Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: lvRcu2aPJOXS4z5O+nEFzJlLWfw5t1C5EYRJInioA3E=
Subject key identifier: 36:09:E3:95:A9:14:F2:90:9E:55:24:1B:33:4C:E9:55:A9:56:DE:97
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 019CAB6BBB902C4E27B04D21FDBA0A6250B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 10FB
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: +lxylI3TJBq83f0kL0I36aNSQrLtPL2RDYtFiUUSero=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:bb:90:2c:4e:27:b0:4d:21:fd:ba:0a:62:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=3609e395a914f2909e55241b334ce955a956de97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:07:c3:a0:49:28:6a:0b:ed:16:70:92:13:
be:0f:eb:3c:0c:8b:1e:5d:28:73:2f:9f:55:d6:f2:
7f:38:18:d3:4d:0e:08:5c:30:53:27:f7:8d:91:e7:
a4:60:f7:5b:1c:60:a4:de:32:b5:e0:fb:50:19:0a:
5d:23:11:3e:aa:c6:e6:7f:18:69:bb:da:15:55:b1:
78:7a:8b:9b:5c:a1:2e:92:a0:99:50:03:c0:ba:dd:
53:29:d0:4f:16:49:0b:88:94:ef:9d:41:77:f9:05:
49:e6:cb:79:3f:89:12:09:60:81:90:3c:cb:5b:d8:
6e:71:9e:f9:e1:eb:8a:52:75:78:81:34:36:5c:7d:
22:ef:97:c9:64:30:6c:2d:8d:86:48:e5:0a:db:9b:
64:f4:1b:09:a4:c1:01:d8:73:29:ce:b8:d7:a6:1a:
1d:80:74:a1:41:a8:f6:a7:99:6f:aa:5e:d0:1b:70:
68:64:cf:72:5d:aa:c4:3b:b1:b7:55:73:47:f4:9b:
72:8e:38:75:8a:12:d0:23:93:29:2d:17:8b:2e:5d:
d1:11:92:87:7b:9c:53:5e:88:fb:40:90:47:0a:83:
32:e5:56:e5:b8:ea:e9:af:41:6e:6d:6b:ef:96:03:
dc:9e:d0:df:0a:97:41:85:ed:83:fe:14:1a:ce:88:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:E3:95:A9:14:F2:90:9E:55:24:1B:33:4C:E9:55:A9:56:DE:97
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:98:ca:8c:1a:c2:26:55:11:6e:53:b2:bd:8d:70:6d:2d:dc:
7a:91:fe:c3:ad:49:ca:66:46:37:0e:8a:9b:f4:2d:f4:ea:2a:
d9:74:57:76:d8:67:96:13:68:1c:e0:b7:fa:11:ea:f7:ae:c9:
f8:5e:3b:34:1c:f2:d5:94:50:c1:bc:63:80:e0:94:1b:63:01:
e3:b9:0f:17:ac:ce:66:95:95:3b:43:47:cb:b5:2c:e2:86:43:
ad:e9:d6:23:66:87:3b:f7:7e:f7:94:77:37:f8:54:26:10:8d:
a9:29:a9:75:a1:05:4b:b2:dc:37:8b:82:7c:bf:75:16:5f:aa:
df:83:fb:a8:ed:22:71:b7:47:63:59:ab:2b:62:86:b4:18:ff:
82:3d:bd:66:3c:ec:da:ba:8e:d5:bf:aa:cd:8a:0d:ea:d3:e2:
a1:26:8c:f2:a6:44:ff:0c:bb:ed:31:01:db:97:80:da:eb:5e:
ee:a1:fb:58:b8:5f:7d:08:3f:26:78:0e:c8:29:35:73:da:9f:
40:04:a2:47:fb:35:f5:44:fb:ae:b6:48:d2:65:2f:07:67:37:
f0:67:9e:b1:90:43:47:3e:13:78:09:67:00:5f:f4:7e:e0:80:
53:7a:e3:4a:fd:b2:dc:3f:82:b4:90:b3:0e:4a:f3:d2:71:61:
6c:90:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:09:26 2026 by rpki-client