:fe:72:fe:7f:9b:f0:3b:af:5c:a0:
34:ce:d2:ea:5d:03:a4:e4:1f:0d:0d:be:21:86:b6:
59:93:fb:58:b4:27:4a:63:dd:0b:d2:c2:a9:8a:b6:
fe:1f:a8:64:8f:69:93:cc:7b:63:a4:20:20:1f:bb:
91:bf:53:a6:84:0e:d0:67:1d:9d:08:f8:c5:1f:40:
45:1c:80:12:87:6e:1b:aa:b2:d3:6b:24:fd:fe:46:
18:24:f5:b2:13:12:25:4c:3f:22:15:95:77:c0:c9:
c7:73:d8:20:32:d4:90:72:a1:b9:eb:e1:3a:dd:73:
9f:b0:a7:85:42:1b:2d:eb:cd:83:5f:91:ab:15:7b:
19:de:e4:a0:93:14:55:3f:b5:19:70:44:f7:b5:26:
2f:82:e8:58:86:2d:1e:9b:cf:34:87:fc:1e:eb:75:
c6:c3:10:45:c7:6c:7b:0e:8f:8f:98:d1:6b:36:17:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:6C:7A:9A:39:48:B0:48:09:99:68:B8:70:CD:44:47:91:56:F7
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:04:d2:fa:0a:61:5c:24:82:ff:e5:e1:d2:c6:f7:14:4b:a5:
32:e0:4a:0c:40:43:70:a7:b7:23:99:bd:7e:53:2b:c5:20:da:
27:97:0a:87:8d:4c:1a:c5:b2:c9:93:92:8d:ce:7b:47:37:f0:
8d:da:9a:1f:15:8e:02:6f:78:b6:92:fd:04:e5:d5:59:3b:4c:
6a:20:f9:50:8e:2c:4e:76:5c:ba:08:96:49:9e:02:4a:52:3c:
52:7c:52:af:1e:a4:cc:6c:61:dc:99:1f:44:bb:2c:cb:f7:ee:
35:2f:3d:83:aa:1b:90:a3:69:bf:1b:49:20:47:bd:19:1e:27:
11:60:96:f4:d2:77:d3:b9:66:db:02:2f:e1:d4:1d:ea:63:9c:
21:ed:0a:0e:ca:00:30:09:5a:56:75:42:72:1a:a2:52:d9:0f:
cb:dc:9a:01:83:73:f0:c9:b1:3f:90:64:1e:3c:08:b8:65:2a:
1e:03:15:3d:4a:38:92:1d:5e:68:52:9e:52:3a:2d:67:97:d2:
38:61:86:10:e3:4f:7a:2e:c5:cc:51:76:b7:bc:a2:20:fe:20:
b5:b1:be:86:b9:64:f5:29:6e:2a:0f:9c:33:c1:14:e1:e9:f0:
a2:03:7f:e8:e3:a8:7e:14:86:1f:cc:c7:b7:03:87:7a:25:a4:
98:68:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:08:41 2026 by rpki-client