Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: dcUCyF07F1XFA1rUcRQBz1kFxxZoVH4nDShUQ1mHpNg=
Subject key identifier: E4:3C:3E:CD:B3:C2:22:D4:21:25:BC:95:B7:CA:EF:CF:37:7B:91:41
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 019E1D224367AD4C02C30CCD14E741ED7EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 0381
Signing time: Tue 12 May 2026 17:00:45 +0000
Manifest this update: Tue 12 May 2026 17:00:45 +0000
Manifest next update: Wed 13 May 2026 17:00:45 +0000
Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=)
2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: /KjkLczHXonSobbhaFnCOEOYvdqBeclp3n0I81easb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:43:67:ad:4c:02:c3:0c:cd:14:e7:41:ed:7e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: May 12 17:00:45 2026 GMT
Not After : May 13 17:00:45 2026 GMT
Subject: CN=e43c3ecdb3c222d42125bc95b7caefcf377b9141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:4c:b2:c1:5a:54:a7:51:be:20:c8:e8:33:
d4:b2:8c:2f:62:3b:c1:24:ac:1a:c8:36:de:68:e4:
f4:ed:a9:01:c2:fa:63:e0:ac:cc:da:ab:1b:6a:e7:
68:a0:cc:68:ae:06:e1:bc:31:27:bc:fe:86:97:c8:
9a:ee:84:9a:b8:19:39:5a:f2:0e:7f:1f:4b:ad:2d:
62:9b:48:5a:fb:9f:64:e5:2a:67:c3:38:92:25:82:
ed:ad:69:da:b9:bd:94:ab:24:46:5d:14:f9:80:95:
85:7d:c4:34:bb:fc:34:7b:61:88:ef:61:dc:2e:0c:
7f:63:ad:d6:54:49:c3:ac:85:09:66:b4:a3:31:93:
7a:a6:18:e6:3b:82:de:fc:af:c6:a9:b9:e5:77:a6:
46:b0:67:5a:18:82:a6:bc:b4:ea:5f:0b:95:5a:c6:
a8:6a:18:86:d6:13:e1:a0:8d:ec:58:4f:20:5a:5e:
dd:d1:41:69:1e:13:69:52:56:19:f7:02:bd:7d:d2:
01:f9:f8:fb:59:e2:45:ca:93:f1:e8:f7:0a:f3:f7:
d8:b8:91:d7:46:11:0a:f5:1f:66:c5:19:34:25:9e:
92:51:62:9f:f4:c9:14:e2:d6:64:ea:3e:7b:ec:68:
89:49:4a:81:56:b9:54:4f:6e:a0:66:4f:01:a2:27:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:3E:CD:B3:C2:22:D4:21:25:BC:95:B7:CA:EF:CF:37:7B:91:41
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d1:ab:03:c9:2a:61:35:53:d1:8c:3c:26:df:4a:58:a7:08:
24:a2:dc:ca:70:26:d3:be:d7:ab:2c:63:f3:e5:5b:81:34:7c:
08:c0:6b:09:19:5a:11:0a:b8:ef:8d:b4:2c:29:a5:47:b2:f6:
12:01:77:5e:6d:f9:e4:45:74:95:95:3e:b0:52:f9:57:ee:39:
9a:50:fb:80:b9:2c:a7:db:db:eb:55:84:4a:98:2b:03:17:9f:
a7:0a:2a:a3:2f:8f:71:7f:7a:92:a5:31:37:5e:b1:37:32:b8:
2e:4c:48:44:12:92:08:ff:19:23:de:cf:43:c1:e5:fa:f0:11:
7c:32:05:ff:e8:9f:8d:67:ff:92:83:f1:f0:b2:fc:23:68:56:
6b:35:7d:a7:7b:3b:15:f0:ff:2b:c5:f7:e8:13:bd:04:c0:8b:
47:32:78:89:d2:77:38:a9:48:7a:be:c4:b6:3b:db:65:56:88:
2d:43:fa:60:83:35:ec:03:14:d8:fd:9c:19:d8:d4:19:e0:3e:
32:2f:c8:0e:fc:5c:ac:dd:44:9c:4d:be:66:5d:74:d1:37:1b:
cd:e6:fc:3c:a3:09:e7:7b:17:55:1f:3d:a7:07:5a:62:fe:5c:
5e:ed:4f:4f:69:43:37:e6:f2:4f:87:41:6b:45:6f:88:c2:8f:
1b:42:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:43 2026 by rpki-client