Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: d3Yxw6V2NJR/21xRqyAxfOCtWQJOeBY4pZyifigts/s=
Subject key identifier: 0A:B6:1C:91:67:10:1E:20:0D:3F:DB:0F:4E:90:92:CD:57:F1:8E:8B
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 01A0CE91C2987400DE6EB05043272700F47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 14:00:53 +0000
Manifest this update: Wed 23 Sep 2026 14:00:53 +0000
Manifest next update: Thu 24 Sep 2026 14:00:53 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: QECr/HEPTHf5kTHldgl+6x85EB29vpdk5dMV8JDs5jA=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:c2:98:74:00:de:6e:b0:50:43:27:27:00:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Sep 23 14:00:53 2026 GMT
Not After : Sep 24 14:00:53 2026 GMT
Subject: CN=0ab61c9167101e200d3fdb0f4e9092cd57f18e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:09:ce:d0:91:b9:41:bb:d9:4b:f5:68:93:
e8:70:0e:82:c2:77:41:35:8d:70:ea:3c:bf:6c:37:
54:cc:3e:df:25:f0:0f:e9:14:b6:41:08:62:75:dd:
a4:7c:27:db:d7:3c:86:32:31:4c:53:70:ed:fa:b8:
c0:b9:97:93:97:d9:d0:c2:76:3d:31:d5:2d:89:bd:
9d:1d:13:b9:4b:e7:ca:80:7c:fd:c9:81:98:0e:2e:
fa:6d:4f:0a:18:dd:5a:17:a3:09:4a:b1:74:eb:3f:
86:e9:8d:d3:f2:1a:1f:19:f1:72:47:8d:c3:fd:e6:
42:45:31:54:64:e0:49:cb:14:4b:58:01:c0:c3:b2:
79:92:78:c3:a5:88:3b:0d:b7:ea:54:74:d1:31:3a:
f2:0c:c2:a5:79:c4:1d:5d:ff:2a:d7:ee:54:cf:b4:
42:02:a7:b1:1c:fc:2f:a7:57:68:e1:d5:ac:d5:8b:
72:f1:b5:9d:db:d9:22:b9:82:7d:5a:c6:fe:b9:09:
8a:b4:9a:21:75:47:c2:14:6d:61:0c:4c:df:3e:e6:
2a:be:54:6c:f3:a8:45:e6:98:3c:49:14:f8:8a:e2:
cd:94:bd:7e:13:8e:5d:e9:8c:65:7c:41:90:94:25:
7f:94:03:7e:ae:e0:7c:62:2d:b4:22:3b:8d:ce:eb:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:1C:91:67:10:1E:20:0D:3F:DB:0F:4E:90:92:CD:57:F1:8E:8B
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:b4:a4:d3:e5:00:e6:ff:e2:d4:ee:48:18:21:14:fc:65:
7e:81:3a:a9:76:20:61:ec:ca:19:c5:d2:19:c1:d6:05:d8:bd:
ea:09:3c:d8:5b:81:c9:02:dd:01:e4:1b:9b:72:a9:29:e6:d1:
bb:23:f1:98:a1:ed:30:da:93:8c:86:4f:47:73:22:1d:17:37:
06:14:95:0e:c8:c2:6a:7a:cf:f8:05:e4:d8:b0:07:a6:65:2d:
74:2f:08:25:75:4e:5c:7d:1b:95:d7:f4:75:e8:c5:10:9b:54:
8d:8e:71:f5:e1:3f:47:db:47:4f:7e:03:db:60:5e:2f:40:23:
f0:cb:e1:e9:7f:55:08:ec:22:ee:6e:5c:91:2d:c0:eb:cd:bc:
98:f7:ba:4f:16:98:18:20:a2:59:cc:b3:1f:74:2c:ff:f5:ac:
ea:fc:28:76:e4:94:37:ab:1a:a2:f5:93:67:b4:3f:e2:b7:7c:
11:f8:61:48:38:f6:e2:e9:35:12:7a:ad:23:ad:0f:9b:ef:88:
22:e1:2c:11:f2:4f:16:e6:fd:c1:f5:e7:f7:5e:61:c9:9a:fe:
f7:c2:e6:0f:2e:19:4a:b3:8b:0b:73:82:c3:af:6b:d5:69:06:
de:79:1a:71:8d:c8:7e:1b:88:5a:85:f3:55:c7:92:6d:71:39:
2a:47:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:52 2026 by rpki-client