Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: B/HrWcLmVLBcV46sAG1mlP1jOKaHz2xsM7hc7GUGGNc=
Subject key identifier: E0:DC:A2:4C:BF:7C:CB:22:7D:99:D2:5F:30:B1:A5:D1:55:44:F2:B6
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 01A0BF1E2CCC74CE2F803C47DF15275ABF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 14:00:20 +0000
Manifest this update: Sun 20 Sep 2026 14:00:20 +0000
Manifest next update: Mon 21 Sep 2026 14:00:20 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: OFC1aqkCzfzWurizGj2lrLWlwRByMbbexKOHWto3v/Q=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:2c:cc:74:ce:2f:80:3c:47:df:15:27:5a:bf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Sep 20 14:00:20 2026 GMT
Not After : Sep 21 14:00:20 2026 GMT
Subject: CN=e0dca24cbf7ccb227d99d25f30b1a5d15544f2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:6d:62:3d:4b:ab:55:a5:4a:c0:ab:85:4e:
68:8e:fa:c8:fe:97:df:48:32:6b:d3:cb:07:76:c0:
2f:3f:3b:76:dc:f0:05:ba:10:96:6b:a9:c5:68:44:
c4:3b:db:28:0b:66:c1:5d:03:2b:7f:e1:0e:b0:bd:
93:0c:c9:fe:56:ad:95:83:45:3c:fd:58:06:52:b5:
5b:a0:2a:9c:c4:75:1d:36:71:46:4d:72:2a:13:ca:
c3:90:92:7e:0f:ad:5e:84:64:08:6c:17:8a:e9:cf:
a2:ed:f7:14:1a:00:90:29:1c:bb:4e:c3:1b:5b:71:
fe:73:51:76:f3:22:86:c5:e0:54:f5:c3:a4:97:33:
2b:05:75:bc:2d:96:22:dc:8f:f7:4c:5f:94:fb:42:
91:22:07:90:ea:5f:7f:2e:63:db:b3:38:9e:e3:5d:
30:65:c4:c1:a8:b6:2e:a6:ab:b1:36:da:5b:eb:de:
67:99:2a:99:ed:b4:ed:84:09:4f:ec:e4:fc:5d:79:
e6:a8:bd:10:15:7f:91:f0:ac:77:dc:f7:82:c1:9b:
95:20:8f:c0:d7:49:b1:a3:22:e4:cd:3c:dd:aa:bf:
d0:27:ea:7f:89:55:fe:92:67:a9:e1:b5:c7:58:a1:
2b:9b:47:1f:a9:cf:2e:fa:44:0e:4e:de:72:e1:68:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:A2:4C:BF:7C:CB:22:7D:99:D2:5F:30:B1:A5:D1:55:44:F2:B6
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:44:77:f6:d4:4c:56:0a:f1:67:86:23:51:d8:32:64:1f:
6a:0e:71:a5:5d:b2:99:88:df:36:c8:a6:21:bb:5d:57:ff:33:
b1:65:9e:86:12:1d:39:de:ec:94:f9:fb:2c:2a:1a:18:7d:49:
98:cf:67:90:d4:a0:ae:5e:8f:51:58:b2:13:b9:99:8e:86:98:
47:81:52:51:cc:93:9a:9b:b9:4e:f7:c0:ab:d1:56:7b:55:8d:
e0:c0:cd:5e:bc:10:b9:b7:b2:1c:cc:63:60:20:ea:75:e8:db:
13:73:b3:b3:c4:11:98:35:07:bf:11:7a:50:34:f1:84:eb:20:
40:2f:c4:3d:22:2f:43:28:15:ed:4b:b2:00:51:c5:c0:19:7d:
ba:2f:29:11:47:67:b2:6a:f1:1c:46:bc:7c:82:84:e0:23:e5:
0e:4a:ef:9c:ae:b4:d7:a0:9e:fc:0c:5c:59:05:46:a3:ce:0a:
a6:41:2e:60:df:0d:fc:dc:f8:ab:55:8e:3a:2a:71:e5:30:c9:
4d:a2:56:14:b0:a5:df:e9:f6:aa:14:36:b8:ae:3a:20:95:65:
6e:29:09:a8:dc:f0:59:ad:31:28:be:2b:44:7f:f0:6a:52:df:
d1:8a:d3:1d:10:b6:27:14:59:90:c4:d0:ae:67:05:34:25:89:
72:2e:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:23:10 2026 by rpki-client