Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: G3TQ8CzJjaCCO0qPjAbwYnQlXIubI17Ry+0XQ4mEiVc=
Subject key identifier: 0B:04:BC:F2:92:71:13:E0:6B:27:FA:DE:40:D3:82:12:C7:FF:23:BF
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019EC1EDD42BF9FB8AC48D69B5521767D6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1697
Signing time: Sat 13 Jun 2026 17:00:49 +0000
Manifest this update: Sat 13 Jun 2026 17:00:49 +0000
Manifest next update: Sun 14 Jun 2026 17:00:49 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: EalJI+WQzSmjGHnbONJRmbHboNcbiKtD3IqxUUd6jHI=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:d4:2b:f9:fb:8a:c4:8d:69:b5:52:17:67:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 13 17:00:49 2026 GMT
Not After : Jun 14 17:00:49 2026 GMT
Subject: CN=0b04bcf2927113e06b27fade40d38212c7ff23bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:ef:47:d4:1d:9e:2b:ea:b9:17:c0:98:e3:
24:18:f8:1b:38:84:c0:3f:25:c0:9b:8f:80:8e:97:
0f:b4:a6:9e:5f:aa:ee:0d:a2:77:da:ec:ea:28:9e:
fd:00:b4:0f:00:28:8e:c1:69:64:30:b7:36:13:4a:
64:5e:f9:32:f1:f9:4f:ea:2e:f3:20:62:c2:d7:84:
2d:69:30:58:30:27:35:0e:73:f0:f4:1a:c7:e8:89:
b9:be:3c:21:de:8e:93:ab:80:95:80:57:41:41:5f:
d6:63:64:ef:37:cb:6e:f4:3c:f3:eb:2c:88:91:7b:
1f:74:f5:d9:0f:16:b3:59:03:0d:26:9b:e8:a9:46:
a2:f1:44:a6:17:4b:06:87:61:d3:39:1b:80:87:8d:
27:71:77:f1:fd:8f:85:ba:46:71:33:e9:25:e2:b4:
f4:e2:0d:8c:f7:2c:df:f8:8b:39:24:35:d9:a6:70:
a3:2a:f3:a2:1b:84:eb:be:0d:42:d1:d2:8f:55:f2:
65:fb:4d:d5:83:ac:ef:a0:a1:79:77:1a:dc:fb:db:
bb:fc:ac:9b:11:a7:8c:05:6a:b1:3b:a8:4b:6f:a2:
fe:bc:e7:bd:e5:ec:0e:a3:4d:a5:4f:2e:84:72:f4:
60:22:a5:c3:99:3c:b5:e1:45:33:4f:24:b1:d4:6c:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:BC:F2:92:71:13:E0:6B:27:FA:DE:40:D3:82:12:C7:FF:23:BF
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:62:b0:cf:82:f6:ec:76:9b:0c:74:cb:24:66:49:73:16:
e8:a0:6f:d9:53:7e:c0:91:08:49:e3:77:81:e9:c3:6b:c2:84:
ea:50:9f:14:2d:34:a1:b0:18:1c:f1:71:81:d3:82:1e:45:9c:
86:8f:16:5e:48:4b:73:42:55:5c:d3:5e:54:3e:e8:d9:2b:c6:
da:21:d7:2d:48:5b:27:79:7b:bb:fe:e4:2b:da:a8:aa:6a:11:
73:fb:7b:c1:62:d2:12:f7:b1:d5:d4:35:1e:4b:be:cd:fd:35:
8d:ec:5c:24:ca:df:29:d4:04:e6:13:5b:60:73:b1:60:f4:7d:
67:a1:0c:82:9c:57:4d:1f:86:1e:1b:c0:9f:3b:01:69:3c:ed:
4d:3b:61:ad:93:43:17:6d:4e:71:4f:47:63:24:75:b2:09:c6:
02:de:c0:2a:aa:d5:26:33:01:42:dc:a9:c3:1e:57:78:20:df:
7b:24:4b:df:54:17:20:a9:04:41:a0:3a:0d:e6:08:86:6d:67:
42:16:eb:f6:0f:3a:b3:3d:5b:00:06:2a:63:7f:d3:9a:75:b8:
51:5d:b1:7c:f2:c4:b5:2c:85:06:71:0b:b4:d3:be:00:f8:50:
b2:12:61:16:e7:b5:13:d7:84:ff:38:45:7b:7b:01:e3:07:ed:
94:46:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:09 2026 by rpki-client