Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: IH0h2i5LyzW3X+xaCeUrGhiJn1Xn09Iz5uRpxdkzLx0=
Subject key identifier: 4B:27:7D:D0:EF:85:22:3C:C1:5E:5A:52:AA:16:A1:73:43:CB:E0:6D
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 01A0CCA3A0C758F809F22CB84DC6D1419753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 04E5
Signing time: Wed 23 Sep 2026 05:01:10 +0000
Manifest this update: Wed 23 Sep 2026 05:01:10 +0000
Manifest next update: Thu 24 Sep 2026 05:01:10 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: O3PmX17d5WMlZe9ixvXfOnpEOtmUzoBUcBwp/ld5jf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:a0:c7:58:f8:09:f2:2c:b8:4d:c6:d1:41:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Sep 23 05:01:10 2026 GMT
Not After : Sep 24 05:01:10 2026 GMT
Subject: CN=4b277dd0ef85223cc15e5a52aa16a17343cbe06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:6e:f6:c0:f2:39:39:e2:1b:87:fd:99:79:
bb:94:80:b4:f8:18:28:04:c8:87:14:24:e8:12:c1:
ca:69:9c:01:27:89:b3:27:0d:c8:89:93:4a:e1:cc:
79:ce:fc:13:ea:4a:3d:e3:59:22:78:25:ab:81:ed:
bc:0e:d8:f7:95:93:b7:df:d6:5e:58:58:98:99:eb:
1a:d1:a0:ae:30:93:71:27:d3:89:ff:02:9b:35:0d:
48:ae:b2:1b:26:98:96:9f:bd:7f:a8:20:14:5d:c6:
38:54:aa:97:80:85:7f:fc:a9:16:38:f4:7a:40:be:
66:c8:c0:8d:f9:91:10:c5:b9:68:ae:d9:ff:59:31:
04:d4:53:cd:ab:08:96:6b:9a:cc:95:51:da:ef:4d:
c8:ff:9f:51:6b:d8:e1:98:84:98:91:cd:0c:8c:78:
b2:ae:da:b7:66:51:07:64:09:67:8d:15:52:9f:41:
96:b2:d7:9b:72:9c:33:5e:4c:4a:ae:3a:71:98:70:
2e:bb:ce:50:67:3c:24:12:59:33:a0:c3:99:d6:74:
80:46:73:43:b3:46:16:41:c4:51:89:92:06:cb:66:
e8:cf:88:05:ba:f7:61:de:3d:33:43:6c:4e:5f:a5:
51:f2:dc:5a:0a:47:e0:b5:7b:5a:18:8f:a8:3c:16:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:7D:D0:EF:85:22:3C:C1:5E:5A:52:AA:16:A1:73:43:CB:E0:6D
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a0:91:4f:cb:92:48:00:7e:08:c7:67:30:cd:1f:bb:59:d3:
61:bd:35:97:06:94:34:3b:08:db:90:bb:2e:05:9d:14:16:63:
02:64:85:f1:b7:b9:f0:1d:80:24:42:b9:6f:7f:d0:10:3f:5d:
d9:5f:3b:77:c6:72:fa:30:b4:be:59:d3:fe:17:6f:5f:cb:1f:
77:74:bf:3c:b5:08:ff:1e:f4:a9:3d:95:d9:15:e3:c1:c7:f9:
b8:16:13:c7:f5:e5:dd:2a:1a:95:d3:02:7d:92:ea:64:df:7a:
2e:4f:36:cf:41:27:fe:53:b3:2b:94:d9:3b:54:95:57:8c:d4:
0c:23:6d:14:92:f2:4a:8e:66:a6:cb:6b:77:cc:ec:5d:92:fe:
86:b0:2c:e1:f4:9a:5a:26:45:67:bd:5b:45:c5:a7:9d:6d:e1:
84:65:f1:92:54:d5:87:4e:4f:1b:c5:d2:78:5e:5e:48:6b:2d:
dc:21:6b:1e:81:8c:14:13:cc:42:7a:b6:4b:f8:ef:9a:17:9c:
44:74:14:4c:20:5f:3f:9e:97:e8:c8:ab:c1:23:0b:c6:c3:82:
74:29:90:99:80:a3:a6:f7:04:62:8a:8c:29:ae:55:89:bb:26:
90:5a:ac:5c:f8:78:9b:26:91:da:b9:7a:45:5c:bd:b5:06:d8:
ea:52:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:44:30 2026 by rpki-client