Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: XAQeMtakWFznSun+0CRFCpmrby//K9Datldtq45MXtc=
Subject key identifier: 5C:C7:A9:92:42:37:CC:BC:02:1A:52:32:71:63:9F:42:2A:BE:84:D0
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 019D9AE2925F6C0471596BD902B212D25CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 1177
Signing time: Fri 17 Apr 2026 10:00:32 +0000
Manifest this update: Fri 17 Apr 2026 10:00:32 +0000
Manifest next update: Sat 18 Apr 2026 10:00:32 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: Chfhb04r7hwKmNXDdieGyAl6U3ROPLnV0C1t3lPgzK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:92:5f:6c:04:71:59:6b:d9:02:b2:12:d2:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Apr 17 10:00:32 2026 GMT
Not After : Apr 18 10:00:32 2026 GMT
Subject: CN=5cc7a9924237ccbc021a523271639f422abe84d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:ba:26:5c:04:6b:f0:7d:bb:d2:05:81:80:
13:68:f9:7b:58:c8:12:fd:0d:a4:dd:84:6e:b6:41:
f2:77:4d:7d:7c:20:59:39:79:ef:34:08:9f:86:3a:
09:31:6d:0e:78:49:f7:08:4e:e8:d6:fc:8f:9d:5e:
41:be:11:eb:f6:76:e4:b8:60:58:ac:b4:cf:bc:16:
97:71:3d:b9:68:13:ff:76:87:f7:6d:36:da:2c:3e:
67:9a:15:93:33:f1:cb:3e:13:ea:71:df:ae:17:11:
f8:e1:10:5f:71:ae:5e:9f:ab:0e:b7:12:29:01:55:
27:99:02:d9:8f:29:fa:e7:63:d5:8e:91:99:56:65:
bb:87:cd:7b:15:9b:af:db:af:22:69:65:53:68:37:
7d:96:40:3c:98:b6:35:98:b7:b8:42:4b:b3:a1:a9:
4a:97:bf:86:6d:55:19:6b:56:ff:29:14:32:13:20:
67:b9:ee:8d:5c:d3:0c:75:d9:23:ea:63:41:2c:b8:
8e:5e:41:7a:cb:a9:73:f4:6b:78:45:59:78:cb:a2:
59:e5:71:16:71:6c:92:76:eb:0c:75:9d:7f:95:25:
08:d8:33:3a:17:6f:96:82:ae:bf:30:21:f7:76:f8:
a2:e2:b8:b7:38:16:e7:92:69:66:18:23:1d:f2:42:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:A9:92:42:37:CC:BC:02:1A:52:32:71:63:9F:42:2A:BE:84:D0
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:81:58:fc:e8:3e:45:03:95:ab:5a:5e:0b:80:f1:ef:02:e9:
32:a6:64:e8:c0:77:73:30:23:29:36:df:68:c7:d1:a2:fc:40:
17:37:61:88:db:3e:df:23:20:e2:32:b6:dc:92:09:a5:f4:2b:
dd:92:30:67:f5:f8:6c:ef:5f:59:d6:f6:17:27:41:c8:a2:48:
c9:e9:ab:c5:cc:5c:ec:ca:f0:ae:cd:c5:03:be:37:3b:02:f2:
28:33:81:42:5e:27:0d:25:c4:e1:b2:fb:1d:30:36:09:5f:38:
d9:92:ba:83:a5:95:f0:ef:ff:70:1c:23:65:41:9e:2b:65:89:
ff:95:d5:c1:eb:37:aa:e6:fb:e9:54:c1:29:6c:11:41:47:bf:
98:b4:93:ac:e7:ae:01:0a:84:01:88:89:e2:eb:a7:5f:e4:fe:
ec:f4:77:a5:ac:3f:c5:d4:52:3e:02:c7:75:00:53:10:0e:aa:
a2:de:ed:35:57:4d:cb:d7:57:3c:8b:ee:25:d2:be:a2:00:f0:
12:aa:2d:ca:d9:f6:27:d5:e9:81:28:93:11:a8:29:41:83:11:
8e:2f:97:5b:3e:3e:db:ab:ca:3f:6d:6b:cd:6f:36:b4:a4:4d:
c1:df:6a:ff:67:48:99:c3:ae:a7:aa:5c:4d:e8:bf:7f:eb:7b:
59:f3:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:13:51 2026 by rpki-client