Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: WwEB2HEt2t4w7aE+ddmR6MiBCdwtFM5q3y3fP2Ks3uI=
Subject key identifier: 07:52:67:D5:07:6E:84:BF:C7:98:25:AB:3D:85:6E:11:0C:6E:C9:FD
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 019D27E048AB3F8D1E974C17E5F745060B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 0302
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: lTDFZ8aiMMMxMr1SLxZyYk4hoaLzkCsZD45pinNE87w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:48:ab:3f:8d:1e:97:4c:17:e5:f7:45:06:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=075267d5076e84bfc79825ab3d856e110c6ec9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:3d:65:bf:fe:ee:27:9c:3f:be:fd:69:f2:
ee:7a:88:b0:83:85:7d:3f:33:9d:00:a4:09:55:e7:
8e:14:17:25:b4:a5:bb:41:97:5d:c5:88:36:ea:16:
7d:62:bf:a7:4f:74:d2:47:b3:2a:40:c6:1b:c2:61:
29:13:c2:e1:1a:e8:f4:67:b5:fa:fb:de:0f:e1:a1:
b4:8d:3c:33:71:ab:1f:ef:48:92:c4:68:87:2a:20:
bd:d8:d9:8b:b0:fe:72:54:3d:f9:65:a8:47:a2:a0:
4d:46:19:96:85:71:45:2b:af:14:c6:93:8d:e4:60:
3a:d2:43:0c:b3:59:44:59:33:97:5b:1d:cc:41:16:
43:97:a9:01:92:b9:02:3b:3e:4e:22:7e:0e:12:dc:
7f:fc:4c:39:83:31:93:27:f8:3a:59:23:aa:f2:12:
34:de:9f:2b:d5:24:da:24:3c:52:24:18:02:4a:8b:
ea:1e:dd:84:43:b3:4d:aa:f5:f2:3c:54:aa:fe:25:
ff:15:3f:a3:00:63:e4:85:c9:c0:22:18:7e:de:cd:
b6:2c:2e:be:02:3b:ff:2d:30:d4:be:8a:f9:6c:84:
da:b0:1b:48:44:55:c5:bd:d9:60:74:c9:fd:7a:46:
10:34:3d:82:2d:36:42:c7:fc:81:c7:ae:94:c8:27:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:67:D5:07:6E:84:BF:C7:98:25:AB:3D:85:6E:11:0C:6E:C9:FD
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:60:60:6a:4e:2a:01:f0:75:43:04:ce:48:b3:4f:4b:5b:36:
2c:ec:d5:60:b0:45:a1:10:75:2d:88:6f:10:bb:61:49:f2:02:
56:ab:c8:2c:70:85:cf:95:93:86:7c:64:96:92:72:e9:68:3b:
20:33:67:83:1e:3e:69:ea:1c:6f:9c:42:10:20:ca:b7:0c:fc:
6c:9d:b4:25:5a:ec:82:64:1b:d2:5a:ed:07:a1:82:49:6d:80:
2f:37:94:24:bd:38:f1:03:e9:1a:35:d3:5c:58:32:64:33:f3:
64:b1:0a:3e:f9:a4:50:e3:86:b2:b2:9b:a3:98:2b:23:97:96:
8d:32:1a:dc:ac:89:17:13:ca:85:8e:c0:f8:c3:98:2e:13:2b:
da:d1:a1:2f:1b:a7:65:5e:cc:88:0b:17:9d:18:d7:eb:16:78:
1f:55:72:25:02:d2:09:7b:ff:ab:e8:e8:10:96:04:34:3d:dd:
d8:1f:01:fc:15:b8:31:ba:fd:fe:1a:69:80:ea:f1:16:bf:92:
f1:4d:da:12:bb:22:76:66:b0:82:df:7a:14:7b:f5:f8:d4:c5:
18:8d:6c:8e:ca:43:a8:72:95:bc:08:0d:28:33:27:a9:92:3e:
83:66:9e:c0:c7:d9:ab:bf:d5:f0:25:98:7e:63:4a:44:3f:a0:
2a:34:5a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4EirP40el0wX5fdFBgttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk
OThiNmMwHhcNMjYwMzI2MDIwMTQzWhcNMjYwMzI3MDIwMTQzWjAzMTEwLwYDVQQD
EygwNzUyNjdkNTA3NmU4NGJmYzc5ODI1YWIzZDg1NmUxMTBjNmVjOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1g9Zb/+7iecP779afLueoiwg4V9
PzOdAKQJVeeOFBcltKW7QZddxYg26hZ9Yr+nT3TSR7MqQMYbwmEpE8LhGuj0Z7X6
+94P4aG0jTwzcasf70iSxGiHKiC92NmLsP5yVD35ZahHoqBNRhmWhXFFK68UxpON
5GA60kMMs1lEWTOXWx3MQRZDl6kBkrkCOz5OIn4OEtx//Ew5gzGTJ/g6WSOq8hI0
3p8r1STaJDxSJBgCSovqHt2EQ7NNqvXyPFSq/iX/FT+jAGPkhcnAIhh+3s22LC6+
Ajv/LTDUvor5bITasBtIRFXFvdlgdMn9ekYQND2CLTZCx/yBx66UyCekAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdSZ9UHboS/x5glqz2FbhEMbsn9MB8GA1UdIwQY
MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt
ZWVjY2MyMGE4ZDIxLzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx
LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2Bgak4q
AfB1QwTOSLNPS1s2LOzVYLBFoRB1LYhvELthSfICVqvILHCFz5WThnxklpJy6Wg7
IDNngx4+aeocb5xCECDKtwz8bJ20JVrsgmQb0lrtB6GCSW2ALzeUJL048QPpGjXT
XFgyZDPzZLEKPvmkUOOGsrKbo5grI5eWjTIa3KyJFxPKhY7A+MOYLhMr2tGhLxun
ZV7MiAsXnRjX6xZ4H1VyJQLSCXv/q+joEJYEND3d2B8B/BW4Mbr9/hppgOrxFr+S
8U3aErsidmawgt96FHv1+NTFGI1sjspDqHKVvAgNKDMnqZI+g2aewMfZq7/V8CWY
fmNKRD+gKjRaeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:52 2026 by rpki-client