Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: WjbKMwQHUj/A8ToIS1MwEOYasqqpHznlSI4x0WcZAB8=
Subject key identifier: D9:4A:CD:A5:F7:EA:5A:D5:49:1D:63:EE:B9:EC:10:9E:AC:69:74:84
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 019FAA1987EBBDD5B3AC148B9ED6A094808B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 1288
Signing time: Tue 28 Jul 2026 19:00:27 +0000
Manifest this update: Tue 28 Jul 2026 19:00:27 +0000
Manifest next update: Wed 29 Jul 2026 19:00:27 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: h4tKNOLBQfeqMT0yg48Gcv7hXuZYbWcNBQsygajapCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:87:eb:bd:d5:b3:ac:14:8b:9e:d6:a0:94:80:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Jul 28 19:00:27 2026 GMT
Not After : Jul 29 19:00:27 2026 GMT
Subject: CN=d94acda5f7ea5ad5491d63eeb9ec109eac697484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:bc:b8:1e:f4:c7:54:e1:47:e5:f9:73:8d:
f5:70:8d:a0:4e:f7:b5:a6:ca:82:fa:02:5e:95:5a:
04:dd:2c:e4:2b:b9:87:e0:a1:e1:04:13:f5:a9:50:
f5:eb:a2:4f:64:48:f0:53:d1:b9:e7:52:c6:d3:15:
55:08:f3:68:a7:5f:16:cc:b7:a1:0d:81:22:9e:e9:
11:cd:41:a2:a5:b9:a7:f1:f4:80:fb:4e:67:ed:b1:
28:f9:77:cb:61:54:0e:f5:98:78:d5:25:7d:17:e2:
cb:2e:da:2f:7d:ea:9d:e9:09:a8:cd:b8:b9:6b:30:
5d:81:ea:e8:f7:d5:df:7c:c4:31:e2:6f:19:3a:d4:
ff:d2:dc:07:d4:b6:fd:65:dc:42:01:28:c1:93:c8:
e1:ee:2a:47:ca:df:20:17:27:42:a1:e3:d5:c3:69:
85:2d:2e:bb:22:9c:70:cb:3a:67:fe:f6:7b:77:25:
a8:92:95:94:dc:fe:00:0c:24:cb:d0:bf:de:04:90:
75:b5:68:d4:48:a3:24:4b:80:c8:a7:99:47:43:64:
11:f5:4b:e0:d6:b9:7b:9e:48:da:9c:c5:9c:af:bf:
a2:53:f7:25:2a:03:85:28:a3:40:4d:00:cc:30:db:
fa:08:2e:ab:b6:b2:17:32:a8:1c:a3:be:69:eb:da:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:CD:A5:F7:EA:5A:D5:49:1D:63:EE:B9:EC:10:9E:AC:69:74:84
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:85:5c:26:03:23:40:50:1a:78:a2:ff:5d:cb:d9:b6:b3:4a:
69:38:a1:9c:9b:d3:85:0c:0f:db:89:fc:cc:29:bf:c5:a0:e2:
c3:04:40:9b:ef:51:05:9e:f8:c0:76:2d:c3:13:8f:4e:74:ed:
f3:ac:e8:96:b1:b4:8a:a3:84:ac:ab:0d:2f:82:7f:99:85:55:
60:59:a3:48:c5:83:b0:71:02:8a:7b:7a:0c:29:3e:c3:da:6f:
c3:b9:d5:b7:42:77:b2:5f:28:b9:6f:0a:10:9e:aa:58:e0:46:
e4:a4:6a:52:94:c7:e3:84:c2:3e:c5:4f:2f:04:85:23:f7:9c:
28:45:0d:76:f1:5d:c4:de:05:86:bb:06:37:50:d7:9b:eb:79:
d4:a7:15:15:5e:80:ca:d0:84:e2:99:b5:bc:12:17:d1:f1:bd:
65:5b:23:1a:3c:f2:6f:84:cc:e0:af:a7:bb:b3:23:1d:73:f7:
86:fa:7b:cf:de:8e:c7:a7:a6:50:0c:43:14:0d:78:c7:75:a9:
94:9c:2b:82:5f:87:eb:ff:e6:38:db:5e:f2:a6:64:d8:8b:5c:
98:c0:12:a0:70:97:e8:f5:d4:79:7f:03:56:51:dc:c8:a8:a6:
9d:d9:ab:b7:25:81:12:18:b8:04:32:95:a5:cf:a6:b2:b0:7e:
a6:81:2c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGYfrvdWzrBSLntaglICLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDA3NzgwMjIyMjIwM2MxNmNlOGVhZmQ1OWYwYjBhYzFk
YmU3YzMwHhcNMjYwNzI4MTkwMDI3WhcNMjYwNzI5MTkwMDI3WjAzMTEwLwYDVQQD
EyhkOTRhY2RhNWY3ZWE1YWQ1NDkxZDYzZWViOWVjMTA5ZWFjNjk3NDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yW8uB70x1ThR+X5c431cI2gTve1
psqC+gJelVoE3SzkK7mH4KHhBBP1qVD166JPZEjwU9G551LG0xVVCPNop18WzLeh
DYEinukRzUGipbmn8fSA+05n7bEo+XfLYVQO9Zh41SV9F+LLLtovfeqd6Qmozbi5
azBdgero99XffMQx4m8ZOtT/0twH1Lb9ZdxCASjBk8jh7ipHyt8gFydCoePVw2mF
LS67Ipxwyzpn/vZ7dyWokpWU3P4ADCTL0L/eBJB1tWjUSKMkS4DIp5lHQ2QR9Uvg
1rl7nkjanMWcr7+iU/clKgOFKKNATQDMMNv6CC6rtrIXMqgco75p69oShQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlKzaX36lrVSR1j7rnsEJ6saXSEMB8GA1UdIwQY
MBaAFNvQd4AiIiA8Fs6Or9WfCwrB2+fDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAt
NWRkOTQ1MjllZWVhLzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAtNWRkOTQ1MjllZWVh
LzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYVcJgMj
QFAaeKL/XcvZtrNKaTihnJvThQwP24n8zCm/xaDiwwRAm+9RBZ74wHYtwxOPTnTt
86zolrG0iqOErKsNL4J/mYVVYFmjSMWDsHECint6DCk+w9pvw7nVt0J3sl8ouW8K
EJ6qWOBG5KRqUpTH44TCPsVPLwSFI/ecKEUNdvFdxN4FhrsGN1DXm+t51KcVFV6A
ytCE4pm1vBIX0fG9ZVsjGjzyb4TM4K+nu7MjHXP3hvp7z96Ox6emUAxDFA14x3Wp
lJwrgl+H6//mONte8qZk2ItcmMASoHCX6PXUeX8DVlHcyKimndmrtyWBEhi4BDKV
pc+msrB+poEs/A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:56 2026 by rpki-client