Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: +UqOJRcwotqEBbyAxZkjAaQARwGYF7ArgnpFJboAoZY=
Subject key identifier: 88:E9:4C:9E:25:81:08:9B:08:34:9D:1E:1D:9C:DE:26:B0:AA:55:21
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019E1D22A05652DB3E6691044C98ABA96B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 17:01:08 +0000
Manifest this update: Tue 12 May 2026 17:01:08 +0000
Manifest next update: Wed 13 May 2026 17:01:08 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: 0EDMbGKJutxUOsyQeH7n3GO/A2ndbgu5I4dIPHykI0g=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a0:56:52:db:3e:66:91:04:4c:98:ab:a9:6b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: May 12 17:01:08 2026 GMT
Not After : May 13 17:01:08 2026 GMT
Subject: CN=88e94c9e2581089b08349d1e1d9cde26b0aa5521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:74:4b:bc:eb:76:f9:9d:06:e2:2b:56:ec:
02:b2:60:65:dd:5e:cf:d1:63:80:18:4d:4d:01:bd:
30:06:b5:19:b0:be:dc:c5:bb:f4:da:91:7d:05:fb:
52:9c:19:4b:51:9d:9d:1b:03:70:95:8d:68:12:37:
3e:d1:49:c4:e4:c1:33:b3:be:bf:f2:de:42:8e:3f:
5d:2f:ef:87:5c:cf:aa:9d:ca:11:20:db:a5:37:51:
96:b7:4f:2d:4a:13:a8:ec:00:78:48:6c:a6:5b:29:
81:09:03:ec:29:4e:24:c3:fb:02:ee:ed:41:64:9a:
f7:9a:88:a5:45:6f:97:df:b4:e0:d7:bf:30:07:6d:
12:08:25:44:b8:c6:9a:45:a3:aa:d4:6b:2a:a0:eb:
ff:91:9e:dc:e2:75:2d:d1:10:cb:0f:40:76:10:3d:
d9:fb:c3:09:55:b7:2d:da:68:cc:32:90:56:56:e1:
6a:c6:64:a0:72:58:ea:7c:f0:96:c0:8d:8e:29:01:
51:87:58:55:a2:53:2e:3a:3a:c5:f2:f5:38:58:4b:
7a:41:8d:17:52:41:ef:97:06:69:1e:f5:ed:87:21:
21:49:b7:92:b2:5a:8b:00:06:5f:8a:26:c4:16:da:
a3:dd:1c:58:35:79:7d:a6:f5:9c:31:cb:81:b8:53:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:4C:9E:25:81:08:9B:08:34:9D:1E:1D:9C:DE:26:B0:AA:55:21
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:10:39:a8:bc:e8:e3:b1:0f:e0:5e:e4:6a:83:ed:f6:66:
8b:b4:c3:69:00:e1:1c:d7:ae:81:3b:85:0e:34:cd:29:81:b2:
7b:80:74:21:6f:f1:ef:a7:fe:a5:cb:ba:62:aa:bd:bf:8f:6c:
ee:87:fe:1b:32:01:0e:25:48:9a:51:8c:c3:75:6e:2b:48:f8:
a9:61:58:4f:59:7c:72:65:2f:c5:1b:67:5f:6f:68:c5:e9:24:
f8:64:05:82:35:65:33:23:25:a5:62:75:4b:39:b0:dc:b6:54:
f4:42:5c:55:7b:dd:6e:cb:26:a4:09:dc:19:ea:62:ad:86:d5:
02:c1:5b:ff:66:4f:b8:cf:59:55:67:67:d1:98:f3:c4:bb:51:
3a:d5:a5:c5:cc:91:bd:ac:a6:6c:a5:90:45:48:03:09:8a:a8:
9b:e6:8e:ed:3d:89:a8:a0:69:62:f5:50:61:ba:ed:7d:8a:7f:
76:7c:a0:32:61:2e:38:67:8d:c8:07:40:cc:ef:85:10:33:ca:
76:4e:99:18:38:57:c2:f9:04:b5:68:8c:8e:68:00:19:a9:9c:
1d:3a:ee:a0:fc:b6:a6:b3:02:6c:3f:27:fb:58:4e:f0:71:3d:
20:e5:24:8f:96:55:66:9a:59:9a:45:60:c4:ae:e3:79:a3:fa:
ca:59:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:42 2026 by rpki-client