Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: SPBXxESMg64IEgDXcXHIIUCTW/Dp0qLSbjL8FEX+tsw=
Subject key identifier: 55:2A:C1:7E:DC:C2:64:D6:3B:71:A6:39:6D:73:84:7C:99:0E:4D:D2
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 01A12BE993ECE8FEA9C07E132C11AB9BB353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 17D7
Signing time: Sun 11 Oct 2026 17:01:30 +0000
Manifest this update: Sun 11 Oct 2026 17:01:30 +0000
Manifest next update: Mon 12 Oct 2026 17:01:30 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: ARcPBQ70/8KwQUDhOxJ6ZCW7rEWrCUfsOZnaWlItPdY=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:93:ec:e8:fe:a9:c0:7e:13:2c:11:ab:9b:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Oct 11 17:01:30 2026 GMT
Not After : Oct 12 17:01:30 2026 GMT
Subject: CN=552ac17edcc264d63b71a6396d73847c990e4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:54:aa:3d:ee:71:8c:c8:ff:d9:b3:d5:d1:
7e:9f:54:79:0a:15:dc:33:2d:5f:48:70:c8:8c:c3:
03:b0:dc:41:c4:a5:67:03:bf:68:0f:64:be:bf:07:
4d:57:5d:b3:86:62:6c:56:39:21:d9:ee:1e:85:45:
ef:17:e3:b6:7d:2c:9e:1f:41:19:57:1f:41:45:9b:
93:b2:7e:bf:3a:b6:ba:0a:77:47:1c:71:d5:62:61:
d6:c0:2a:c9:ad:83:cd:d1:4a:e2:24:46:16:0e:ad:
3a:7b:99:ea:36:16:ac:ad:35:cd:bc:70:fd:b4:c1:
ca:c2:f9:36:f5:b9:1d:ce:11:12:4e:6a:00:13:6f:
20:51:ae:b1:82:50:9c:42:38:08:44:67:23:7d:dd:
a3:f2:76:49:9d:eb:23:22:e9:da:d8:de:51:c4:75:
df:5b:ac:28:74:e4:72:cf:17:6b:32:b0:86:ab:ef:
b4:43:6c:93:b7:4b:c9:10:23:91:d2:e8:d2:a6:4a:
ee:d2:45:10:9b:b5:78:e5:2f:de:b2:ee:ff:a5:e0:
56:a5:e7:99:f3:ec:b1:a2:14:2c:82:ad:eb:31:1d:
ce:cd:84:18:ea:57:8d:77:bb:90:4a:b7:d3:a0:3d:
b8:f9:c6:f4:e0:47:36:33:29:25:31:33:c5:8b:ee:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:C1:7E:DC:C2:64:D6:3B:71:A6:39:6D:73:84:7C:99:0E:4D:D2
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:84:c3:d6:ee:ac:40:01:bb:55:32:07:1f:ba:f0:75:09:
11:c7:95:ce:0c:f3:ed:13:bd:ae:af:39:ca:f3:80:72:74:58:
44:38:5c:89:30:91:3f:51:fa:cb:6f:58:1c:25:2e:d7:50:14:
57:e2:4c:80:25:92:a4:9a:7d:f4:26:f8:8d:93:9a:db:85:20:
cc:2d:63:30:66:57:af:fd:9a:0a:7d:5b:af:9f:ca:6d:1d:c9:
2f:8b:6d:63:b2:97:13:15:99:0d:90:92:f8:f1:71:75:48:88:
c6:98:56:a8:31:aa:27:fd:18:82:f2:71:0b:87:21:66:15:e9:
77:23:51:87:70:77:8b:d0:3c:8e:fc:50:c1:b6:7b:1b:d0:fa:
75:d2:4a:bc:5d:93:06:17:4c:19:08:5c:ed:bb:42:42:e3:97:
f8:8c:16:df:12:76:cd:08:34:10:6b:81:c8:19:04:f3:dc:49:
c9:3a:56:b9:d2:56:c3:5d:e4:17:48:7e:5d:2d:ee:4f:6b:69:
a2:b0:09:a5:78:4d:77:b4:12:11:53:e7:d0:7c:36:63:4f:a8:
f9:1c:58:34:69:1c:05:9f:cb:d3:31:10:33:81:0a:2b:fa:dc:
ff:55:45:29:fa:dc:74:63:20:d3:e2:72:59:c0:63:da:a1:a9:
14:37:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:51:58 2026 by rpki-client