Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: RMkLSblbyFmZ1K5He1VifRPwCRP7kPzXKVdCbhRmbvQ=
Subject key identifier: A8:46:ED:8C:02:98:8E:43:FA:6E:C2:93:D4:A3:54:32:E9:E4:BD:93
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019D27DF5C42D6499B75FF0EB0D202EC53B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: lvTTiDbAmL6ak37gvHsGsWhKdzEg9h+nZ8Gf4N3kr4I=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5c:42:d6:49:9b:75:ff:0e:b0:d2:02:ec:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=a846ed8c02988e43fa6ec293d4a35432e9e4bd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:50:70:3a:5d:c2:b6:68:2a:7c:2b:c9:d7:
d0:ee:d0:51:26:ed:ac:a9:1b:1b:23:18:3e:5b:8d:
18:ed:20:bf:94:c8:f3:44:47:78:6f:97:dd:27:be:
6a:f9:ed:cf:cd:bc:85:83:db:0a:02:0f:4f:93:08:
65:d6:3d:aa:40:f1:f1:55:1b:e1:bc:ca:de:64:6f:
52:ad:eb:7a:be:70:65:a4:ee:6f:fe:02:49:58:fa:
fe:5d:cf:7b:94:60:1c:54:3c:01:72:02:1b:f2:99:
e2:aa:e8:fb:74:62:1b:1d:dc:1c:95:aa:49:cb:e6:
0d:84:ee:96:3b:25:bb:ea:21:c1:69:9b:0e:95:d4:
b1:77:60:a4:d1:54:a9:9e:8d:70:84:f5:c3:9a:f9:
14:72:a9:3d:0e:90:e4:83:70:fc:fc:75:c1:6f:1d:
bb:c0:65:e4:c7:76:e0:6b:6a:9b:87:29:62:09:fe:
30:20:40:ad:89:d4:75:f3:af:b3:16:8c:e8:50:5e:
b6:2f:1a:93:0b:3a:67:16:d1:ee:f6:a8:ab:27:58:
0a:8d:54:fb:e0:0a:0c:71:15:f7:7b:ca:14:22:0b:
72:9e:d8:07:c3:a8:78:88:52:41:38:8d:f2:5f:b8:
f3:63:c5:d8:ca:41:4d:0e:15:e2:29:ca:04:4a:e0:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:ED:8C:02:98:8E:43:FA:6E:C2:93:D4:A3:54:32:E9:E4:BD:93
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:60:f0:a1:20:50:2d:e4:b2:37:2a:59:c2:a4:f4:40:70:
3e:57:fa:e7:4a:0e:91:52:6b:4d:d7:39:6f:ee:43:d6:39:d2:
b0:ef:9c:49:93:cb:b2:ef:3d:58:46:a2:55:34:c0:60:f7:8a:
99:24:bc:85:28:e0:9e:44:7a:04:3d:09:42:8b:64:a7:60:49:
1c:b2:7e:9b:8e:67:af:6c:fc:1d:a7:60:92:af:24:14:90:f3:
4e:4f:80:48:89:15:ad:fa:76:37:9a:d4:eb:3a:71:a4:34:83:
17:b4:b6:0f:c6:7f:1e:89:37:38:4d:ae:42:dc:89:a6:10:fd:
e2:a0:ed:06:e6:bb:b7:d8:27:0e:c8:08:25:75:37:29:c9:8d:
c4:30:03:57:4e:46:78:b8:dc:ed:70:b6:51:cd:89:f3:2d:02:
fd:9a:d0:1a:ad:c4:00:7e:65:c2:84:40:10:22:e0:8a:d9:64:
06:5f:48:9e:9a:84:dd:a9:0c:35:c2:16:00:63:86:09:32:28:
63:fa:ad:f7:fd:bd:c3:d4:71:48:50:5a:c0:84:6b:f3:20:70:
89:00:f5:3c:32:e8:4e:ee:a6:40:e3:fd:a3:d5:1c:c8:fa:3d:
74:f6:a8:cb:0d:7f:39:c3:e8:0a:f5:ab:9f:f4:d3:2c:7b:2b:
ac:61:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:26 2026 by rpki-client