Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: DS7f7QAwUUOQ97UhBpQ/e3fzU9PfmFGS2PVHv9EOHOk=
Subject key identifier: 9F:E2:E0:99:92:DF:58:64:94:2E:35:F3:52:DB:EA:85:DE:4D:4E:F3
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019CACEBE1112A4227F78CF2CD33AB48DD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1583
Signing time: Mon 02 Mar 2026 05:01:05 +0000
Manifest this update: Mon 02 Mar 2026 05:01:05 +0000
Manifest next update: Tue 03 Mar 2026 05:01:05 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: wxTRG7zEfP6VmVTsiaVGuIHURk0bMb4HQ4PpBYS5bnQ=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e1:11:2a:42:27:f7:8c:f2:cd:33:ab:48:dd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Mar 2 05:01:05 2026 GMT
Not After : Mar 3 05:01:05 2026 GMT
Subject: CN=9fe2e09992df5864942e35f352dbea85de4d4ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:b3:24:9b:8c:f1:85:3e:b9:e7:e3:c1:d9:
dd:73:b0:94:4a:22:65:02:11:da:c1:11:b3:9a:5f:
7f:87:4f:cf:a3:05:0d:67:22:67:a2:89:13:0b:26:
8c:c2:e7:d0:80:d3:86:8e:90:45:06:19:cc:8f:6f:
02:0a:cb:5b:58:01:60:df:e7:96:9b:dc:27:73:ae:
3e:4f:5e:dd:9c:e9:e8:a1:e2:0c:b5:59:d0:b8:01:
15:01:ba:57:2f:06:68:cc:31:9e:72:09:73:0d:6e:
d1:5b:d4:44:c4:b5:55:1a:03:60:84:95:c3:7e:59:
17:f6:79:ce:51:ea:a7:14:7b:c0:8a:d5:c7:00:5e:
c3:54:89:58:1a:63:15:02:1b:55:76:ec:39:08:eb:
e4:d1:1e:2e:77:5d:2c:14:21:23:6c:c9:b8:39:d7:
c3:c7:ff:4c:56:0e:75:a9:c8:13:2e:74:cf:1e:fe:
cd:97:dd:9c:a6:56:76:ad:1c:1a:d0:94:3c:f8:2a:
b2:d8:cc:3d:0c:ba:15:81:99:bb:32:a2:74:a8:48:
3e:5c:c1:03:83:1f:ce:b8:31:8d:78:58:1c:5b:bb:
6e:fd:01:60:17:46:d8:e9:73:5e:93:f1:92:41:80:
b0:fb:8b:78:10:a2:23:79:f6:ab:0c:13:60:0d:ce:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:E0:99:92:DF:58:64:94:2E:35:F3:52:DB:EA:85:DE:4D:4E:F3
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b3:de:7e:59:c4:28:09:73:a5:61:68:14:a5:ba:fa:1f:a4:
d3:81:0d:33:0a:2c:e3:c9:e2:25:3f:6b:32:4e:c5:69:40:16:
db:bd:d9:6a:36:14:cf:4d:d6:18:94:e5:e5:e8:01:27:e5:0c:
35:55:18:46:19:66:8d:9a:99:95:b2:15:2b:5f:2b:96:7e:c4:
15:3e:c0:cd:ad:94:83:fa:62:07:2d:e6:69:3e:30:c0:18:3d:
ed:71:bb:0d:5c:77:83:a6:04:d5:42:b4:f5:f2:5a:ef:ec:ef:
01:c0:60:21:39:fe:3e:62:41:a3:61:ae:99:32:8e:26:24:58:
2b:e0:3b:c9:6e:b5:2f:32:ff:34:7c:8e:58:23:8c:a8:3e:17:
9f:db:e6:c2:73:42:3c:06:10:58:df:3e:75:9f:3f:5a:6e:ae:
1f:56:84:e7:79:b1:51:58:7e:af:ae:f4:99:fd:b1:22:07:39:
5b:ba:f4:af:3b:75:89:28:71:96:99:66:aa:20:fc:04:8d:ec:
f5:0c:f8:3a:1e:83:38:b3:8b:50:77:91:24:e4:12:12:7a:cd:
b7:98:b5:95:a9:06:99:07:57:9f:fb:8a:7f:5f:10:2c:3e:54:
a8:ce:0d:1c:7c:05:55:3d:7d:a8:0c:3f:04:05:19:35:8c:93:
d6:ca:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:31 2026 by rpki-client