Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: a9o0haSmhikdQitsEXpl4I/7kolCE2WY758CrQtpGTI=
Subject key identifier: 80:E0:5D:97:CE:7E:A9:A1:39:EF:BD:FA:E2:AD:98:A5:EB:AD:99:2D
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019D97E195792C32EB0AC88C0D69BB1985DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 20:00:36 +0000
Manifest this update: Thu 16 Apr 2026 20:00:36 +0000
Manifest next update: Fri 17 Apr 2026 20:00:36 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: AM5lx2nj4NgGxvBfcKa1F+MEupOKlfsIx62W2RGPd9g=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:95:79:2c:32:eb:0a:c8:8c:0d:69:bb:19:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Apr 16 20:00:36 2026 GMT
Not After : Apr 17 20:00:36 2026 GMT
Subject: CN=80e05d97ce7ea9a139efbdfae2ad98a5ebad992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:1d:db:f5:b4:d3:3f:11:54:9b:88:12:0b:
65:8d:c0:24:e6:0b:55:27:70:4f:2c:19:36:cb:9c:
cb:82:2c:94:e2:1b:ed:80:67:91:1c:83:80:55:ca:
c8:99:f6:a4:26:69:a9:23:b8:b3:90:62:31:28:d2:
57:3c:1c:48:02:27:b8:be:7d:e0:66:6a:1f:29:ad:
1c:0c:bb:86:5f:ef:10:1a:90:63:ef:1a:76:af:21:
ee:61:2e:9a:63:0e:b9:47:6c:96:62:17:88:f6:b2:
eb:31:c8:62:4e:7e:bb:07:82:97:ba:82:15:d2:fc:
d5:98:f3:8f:72:37:c5:cd:63:aa:7c:f5:80:23:2a:
9d:99:c3:72:00:9a:e0:84:1d:3b:f1:51:9b:c4:ac:
05:25:2a:da:d9:d2:17:ef:50:4b:07:a8:b8:3c:92:
87:cd:15:f2:fa:46:f7:d0:24:d8:fc:bf:33:6e:a0:
28:37:31:63:9c:7c:d1:94:3e:f4:b1:7e:b1:8a:29:
12:f4:9e:a4:8c:50:b8:5d:41:c4:2e:a8:41:97:1d:
3e:91:f6:79:da:89:16:46:f3:f6:22:e6:d0:3c:b9:
53:c3:a1:ee:0c:74:6a:72:51:38:53:45:8b:7a:ad:
80:90:94:bf:94:17:3a:03:ce:89:48:e5:e3:c4:c7:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:5D:97:CE:7E:A9:A1:39:EF:BD:FA:E2:AD:98:A5:EB:AD:99:2D
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:f7:9b:ea:6c:18:46:3b:f4:d2:31:cd:03:b2:b5:e2:b1:
2b:94:95:25:88:31:8f:34:88:50:a9:ab:84:24:d4:8a:e7:94:
42:4a:38:e9:22:7f:cc:2c:6c:52:07:5a:09:ea:b4:63:77:84:
40:5d:f8:c2:54:2f:c9:e4:d5:96:0d:5e:6f:8a:24:8b:eb:cb:
48:4e:4e:0b:eb:2f:38:f7:91:96:ab:9a:36:e5:5d:a2:8f:dd:
5b:b2:f5:cd:99:38:af:ec:b3:99:f4:4f:91:83:0d:4c:97:5a:
a3:f5:da:f0:39:44:db:d7:d5:2d:56:b0:ce:c5:9c:71:db:17:
69:cc:f9:47:72:4d:23:e0:6e:16:3a:78:39:cb:17:ce:e1:04:
8c:b3:96:7e:27:a8:4e:0d:91:dc:6f:bb:53:00:c7:fd:6a:a1:
45:c3:df:ce:df:8e:4f:24:9b:b2:e4:35:bf:92:57:c8:62:0c:
75:59:f4:06:0e:70:10:c0:78:3a:17:8b:45:b7:fc:47:59:e1:
a2:1b:cd:b4:f7:42:7c:0c:4b:a2:b7:e7:d2:ca:68:90:bd:e6:
83:09:ce:24:9e:2b:b7:0b:6a:dc:81:3e:aa:db:26:91:ae:74:
af:d4:f6:5d:85:66:48:2b:6d:aa:29:17:d9:c0:41:f6:73:ef:
ee:62:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:14:55 2026 by rpki-client