Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: EvgLQ2Au7UWps7wgvLKPLdPoRXaqLnwjilEBN0v78BQ=
Subject key identifier: 46:DC:16:85:0B:13:1D:7F:2B:12:5C:B8:DF:4E:6B:B1:F0:C0:C3:61
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019FA90725E2510FBCDA2A65ED192D1FEAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 14:00:45 +0000
Manifest this update: Tue 28 Jul 2026 14:00:45 +0000
Manifest next update: Wed 29 Jul 2026 14:00:45 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: RZeUcuIPmtJ4IoogK29aYnJrI9wIaZhhRlQBtzcjx4E=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:25:e2:51:0f:bc:da:2a:65:ed:19:2d:1f:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jul 28 14:00:45 2026 GMT
Not After : Jul 29 14:00:45 2026 GMT
Subject: CN=46dc16850b131d7f2b125cb8df4e6bb1f0c0c361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:a9:0e:6d:2f:81:85:e7:86:4e:07:8a:77:
8c:7a:35:97:c0:96:c9:c5:47:9a:19:00:2f:3d:4b:
29:91:a8:14:9b:ed:58:03:95:46:f1:ea:b8:97:4c:
3c:70:08:4c:57:76:89:99:3b:9b:d3:81:fc:d5:70:
af:f0:6e:31:ea:1d:53:d6:cd:bf:2a:0e:54:ce:6e:
8f:66:78:aa:7e:28:f5:bf:9f:f4:f1:9a:3d:51:54:
e4:6a:bf:98:fa:a1:56:c3:b4:af:41:e1:78:76:a8:
be:2f:5e:46:07:84:ff:71:6c:11:64:28:21:ca:2e:
ec:75:d9:fb:11:2d:0d:ea:d7:c1:e8:29:86:a0:30:
6f:37:01:f7:85:fd:45:77:88:75:d2:3d:da:c6:b9:
95:0e:2e:84:3d:45:1e:74:b1:9f:ba:72:8d:d6:5d:
85:83:34:41:ad:00:a4:14:88:47:07:a3:b9:cb:bf:
b3:39:fd:53:fc:7b:85:0c:3f:15:01:7e:df:5f:cb:
b8:f3:44:01:a1:65:90:e4:c7:4c:b3:c6:f4:e6:26:
1e:1a:0e:34:66:c7:95:cc:f9:0b:21:60:7e:89:62:
b4:fe:76:15:47:82:29:47:b8:5e:72:03:bb:ed:62:
aa:bc:ca:43:7a:62:02:d6:ad:5e:1c:59:87:42:47:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:16:85:0B:13:1D:7F:2B:12:5C:B8:DF:4E:6B:B1:F0:C0:C3:61
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:60:b7:ce:7a:3f:d1:6e:2b:9c:5a:f9:7a:18:3b:b2:e2:8d:
81:1f:4b:95:61:3f:12:a4:88:b2:d9:a1:ca:89:0f:95:0b:e6:
7a:34:32:ca:6f:2e:59:a7:cc:0f:99:70:f3:6e:a3:04:d8:63:
23:4d:c5:76:5d:33:07:16:c1:c5:eb:7b:9d:ff:05:70:7b:da:
c1:ba:c8:45:ce:f5:da:fc:14:56:75:fd:90:39:1d:2b:ad:ba:
69:16:91:92:a3:a6:23:d0:3f:3e:19:00:dc:52:ce:f0:c9:9c:
25:b0:7a:6d:5d:c3:2f:b4:c9:bc:07:a9:02:78:aa:68:bf:74:
db:82:77:78:92:30:c7:42:b8:61:56:56:1b:c2:09:ef:98:98:
05:5f:0a:3a:8a:93:e9:eb:55:75:bd:57:0d:d5:c4:7e:d4:16:
49:c1:10:fc:9e:6a:7a:e1:a9:34:ca:fc:5f:23:b6:c2:eb:bd:
1b:75:2c:7b:42:37:b7:15:36:19:0e:45:25:15:99:d9:ec:89:
6a:e9:97:dd:e5:62:e6:76:fb:94:08:34:49:6c:32:80:67:c0:
f1:bd:05:17:54:49:64:4e:c8:3b:62:2e:26:ca:7c:01:88:fa:
ed:c3:d8:b8:95:4e:e9:f9:9e:a0:eb:8d:95:30:9b:56:d2:be:
3c:c4:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:46 2026 by rpki-client