Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: T3mj4R2rRsfceZUdFhhtN8g5gc6KH8sFzafDim0UMwY=
Subject key identifier: 2E:33:8F:27:1A:76:2B:C7:44:9C:06:89:8B:BA:B9:EE:31:8C:51:A5
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019D9C62EA0BA00595F8F10AAD5E8EE7420A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 15FF
Signing time: Fri 17 Apr 2026 17:00:21 +0000
Manifest this update: Fri 17 Apr 2026 17:00:21 +0000
Manifest next update: Sat 18 Apr 2026 17:00:21 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: 0UpHy2tEWWm6PoBnIavdZL8yPfTk5X5PtAcD89rCJB4=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:ea:0b:a0:05:95:f8:f1:0a:ad:5e:8e:e7:42:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Apr 17 17:00:21 2026 GMT
Not After : Apr 18 17:00:21 2026 GMT
Subject: CN=2e338f271a762bc7449c06898bbab9ee318c51a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:45:e5:ba:a0:be:ae:0c:f3:70:27:47:37:
a8:1a:f5:c7:6e:43:01:57:5f:5d:59:b1:74:4a:cb:
d2:81:9a:4d:bd:43:42:3b:3d:b4:01:21:31:93:2e:
55:73:f4:d1:4a:a7:d0:af:b7:fa:7d:08:09:3c:37:
4f:9e:0e:44:8a:05:00:be:3c:98:78:74:3e:6e:20:
58:7f:ad:06:ed:05:a2:07:10:b3:2f:75:c1:db:24:
07:40:71:c5:8f:80:4b:b2:ef:b2:a8:c3:54:6a:15:
d9:d6:bd:90:f2:a4:62:83:ba:ee:ba:37:e6:1b:0a:
37:17:11:94:19:81:68:1e:b7:27:61:b3:50:81:b3:
f2:03:39:2d:4d:d7:7f:d2:b8:ef:f1:b2:52:bb:8c:
f0:23:92:7d:68:eb:d6:9d:f2:55:90:1c:33:1e:6e:
c3:64:00:ac:c6:1d:de:78:89:2d:7a:b1:71:8a:eb:
b1:32:e5:46:3e:00:55:7f:4e:10:0d:db:ae:b4:95:
07:66:45:24:0c:1f:de:b3:94:31:62:07:a4:4b:76:
c6:14:22:5d:9a:ac:07:76:00:7c:51:77:dd:3d:50:
2a:23:9a:86:c2:07:f6:67:15:30:7a:eb:83:c4:f8:
a8:82:10:e0:4a:51:9f:0d:be:a3:f6:39:21:80:dc:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:8F:27:1A:76:2B:C7:44:9C:06:89:8B:BA:B9:EE:31:8C:51:A5
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:92:4d:45:42:de:41:12:6d:7e:e4:ae:6e:2b:00:7c:fc:
14:9b:45:de:a3:02:ac:cb:f8:88:66:56:31:3f:f4:ad:25:c8:
ac:84:96:40:07:0d:48:a1:17:a1:35:06:27:0a:5b:61:d0:dc:
b2:c5:da:4a:ee:1b:e0:2f:76:cc:91:84:ce:3e:87:eb:0f:71:
34:75:da:f4:6d:ec:41:8f:db:0a:15:d8:92:1c:a2:71:00:92:
74:ba:1e:82:51:ee:46:2a:bf:4d:4e:61:62:7f:c1:22:64:6d:
75:60:2c:82:dc:14:65:9a:43:ea:8f:06:e7:2e:6d:76:15:b3:
44:de:eb:0b:c4:30:67:31:9d:ed:68:78:4b:71:ab:b9:d6:bd:
b3:64:55:65:4b:41:be:5d:a1:67:f1:d5:6d:6d:e9:37:97:42:
59:63:30:f3:ee:c5:6d:df:12:c7:2f:57:4c:fb:c4:23:8d:8c:
46:54:22:a4:b5:dd:76:82:ae:4e:23:ce:91:43:60:df:e3:4d:
a6:a9:e8:78:1c:7c:79:71:13:33:92:35:bf:b9:72:02:31:40:
77:00:a1:74:d0:e7:f1:f1:1d:10:0a:59:6a:0a:f0:1a:78:fa:
84:57:9a:ac:e0:59:bc:35:c4:88:50:69:83:62:2f:4c:d9:01:
23:9a:19:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYuoLoAWV+PEKrV6O50IKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj
MzU0ODYwHhcNMjYwNDE3MTcwMDIxWhcNMjYwNDE4MTcwMDIxWjAzMTEwLwYDVQQD
EygyZTMzOGYyNzFhNzYyYmM3NDQ5YzA2ODk4YmJhYjllZTMxOGM1MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTdF5bqgvq4M83AnRzeoGvXHbkMB
V19dWbF0SsvSgZpNvUNCOz20ASExky5Vc/TRSqfQr7f6fQgJPDdPng5EigUAvjyY
eHQ+biBYf60G7QWiBxCzL3XB2yQHQHHFj4BLsu+yqMNUahXZ1r2Q8qRig7ruujfm
Gwo3FxGUGYFoHrcnYbNQgbPyAzktTdd/0rjv8bJSu4zwI5J9aOvWnfJVkBwzHm7D
ZACsxh3eeIkterFxiuuxMuVGPgBVf04QDduutJUHZkUkDB/es5QxYgekS3bGFCJd
mqwHdgB8UXfdPVAqI5qGwgf2ZxUweuuDxPioghDgSlGfDb6j9jkhgNw+lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4zjycadivHRJwGiYu6ue4xjFGlMB8GA1UdIwQY
MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt
YzY1NDM1NmIwN2M0LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0
LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4CSTUVC
3kESbX7krm4rAHz8FJtF3qMCrMv4iGZWMT/0rSXIrISWQAcNSKEXoTUGJwpbYdDc
ssXaSu4b4C92zJGEzj6H6w9xNHXa9G3sQY/bChXYkhyicQCSdLoeglHuRiq/TU5h
Yn/BImRtdWAsgtwUZZpD6o8G5y5tdhWzRN7rC8QwZzGd7Wh4S3Gruda9s2RVZUtB
vl2hZ/HVbW3pN5dCWWMw8+7Fbd8Sxy9XTPvEI42MRlQipLXddoKuTiPOkUNg3+NN
pqnoeBx8eXETM5I1v7lyAjFAdwChdNDn8fEdEApZagrwGnj6hFearOBZvDXEiFBp
g2IvTNkBI5oZtw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:57 2026 by rpki-client