Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: 7hktPn24Dp6Ylg11dnCQe8RjRy7eZlPjCjmu/cFhBF0=
Subject key identifier: 17:C7:C9:8E:71:C0:F4:DE:B2:75:BE:56:41:C7:45:14:E8:E5:8C:6F
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019EBE1110AE699169ADE7F2173EBA942676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1695
Signing time: Fri 12 Jun 2026 23:00:49 +0000
Manifest this update: Fri 12 Jun 2026 23:00:49 +0000
Manifest next update: Sat 13 Jun 2026 23:00:49 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: lBGweahAGiLKdcDM+ItFA0H8bRrvL4RBP2c/I+I1Baw=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:10:ae:69:91:69:ad:e7:f2:17:3e:ba:94:26:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 12 23:00:49 2026 GMT
Not After : Jun 13 23:00:49 2026 GMT
Subject: CN=17c7c98e71c0f4deb275be5641c74514e8e58c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:12:6d:a9:4c:9d:82:36:90:21:74:f2:1c:
2b:29:ee:72:32:2b:c7:02:e9:04:6a:cf:c5:26:fd:
20:97:c4:cf:2b:5e:28:3b:57:e9:36:69:9e:e4:0d:
42:86:11:65:b1:1b:6b:3f:5f:d9:ef:b1:51:10:88:
2e:9b:d2:9a:8f:b6:bb:19:63:de:96:95:35:2c:8f:
42:df:27:3a:dd:73:36:62:2c:08:e1:b9:e8:d2:ae:
af:23:ba:7b:21:19:99:cc:d2:54:fb:21:26:37:c7:
a3:ca:28:42:0e:d8:4d:5d:fe:79:a3:04:26:6b:f0:
b0:d6:42:4b:12:df:8d:01:33:bb:2c:fe:2c:65:ab:
02:b5:6c:0f:a8:cc:05:39:fa:38:7e:21:c9:92:b3:
de:23:e5:df:9c:85:7b:7c:8b:8e:23:ef:b5:39:ea:
ab:05:90:a8:fd:e1:ef:8a:70:b8:b8:27:aa:ce:6d:
91:9f:7a:69:95:bf:03:b0:c9:06:e4:62:29:17:5e:
ec:ff:db:56:34:1a:02:55:ef:53:59:42:42:a2:c3:
b1:ce:bb:1d:af:9d:e4:39:76:ac:9c:3e:da:9a:f6:
b4:79:dc:a0:06:74:73:bf:bb:c2:52:68:b0:fe:ac:
a0:03:0c:53:d2:87:2e:8d:73:02:46:15:43:fe:fe:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:C9:8E:71:C0:F4:DE:B2:75:BE:56:41:C7:45:14:E8:E5:8C:6F
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9c:ee:8c:43:38:04:8c:3e:b9:3d:f7:59:c4:a7:0d:e0:a2:
9d:7e:f7:32:71:9b:e1:ed:14:19:b3:c7:fd:7f:eb:4d:b1:d9:
c8:99:e8:44:27:6a:53:ad:06:29:4d:3f:bf:bc:ad:dc:53:5e:
4a:aa:ed:98:6f:cb:49:fd:12:bc:3d:f3:db:e9:f8:dd:9f:dd:
dd:21:43:2b:8e:ac:f0:3d:e3:19:10:09:3d:fd:ec:31:29:84:
bb:d0:49:1d:f5:8f:eb:2d:12:b9:95:5e:e5:be:8c:28:21:2f:
a5:cb:de:e8:b7:b1:b3:d0:d3:05:80:e8:5b:4b:57:41:10:a4:
2a:bf:74:bd:6a:80:90:b3:3a:b5:4a:68:2d:5f:ad:09:1a:98:
9c:88:34:19:0d:16:fb:7a:c7:89:dd:18:f6:4e:bf:e5:8f:ba:
44:f6:25:dd:a8:73:14:b4:77:f0:83:8b:a0:ed:df:ee:07:0e:
38:35:f9:71:78:33:b3:a4:17:e3:24:8b:ee:b8:35:fd:97:86:
46:27:ca:d1:55:78:8a:e1:86:21:6f:2c:ef:08:c6:c6:d7:b2:
25:3a:43:5b:72:65:f7:29:e1:53:13:d4:da:1b:d5:a6:4e:3f:
27:40:56:89:6b:67:23:42:d9:cc:1e:c2:c6:95:ad:18:24:21:
16:e5:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:20 2026 by rpki-client