Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: yJX/2f/rS0DpbcW0tB0rbuqXXTRSHwTfa45FP2ezHVw=
Subject key identifier: 28:CC:8C:E7:4E:66:EF:4E:CF:44:03:3E:BC:B6:94:C0:97:74:7E:A8
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019E1C0F80F8772D1D8DAE63FAC7E4D72059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 12:00:38 +0000
Manifest this update: Tue 12 May 2026 12:00:38 +0000
Manifest next update: Wed 13 May 2026 12:00:38 +0000
Files and hashes: 1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: 0l9sEVKP++kXZBUh5vGERhMbYPJM0sTAIwHVHDejuNc=)
2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=)
3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=)
4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:80:f8:77:2d:1d:8d:ae:63:fa:c7:e4:d7:20:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: May 12 12:00:38 2026 GMT
Not After : May 13 12:00:38 2026 GMT
Subject: CN=28cc8ce74e66ef4ecf44033ebcb694c097747ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:5a:b9:93:68:df:6c:f9:41:50:d0:e1:65:
95:9d:66:9e:32:fe:f8:4f:c6:bd:2d:58:6b:8c:ae:
cc:51:84:46:a7:e1:a7:5f:ec:57:66:a5:f0:31:9a:
96:a5:08:58:34:de:4d:31:18:cf:37:1a:8f:a5:5b:
30:e7:2c:11:b9:31:bf:1e:bc:b8:54:e0:e1:97:9c:
0d:04:31:2d:a7:eb:80:d3:e2:9e:81:b1:24:b3:f4:
d5:4d:c4:4b:57:b8:3b:2d:1a:69:6f:40:e6:83:0b:
45:6f:85:77:6e:63:b3:6a:ca:ae:bc:e4:82:f4:41:
a8:00:79:da:46:43:db:26:4a:4a:bc:fe:df:b7:f0:
b2:bc:88:c5:00:41:b9:a4:61:b0:51:b5:02:d2:bb:
e1:37:f8:b6:bc:d4:5c:92:50:0a:55:08:85:7e:2d:
a6:f5:5b:15:9f:88:fc:b7:89:1c:e8:3b:06:31:49:
48:2e:90:ee:1e:6b:00:66:a9:9e:17:57:db:a4:04:
22:0e:23:b5:10:59:40:dc:d3:9e:49:b6:cb:6f:4e:
de:3b:af:83:77:0c:21:b0:37:d5:d7:3e:92:33:ea:
53:9a:4e:1f:72:42:dd:cd:4c:52:56:1b:ac:da:80:
0b:c9:cd:40:60:64:b4:00:fc:c0:3b:85:c7:68:77:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CC:8C:E7:4E:66:EF:4E:CF:44:03:3E:BC:B6:94:C0:97:74:7E:A8
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:69:15:ba:4f:43:a4:bf:e3:9a:96:da:d9:f0:a5:af:8a:4f:
f3:57:cc:2b:89:4f:4f:e4:61:46:ca:5b:9a:8f:63:14:1d:e5:
8a:01:7c:21:08:85:9e:07:ec:96:02:80:95:cd:c8:2e:2d:06:
ec:30:e6:e9:f3:d9:a2:c1:b6:48:b1:d2:32:fa:28:84:8c:28:
04:d7:61:25:43:b7:4f:64:c1:34:f8:e5:4d:72:b9:62:72:39:
6b:27:a5:32:46:c2:d0:2f:aa:98:3a:cf:2f:94:2c:b8:91:86:
ad:ba:b8:f3:e2:fe:6f:c4:fc:1d:a8:ca:35:07:ed:f1:9a:64:
83:29:80:8e:d2:3b:35:15:59:4c:ec:d0:0d:6f:be:6c:53:24:
f7:8b:ef:ab:c6:45:c3:a3:ce:e4:61:00:8c:ce:cb:52:2a:40:
95:c5:09:2e:61:a0:f4:bd:21:c5:3d:ce:d6:c2:46:0c:0a:4b:
31:2d:a9:16:b1:4c:b6:27:ab:b9:6b:ef:93:8b:72:89:27:ba:
b9:ff:90:ab:c3:cd:ff:b5:a8:b6:70:80:89:61:7d:b6:8b:83:
24:9a:02:5b:5d:87:f5:d6:6d:3e:9c:ff:3c:41:6a:ca:4f:57:
f1:8b:f2:5b:78:d3:8f:c7:83:af:a3:9e:4b:9f:78:f5:52:36:
99:cd:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:58 2026 by rpki-client