Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: AlfEl/jekm0R8FIUfezmdoxpHTQoG0e63sO2yRkl6T4=
Subject key identifier: 15:AA:D2:33:EC:E8:91:10:45:D7:F8:C2:E9:DB:E4:66:7C:D1:AC:63
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 5DE24F0A6537E8D32931153E24266DCFB5559ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0604
Signing time: Sun 01 Mar 2026 22:36:22 +0000
Manifest this update: Sun 01 Mar 2026 22:31:22 +0000
Manifest next update: Mon 02 Mar 2026 23:58:22 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: yhRgjgkHK/lSJuHv0F4poiTZl/s5eS5qpmcvw1b4TKI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e2:4f:0a:65:37:e8:d3:29:31:15:3e:24:26:6d:cf:b5:55:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Mar 1 22:31:22 2026 GMT
Not After : Mar 2 23:58:22 2026 GMT
Subject: CN=15AAD233ECE8911045D7F8C2E9DBE4667CD1AC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:55:7a:55:3e:9a:96:73:bd:ba:8e:57:0f:
c0:55:48:75:01:4a:bf:50:59:bb:b0:0c:5f:13:1e:
80:4c:05:97:03:46:dc:47:b9:89:e6:92:fc:24:37:
e4:43:c1:67:20:87:67:c3:50:d9:b8:92:40:72:58:
3b:73:3d:46:c2:7a:4f:e2:3e:be:57:b5:25:8c:2e:
4f:c2:57:fc:6f:4e:5f:36:5b:50:75:ee:4a:b3:0e:
d1:aa:22:c9:10:c0:2a:ea:0b:95:c3:7f:ad:93:32:
e3:4f:de:52:10:18:7f:e0:7f:71:86:c3:bb:53:74:
1e:06:88:a6:e9:fa:ff:86:f5:80:b1:c9:46:ad:7c:
6d:62:e0:13:3c:db:cc:9f:7c:4b:c5:09:df:6a:e3:
d6:63:bf:9a:d8:5e:93:29:5f:00:49:9c:9b:29:57:
fe:e7:8e:7e:38:0b:01:d0:2b:47:9d:29:ea:55:45:
3a:52:e1:3c:dc:00:b3:7c:db:72:14:12:9f:e5:eb:
d4:34:84:e3:7e:37:cb:92:37:89:16:c8:68:74:f9:
40:2e:d6:00:95:31:95:3e:07:75:50:f1:1a:86:96:
eb:73:77:ac:3a:06:60:a5:db:a7:ee:c5:e1:e2:8f:
f7:2e:34:38:a3:82:e1:29:f3:7f:fb:c0:1f:75:49:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:D2:33:EC:E8:91:10:45:D7:F8:C2:E9:DB:E4:66:7C:D1:AC:63
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:e8:e6:13:20:c0:6b:9a:21:e7:38:1f:8c:76:fb:a0:e5:
a8:31:7c:17:f6:aa:b0:e7:15:71:3f:fe:00:4d:bd:cb:74:05:
ca:09:3a:4a:50:b0:4e:49:13:a5:5d:55:09:0c:93:30:21:78:
f7:88:1c:60:c7:03:c5:f5:e0:47:a5:c8:11:25:f3:a3:9c:41:
9e:b0:dd:a6:a0:82:b7:2b:af:bd:60:60:95:f7:aa:f6:6f:09:
2a:7b:03:27:85:d6:ee:0e:d2:74:27:d6:a7:b8:2e:fc:ab:2c:
c5:2d:48:6d:0c:72:42:49:97:6f:5f:d5:cd:d7:66:06:89:b8:
c6:3a:ed:04:07:54:b3:a1:5a:59:87:7a:d5:ca:0f:0e:d9:db:
34:83:68:cd:34:19:3b:f5:58:5a:e5:51:13:08:39:e6:94:17:
96:9f:79:a7:29:e1:18:de:89:e7:d4:0b:b6:20:a3:fa:b2:92:
c3:27:3d:81:fc:78:64:2f:84:b4:10:03:72:8a:eb:fd:f1:05:
bd:cb:7e:ae:02:b9:59:12:d4:43:99:ed:c5:35:18:d6:56:75:
6f:94:a2:47:2f:d7:0c:56:80:69:d0:ef:bb:b0:89:a4:e0:45:
79:ab:c7:03:c9:9e:fa:73:29:1e:d2:fc:a3:c7:71:d4:6b:b8:
b7:09:fe:e8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXeJPCmU36NMpMRU+JCZtz7VVntEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjljOWM4Y2EzMmExMmRlN2M2ODZiNTI0MGQwMTE3M2Zj
NDNjNzFmZjAeFw0yNjAzMDEyMjMxMjJaFw0yNjAzMDIyMzU4MjJaMDMxMTAvBgNV
BAMTKDE1QUFEMjMzRUNFODkxMTA0NUQ3RjhDMkU5REJFNDY2N0NEMUFDNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvalV6VT6alnO9uo5XD8BVSHUB
Sr9QWbuwDF8THoBMBZcDRtxHuYnmkvwkN+RDwWcgh2fDUNm4kkByWDtzPUbCek/i
Pr5XtSWMLk/CV/xvTl82W1B17kqzDtGqIskQwCrqC5XDf62TMuNP3lIQGH/gf3GG
w7tTdB4GiKbp+v+G9YCxyUatfG1i4BM828yffEvFCd9q49Zjv5rYXpMpXwBJnJsp
V/7njn44CwHQK0edKepVRTpS4TzcALN823IUEp/l69Q0hON+N8uSN4kWyGh0+UAu
1gCVMZU+B3VQ8RqGlutzd6w6BmCl26fuxeHij/cuNDijguEp83/7wB91SYiNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFarSM+zokRBF1/jC6dvkZnzRrGMwHwYDVR0j
BBgwFoAUKcnIyjKhLefGhrUkDQEXP8Q8cf8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvMjlDOUM4Q0EzMkExMkRFN0M2ODZCNTI0MEQwMTE3M0ZDNDNDNzFGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tjbkl5aktoTGVmR2hyVWtEUUVYUDhR
OGNmOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS8yOUM5QzhDQTMyQTEyREU3QzY4
NkI1MjQwRDAxMTczRkM0M0M3MUZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDLo5hMgwGuaIec4H4x2
+6DlqDF8F/aqsOcVcT/+AE29y3QFygk6SlCwTkkTpV1VCQyTMCF494gcYMcDxfXg
R6XIESXzo5xBnrDdpqCCtyuvvWBglfeq9m8JKnsDJ4XW7g7SdCfWp7gu/KssxS1I
bQxyQkmXb1/VzddmBom4xjrtBAdUs6FaWYd61coPDtnbNINozTQZO/VYWuVREwg5
5pQXlp95pynhGN6J59QLtiCj+rKSwyc9gfx4ZC+EtBADcorr/fEFvct+rgK5WRLU
Q5ntxTUY1lZ1b5SiRy/XDFaAadDvu7CJpOBFeavHA8me+nMpHtL8o8dx1Gu4twn+
6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:32 2026 by rpki-client