Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: ko59cL7CyfGaFJwUWbGsb+8+GwoGqvjuOi/EOVEDIus=
Subject key identifier: 15:F5:AF:30:3F:E8:B5:E9:1B:22:28:4C:AB:38:7B:81:42:4E:BF:E9
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019CAA588755C99C88F76F2CFB291A3E4DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:00:54 +0000
Manifest this update: Sun 01 Mar 2026 17:00:54 +0000
Manifest next update: Mon 02 Mar 2026 17:00:54 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: un3214z7v+yI5Id6ua72R2iKl/5TfY8unogR3dDtq7I=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:87:55:c9:9c:88:f7:6f:2c:fb:29:1a:3e:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Mar 1 17:00:54 2026 GMT
Not After : Mar 2 17:00:54 2026 GMT
Subject: CN=15f5af303fe8b5e91b22284cab387b81424ebfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:91:17:1e:22:3a:a7:23:8b:cd:cd:42:5a:
d8:48:e3:2e:3a:7a:20:df:7a:c2:4f:9c:ca:5a:e4:
bd:99:d3:b8:3b:2c:63:da:44:bf:c5:29:dd:68:88:
f9:c4:0c:b6:8e:70:b7:ab:6b:1d:44:24:7f:c0:5d:
73:02:e1:2b:63:e8:8c:3b:26:35:38:ec:b8:00:b3:
ad:84:89:91:e8:30:c4:7a:fa:a4:8c:dc:8a:7e:4e:
8f:4e:b6:cc:ff:75:71:ad:6e:ec:84:5d:94:b7:ae:
af:21:94:c0:0b:c3:63:de:41:74:89:1a:32:d5:3b:
88:4a:42:d9:0c:2a:3f:c7:e8:e2:29:c7:be:a7:21:
f4:f5:15:d9:ea:04:5f:07:66:16:58:ac:ac:f2:b9:
08:e7:ed:44:a5:ba:cd:ea:6d:fe:dd:a0:2e:0a:29:
a3:10:f5:f0:79:1f:fd:8d:79:e3:c4:fc:06:3f:86:
25:ca:d0:d5:9a:15:1f:49:3a:b2:dd:40:d7:32:59:
3d:b7:6d:f7:89:a5:41:40:d3:f0:18:3e:ae:dc:fa:
ae:88:d2:a8:3f:c5:16:eb:a9:95:55:ae:13:c7:a8:
ed:43:b2:e0:c5:74:66:f4:fe:d0:a2:5e:2d:3d:b3:
e4:14:63:8f:9b:e7:4b:03:dc:4c:ca:c9:fd:44:6a:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:AF:30:3F:E8:B5:E9:1B:22:28:4C:AB:38:7B:81:42:4E:BF:E9
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:97:cf:ce:36:2c:78:19:a5:98:a6:f4:84:20:34:43:a2:f3:
39:4e:8c:0d:fd:8d:70:f2:00:57:c7:da:a5:78:ba:8a:f2:a7:
73:ad:69:37:ad:d9:87:99:45:b3:5e:11:73:ca:6b:9d:9d:97:
97:b9:d5:43:91:44:fd:34:5b:db:e8:91:a4:df:2c:49:61:6c:
b6:00:3d:85:61:8d:67:2d:dd:92:03:ce:98:b4:c0:7e:6d:f3:
9f:c2:08:41:6e:2e:90:44:5e:28:b7:ce:34:d8:38:73:95:83:
35:a4:2a:f3:2a:90:19:23:5d:c2:11:07:e7:fe:41:27:ae:fd:
3e:bb:43:c9:0c:c8:18:ef:6c:0b:87:1c:ec:c1:6a:1f:1d:d4:
76:1e:4e:70:65:08:d5:8b:a4:9c:e2:80:b8:ac:64:6f:cd:ae:
4b:c9:54:8a:94:a0:c1:9c:6d:24:62:6d:69:02:2f:27:7e:8a:
9a:a8:a9:47:53:ab:b7:5f:69:97:99:15:3e:72:bd:93:90:ce:
1d:2b:6e:d6:fe:b6:50:7d:ce:68:2a:2f:db:74:0f:34:b2:5f:
10:d2:97:83:06:0f:db:88:81:e8:f2:c2:a2:ce:d0:3c:46:d6:
1f:72:74:90:f5:21:ad:c3:75:3c:27:2c:e2:2b:25:e4:e4:bc:
f1:e5:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:32 2026 by rpki-client