Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: iGyffKJ5Fi7wvDRom5jg2I75TEe+v6cAkIxW6FcVs3k=
Subject key identifier: 8F:B5:F5:C8:5F:2D:87:DD:C5:64:C1:0E:D1:3F:5E:20:E9:3B:C9:ED
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 63204C8F2CE731B50D4034C8B8FC5D47F8462E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0644
Signing time: Thu 16 Apr 2026 21:09:10 +0000
Manifest this update: Thu 16 Apr 2026 21:04:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: YqfGgYoRUe3jhnRdVGqUrmoYSSh0c/PlbOybg0+rBqs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:20:4c:8f:2c:e7:31:b5:0d:40:34:c8:b8:fc:5d:47:f8:46:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Apr 16 21:04:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=8FB5F5C85F2D87DDC564C10ED13F5E20E93BC9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:a3:5f:05:85:5e:a0:42:cd:5f:bd:80:c9:
95:a5:de:14:d0:03:5e:33:95:12:32:32:3a:e0:1b:
77:88:32:c5:10:d8:76:01:e7:b6:a5:97:be:50:d5:
10:d3:f3:81:fc:bb:fc:0c:b3:dc:ab:5c:95:4c:62:
95:ee:da:3a:b4:0b:1e:d2:af:0d:cc:f7:ba:45:31:
38:ec:dd:5f:8b:4b:34:00:15:b2:b3:f2:2d:12:b2:
ca:46:99:d1:f7:f1:ac:3a:86:13:4e:2c:68:a3:18:
27:09:b3:08:54:83:99:c8:c9:75:d9:d3:4e:57:97:
22:e4:94:d9:d2:24:e4:cf:a9:42:3a:b0:81:68:d1:
d2:a7:0b:8f:58:e7:90:82:0f:4f:5c:94:a3:0d:eb:
50:f2:ed:da:97:c3:c2:97:ec:ba:9b:4b:99:31:70:
6f:50:33:ca:d6:0d:cf:e4:95:5f:9b:ac:ef:d9:64:
cf:f9:c2:64:61:75:a7:40:95:af:a6:16:90:f1:bf:
45:17:0c:ce:f6:7d:e1:20:be:c9:01:64:b1:c3:87:
ce:36:8d:40:1b:01:2a:88:b6:53:c7:6d:a3:7a:06:
54:34:de:84:78:89:24:15:19:73:c9:95:68:19:c0:
ce:71:04:79:cd:ae:5f:fd:52:31:a7:83:2b:33:a2:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:F5:C8:5F:2D:87:DD:C5:64:C1:0E:D1:3F:5E:20:E9:3B:C9:ED
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:4e:c1:36:83:18:8d:73:a0:43:e3:2c:1c:37:4a:19:9f:
51:31:f7:c4:9e:41:e9:57:e1:7c:1f:28:c3:15:b7:05:0f:86:
3a:d2:95:96:ef:cb:52:dd:44:5f:3a:d5:9e:6f:64:d8:82:be:
21:c5:42:85:be:2a:6d:da:c2:74:df:4e:e3:96:83:09:55:1c:
54:d7:82:5a:bd:4c:5b:e5:39:7e:cd:66:6a:24:27:38:57:43:
b9:2d:7a:2a:d1:e4:df:02:db:76:52:d6:a6:5a:4d:f0:9b:d8:
b8:55:f3:2b:fb:60:45:cf:1f:d9:f5:83:64:59:a7:ab:66:29:
3b:99:ea:26:80:8e:6d:23:45:ed:b8:48:14:5b:d4:f9:1a:42:
19:e2:0a:a8:74:96:94:b1:12:e1:81:23:42:95:bf:1e:cd:03:
e9:be:1c:bd:0f:7c:ae:67:2a:da:ff:d5:99:e1:8d:c6:a4:80:
f5:d8:c5:ac:7b:e8:b2:f5:c4:99:0c:87:cd:52:49:9b:9c:86:
de:93:f9:b6:f2:fd:ca:b6:6b:3d:c4:4d:81:a4:9d:83:44:68:
37:54:d4:d4:f1:83:59:03:c7:bb:21:09:7c:d4:65:46:f3:c5:
5d:93:cb:d1:56:14:44:9b:db:a1:a0:8d:1f:0b:02:87:ac:76:
cd:2a:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:49 2026 by rpki-client