Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: qsxoWyOj6qV/ZZIIqHpEsVcOGVgp4kFAW6kuFVCZmT0=
Subject key identifier: 41:3E:1C:A0:2C:95:91:01:CC:CE:C3:AF:57:EA:27:95:20:A7:77:45
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 01A0C40E765986ED7F9F0777113B741212F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 131A
Signing time: Mon 21 Sep 2026 13:01:17 +0000
Manifest this update: Mon 21 Sep 2026 13:01:17 +0000
Manifest next update: Tue 22 Sep 2026 13:01:17 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: ULM/uTOtkaZaAT05lDaOVTmQf8O+6qT5BGNyV55k5L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:76:59:86:ed:7f:9f:07:77:11:3b:74:12:12:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Sep 21 13:01:17 2026 GMT
Not After : Sep 22 13:01:17 2026 GMT
Subject: CN=413e1ca02c959101cccec3af57ea279520a77745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:98:88:b5:04:46:49:98:43:c6:bc:cd:19:
4b:06:ff:38:35:d7:01:b4:7b:b8:c1:e8:70:db:dd:
18:32:46:b2:7a:78:b0:90:1f:76:63:9c:05:54:c6:
ad:fb:0a:f6:15:24:5a:21:19:0b:4d:04:87:29:27:
d8:40:06:cb:69:c0:5c:51:01:c9:e9:7b:30:71:06:
41:c5:37:ea:53:a3:51:ca:ca:3f:65:8b:2f:fe:e0:
36:0d:20:82:11:99:08:e5:1e:19:8b:5e:44:11:32:
43:89:10:ca:24:94:e6:b2:85:8e:c7:4d:ec:58:15:
b5:ba:62:76:50:a8:7c:39:ca:4f:20:c9:49:94:a2:
dc:3b:36:63:7e:a9:06:12:8d:d9:14:11:80:9a:6f:
47:f0:65:12:07:18:cb:14:29:4b:b0:19:3c:22:cc:
e2:4f:9f:47:e5:30:b2:8e:fb:13:18:e5:b1:53:a8:
da:12:a1:9c:5f:6a:21:f2:93:15:9d:0a:97:26:34:
c2:8e:a6:35:76:d2:ad:f1:79:9d:21:9e:ef:e0:dd:
74:6b:c9:79:dc:95:f0:f8:ea:05:f3:a4:79:f5:69:
22:d5:44:e2:ee:2f:9b:b3:ef:15:4c:c3:f3:f1:b3:
6d:92:03:73:8d:34:e4:d6:83:5f:b9:fc:34:e9:bd:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:1C:A0:2C:95:91:01:CC:CE:C3:AF:57:EA:27:95:20:A7:77:45
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3c:8d:95:7a:98:18:0b:28:1a:e3:a1:7d:51:d0:8e:19:d8:
22:a1:a6:61:63:b6:ab:3a:55:77:df:e5:56:97:8a:82:ce:34:
db:2b:69:74:11:36:d7:08:1b:53:79:d9:f6:c2:24:39:a1:b9:
e8:6b:75:7a:fc:2c:dd:e4:bd:24:b1:07:e2:d2:b1:2d:e0:0a:
f4:ef:f7:1a:9c:95:88:01:09:9a:17:d6:58:52:5a:d4:3e:e7:
a1:dc:d3:40:6b:38:2f:8b:79:7b:2c:75:af:84:6a:d9:44:2f:
72:04:64:ec:ba:26:27:27:41:c0:a0:5a:2b:5b:d7:96:b4:26:
34:d7:c2:24:ce:b0:2c:f1:98:26:3b:7b:0f:86:8e:0a:7f:a5:
4c:6f:8d:b9:6b:b1:2d:c0:b8:49:b5:1a:f8:80:6b:91:9e:83:
b1:14:b9:69:ba:04:ef:a8:16:09:6e:da:d4:2a:22:48:f0:c6:
25:7f:28:41:04:a8:2c:46:00:d9:52:10:34:50:0e:81:45:83:
ce:a1:5e:bb:1b:f4:73:4e:75:a1:e1:39:b0:a6:b7:83:b5:db:
17:eb:04:31:53:e7:6c:11:39:83:ea:69:82:ed:2f:82:6c:cc:
b2:e5:e8:e3:0a:18:2a:bb:ec:90:35:5f:31:8b:fe:57:8a:49:
fd:9a:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:25 2026 by rpki-client