Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: y0xPxwLtgAw+wBmhRLPEgwtd8wOB1RGuyXE5w/x0lAc=
Subject key identifier: 9B:08:37:C5:AC:27:2D:9E:C6:58:97:2F:34:BD:AC:ED:4E:05:6C:61
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 01A1C2F911B74299A90B610B05B06CE88CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 139E
Signing time: Tue 10 Nov 2026 01:01:05 +0000
Manifest this update: Tue 10 Nov 2026 01:01:05 +0000
Manifest next update: Wed 11 Nov 2026 01:01:05 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: mrVflhEsaF5Vflicd+i2zwqsHKqIVn18pTKeGFKoSzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f9:11:b7:42:99:a9:0b:61:0b:05:b0:6c:e8:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Nov 10 01:01:05 2026 GMT
Not After : Nov 11 01:01:05 2026 GMT
Subject: CN=9b0837c5ac272d9ec658972f34bdaced4e056c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:58:d8:a9:4c:0d:52:79:7d:ba:61:fa:cb:
12:49:94:50:99:37:22:7b:97:0c:0a:61:e2:c1:35:
2c:02:40:7a:88:58:18:a1:62:f0:76:e4:ea:31:80:
ba:bf:da:0c:9b:af:64:8a:8f:24:58:05:85:37:84:
27:65:83:f5:35:54:67:43:07:91:bf:ff:64:e5:75:
8b:23:ff:d3:b9:1b:bb:bb:10:3d:a8:60:02:f3:50:
6d:96:93:db:fe:53:8b:bb:e8:f4:e3:72:33:6c:a5:
22:5a:fa:b4:1c:9a:51:4a:e0:d7:c3:ae:7b:eb:c6:
04:00:9d:81:d0:d9:3e:f4:ff:d8:2f:d3:07:1a:b1:
b4:12:81:9f:0a:0f:fa:35:72:38:54:1a:52:b8:7f:
b2:dc:fa:18:29:f0:0c:d7:30:e3:d5:10:65:e8:85:
1e:1a:27:db:51:00:ce:f0:a3:be:04:17:64:f6:44:
7c:ce:45:29:5c:28:56:6b:8b:d2:d6:37:1b:16:3d:
7c:51:a3:93:f1:6e:9e:40:15:cb:f8:ab:0b:bb:15:
40:ec:a5:b7:b6:a2:8f:4e:67:48:a9:e0:73:a0:70:
01:8d:90:a8:9d:f4:62:ce:fd:ce:bb:21:51:a3:af:
b9:c7:20:3d:59:5a:30:c5:44:db:6d:8f:19:82:bb:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:37:C5:AC:27:2D:9E:C6:58:97:2F:34:BD:AC:ED:4E:05:6C:61
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:fe:a1:5d:c6:57:d0:78:13:5d:fb:3d:a2:5b:f2:ca:8f:
0b:7c:c6:28:f8:a5:db:0f:96:5d:2e:d4:e7:87:41:10:da:48:
39:e1:6b:b1:13:dd:a6:61:9c:db:ec:03:5b:f1:3b:ab:e8:29:
b2:e1:f9:02:27:ff:41:db:a9:95:44:60:04:09:e6:fd:e8:fe:
2a:3d:f8:21:f9:5a:a0:f1:29:f9:0a:22:56:26:cf:90:3a:16:
3e:2f:e4:9d:dc:68:b8:b4:2b:36:cf:e6:e3:73:76:3f:58:b4:
89:83:ce:75:f1:3f:d9:7f:31:a7:47:c5:50:e4:94:4c:07:ad:
23:57:63:33:9d:3a:b1:07:ac:8c:3c:2a:06:52:3d:40:aa:df:
6e:5a:ee:98:e5:64:6f:2e:18:67:fe:89:5b:8b:47:02:8e:c2:
78:de:57:6e:95:d0:98:62:c1:cf:23:8c:e1:59:f8:d0:08:d4:
f6:5f:a3:79:45:59:75:3c:fe:a7:24:e1:33:db:d2:2c:e8:25:
22:ae:b7:7f:89:98:72:fb:d4:fe:32:27:dd:74:92:35:89:51:
2b:66:12:a1:19:45:53:06:fa:8c:59:03:36:97:7f:80:62:0d:
c6:b7:ee:0f:fa:93:12:e9:13:df:f1:52:fe:b9:22:12:5e:41:
8a:1a:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:36:27 2026 by rpki-client