Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: xcvolHxKk25xd58b8DR9fFDqAWYjIRf+j0GnV5K6lxE=
Subject key identifier: 1D:18:9C:33:1D:0B:CD:D5:2C:D3:DA:C6:48:AD:9C:CC:19:CF:5E:E9
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 019D9DAD2B274D6B4189FB908CC76F113DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 033F
Signing time: Fri 17 Apr 2026 23:01:04 +0000
Manifest this update: Fri 17 Apr 2026 23:01:04 +0000
Manifest next update: Sat 18 Apr 2026 23:01:04 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: ogb7PzoUqCPT/h43TfNdqgdj6viLhXz3iCOCsohOs5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:2b:27:4d:6b:41:89:fb:90:8c:c7:6f:11:3d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Apr 17 23:01:04 2026 GMT
Not After : Apr 18 23:01:04 2026 GMT
Subject: CN=1d189c331d0bcdd52cd3dac648ad9ccc19cf5ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:00:4f:cf:30:b5:43:48:ae:b2:46:2e:c9:
83:4e:47:b1:98:6c:40:0f:0e:ec:df:3e:15:f6:48:
2e:de:40:46:50:17:0d:46:47:a0:48:57:78:43:84:
52:22:97:2f:73:a2:17:38:66:e1:16:fe:6c:77:b3:
76:18:7b:97:d1:af:10:65:24:12:86:b9:f0:ee:e4:
9c:27:80:5b:90:3b:15:24:92:d7:0e:57:d3:c5:54:
c1:f7:0d:ff:f1:9c:e9:ff:81:c5:ee:95:06:74:c1:
0e:69:80:2a:ec:4d:ca:06:33:7d:b9:fc:c2:61:b7:
71:c2:2f:39:e3:9f:94:ca:0f:0e:91:da:8a:84:21:
37:aa:31:29:aa:8c:87:15:f7:02:ee:b4:a1:67:5f:
dd:95:6e:1c:44:1b:56:41:1a:57:79:d2:44:a0:3d:
32:32:08:71:16:66:ef:00:62:02:22:46:70:b7:7a:
9f:35:32:8e:f7:0e:06:9d:69:5a:c4:8f:b1:8b:86:
17:a4:dc:3c:aa:e1:3c:f6:c3:f7:63:63:81:ff:2d:
1e:59:7d:0f:59:c7:8f:3f:4a:ab:5a:7f:bc:76:cf:
82:af:9a:b4:97:87:55:2d:05:ec:93:93:10:6d:b6:
87:f9:5e:6e:39:0f:c1:46:38:bf:f4:0e:41:2e:17:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:9C:33:1D:0B:CD:D5:2C:D3:DA:C6:48:AD:9C:CC:19:CF:5E:E9
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:cb:d6:49:10:ad:55:bb:00:b6:76:b3:4d:6d:93:d0:32:
81:e5:80:a6:73:31:6b:43:c2:e5:86:7b:79:bf:5f:a5:9a:dc:
51:0f:d2:24:d3:7a:ae:1e:c6:9a:43:2f:9d:02:bb:6f:55:88:
d7:d2:b5:b4:bf:f1:ea:04:8d:7f:67:19:c9:3b:e2:b2:84:4c:
f9:65:b3:cd:16:0a:66:4d:9b:ce:89:58:39:bd:62:60:c0:f7:
97:5d:88:17:5a:fb:82:4f:ca:48:6e:10:74:c2:59:2b:aa:b0:
8d:d3:0b:9f:aa:da:9e:75:09:98:c6:d7:94:fa:5a:d0:93:e3:
1f:2f:48:9a:28:6f:f7:1c:e9:22:7c:55:2a:3e:6a:52:b5:c2:
4b:6c:04:a9:6e:e6:db:87:e7:9c:af:66:65:5b:1a:91:13:b4:
7f:61:36:76:99:ac:9a:ae:fb:56:1e:3e:a8:22:02:6f:cf:ab:
d6:88:e7:1a:63:f3:71:3d:51:b5:05:7e:d7:d2:19:43:f4:2a:
ce:92:66:b0:65:8a:d2:ee:d5:d7:df:0a:91:97:14:cc:b2:de:
0a:ba:a1:e4:a8:56:fb:7d:1f:50:1c:b9:6f:70:0c:c0:85:b0:
46:af:fd:f6:4a:8a:e0:91:dc:02:70:d6:21:77:c9:79:a1:82:
f8:79:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:39 2026 by rpki-client