Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: NIU0I4UV/Qe2DnrQ38Lf3s25YgWZYqujBEr1eim8OEQ=
Subject key identifier: B8:82:70:F9:18:A5:81:FE:93:70:06:9D:F9:66:AF:32:7D:F7:BC:AD
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 01A0D34A5B63D2DB2485B281A4CACAF3D460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 12:01:00 +0000
Manifest this update: Thu 24 Sep 2026 12:01:00 +0000
Manifest next update: Fri 25 Sep 2026 12:01:00 +0000
Files and hashes: 1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: zbGD1pIYt1egCYdX9q8wmDfv+U/ml2QGRpd7piwD8ZU=)
2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=)
3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=)
4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:5b:63:d2:db:24:85:b2:81:a4:ca:ca:f3:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Sep 24 12:01:00 2026 GMT
Not After : Sep 25 12:01:00 2026 GMT
Subject: CN=b88270f918a581fe9370069df966af327df7bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:4a:0e:63:71:b3:cc:d8:02:7b:b4:6e:de:
9a:02:96:90:08:80:47:8b:28:fc:9d:09:d6:be:76:
6e:fe:53:d7:61:94:80:47:d4:d4:00:c8:b7:0d:5d:
09:09:9e:e9:94:12:95:51:51:6e:29:94:b8:db:16:
04:07:f1:6e:d2:4d:f3:d2:42:26:3f:6f:d2:7f:74:
06:01:20:2c:69:9c:c6:72:e2:e5:83:81:3d:c0:2b:
13:f6:c8:7a:4f:14:ba:c8:a4:c7:d6:0b:a7:8a:74:
ab:8a:f6:f0:72:3e:79:6b:5c:6a:21:55:27:1e:59:
dc:7f:83:2a:23:b8:86:31:2d:a4:dd:30:10:e9:90:
76:93:e4:da:db:86:d1:57:f1:78:25:dd:c9:e3:8f:
a9:4f:1c:34:47:4e:17:76:38:05:1a:90:f2:0b:3b:
8c:47:b9:5e:9f:ef:cb:69:d1:8c:54:0e:98:a9:02:
96:fa:2a:f3:38:d9:f7:49:d0:0b:97:55:a4:3d:f3:
c4:9f:e2:2c:6c:f1:dd:f5:6f:5b:1c:51:e8:8b:4f:
97:6f:a6:9e:c9:27:41:b5:29:69:a6:3f:5f:e5:52:
8d:4d:9b:84:fc:1f:bd:3d:49:40:8f:94:66:d4:f2:
1f:34:fb:5f:6d:75:29:d1:18:35:c5:28:4e:85:8f:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:82:70:F9:18:A5:81:FE:93:70:06:9D:F9:66:AF:32:7D:F7:BC:AD
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:a4:64:e4:32:71:5e:80:e1:42:ef:0a:7a:68:42:3c:9d:
75:80:d2:97:96:f0:23:f5:a3:16:b5:fc:9d:f6:82:5f:b0:c4:
2d:ee:3b:ff:cc:dc:8f:9d:53:e0:41:e0:1a:44:f3:ae:ae:dd:
70:67:01:9c:10:93:38:1f:b9:1d:84:38:3f:f3:49:df:03:ae:
ed:cf:bf:e0:18:b7:6a:29:18:ea:7f:70:01:e9:36:93:1a:fb:
18:e5:81:7b:95:da:a2:b9:ce:8e:7d:02:4b:ee:0c:2f:10:30:
f5:33:82:fc:6a:63:c1:97:c6:c7:c7:50:d9:34:bc:e3:9d:af:
73:a1:57:ff:4e:7a:ee:c7:c1:2f:e0:62:28:81:46:10:72:ab:
8c:71:46:10:b8:dd:08:67:cb:ab:fd:ac:7b:c3:dc:33:43:e8:
fc:0f:8e:20:e2:63:25:df:16:ef:ee:e5:41:d1:ba:03:34:b7:
1a:78:48:0e:09:35:bb:dc:b4:61:7a:b1:2d:7a:89:b9:6e:49:
d4:26:92:fd:22:06:59:c4:c4:a0:ca:3b:ac:c9:2a:a8:6f:e2:
4b:50:cc:47:19:fb:2d:a3:3f:bd:dc:d9:39:13:e4:5b:86:27:
f8:7d:8f:18:8f:cd:37:f8:a5:6c:00:a9:74:ac:e5:34:c4:a8:
da:fb:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:42 2026 by rpki-client