Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: /HR5qQ900oZRa8+en3lPc3463q/pY1EWvsG+pYxxmBE=
Subject key identifier: 8F:2D:CB:E5:5A:A1:65:9F:E7:D6:12:A7:35:BC:3E:7D:02:72:AE:7F
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019F91DAB691FAA1B0BA8722132A458C21E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 02:00:57 +0000
Manifest this update: Fri 24 Jul 2026 02:00:57 +0000
Manifest next update: Sat 25 Jul 2026 02:00:57 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: gv7bb9gTi1RtfuGPTEz3vYwnvCJXujDn8/yNXTx+at0=)
2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=)
3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=)
4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b6:91:fa:a1:b0:ba:87:22:13:2a:45:8c:21:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jul 24 02:00:57 2026 GMT
Not After : Jul 25 02:00:57 2026 GMT
Subject: CN=8f2dcbe55aa1659fe7d612a735bc3e7d0272ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:9b:0f:ed:61:6f:ae:c8:f9:96:61:73:95:
cd:da:3c:bb:28:36:ff:cd:97:06:56:ff:d4:30:8c:
ca:c7:a2:b0:38:0d:3d:1a:dd:93:45:31:c4:4e:aa:
28:48:06:4c:3a:b6:4d:01:1a:e1:61:cc:d7:20:60:
fe:68:f0:e0:f7:aa:c3:e4:ec:b9:15:12:e5:d2:98:
54:4e:8a:79:95:55:21:d6:d8:25:58:11:79:8c:bd:
27:76:f0:d6:c8:8d:c5:7c:ad:51:18:26:b0:c4:4d:
1f:08:00:71:20:a4:64:c3:0e:0a:96:9e:02:cf:04:
4b:91:88:77:42:9a:0a:18:ef:e8:23:96:76:5d:fb:
10:c9:35:42:21:85:ef:fd:fa:f0:5e:93:97:52:7e:
b7:c3:44:37:61:03:bc:20:ac:1c:f4:4b:cd:b4:21:
e9:89:ec:38:55:14:c4:60:28:77:18:61:71:c4:98:
58:86:02:89:08:c8:46:69:68:38:52:57:5f:68:39:
8d:2e:6e:35:b8:f6:c9:d8:7c:4e:9e:03:61:a0:f4:
34:76:9f:24:df:d7:0b:bd:65:2e:1a:92:e3:b4:27:
24:49:e7:e3:31:5e:bd:3c:bc:4e:55:66:c5:3f:c9:
e8:ed:f4:e0:3f:00:7a:e7:46:56:72:f0:d5:59:94:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:CB:E5:5A:A1:65:9F:E7:D6:12:A7:35:BC:3E:7D:02:72:AE:7F
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b5:3d:75:28:6b:fa:1d:18:67:f9:e3:4f:92:21:61:b5:5c:
02:d2:9a:83:fc:be:14:40:00:80:df:c5:cb:db:fb:25:8b:84:
22:76:4b:d0:b7:d9:08:c8:40:1c:38:ba:76:f0:9a:b5:94:0a:
59:ea:24:7a:60:ea:8a:ee:74:0d:d8:1e:12:12:4a:b0:f5:3c:
8a:8a:03:4c:22:5e:d8:84:f9:81:ad:d6:54:b7:f5:97:dc:ed:
d3:55:dd:6a:c6:24:88:20:f0:b6:06:51:e4:e8:de:30:17:b4:
65:13:ff:65:0a:cc:ad:66:e1:b9:65:15:04:8a:7b:42:7a:ca:
aa:06:a3:1b:31:48:ed:c0:0e:c0:5c:78:e1:cc:8f:9f:f4:e2:
e3:37:45:61:cd:9f:71:40:e4:d4:5e:11:46:87:08:5c:7c:12:
cc:de:dd:ee:57:a7:34:e4:2f:1f:a3:0c:c4:9b:b5:14:06:c9:
04:5a:e2:66:af:c7:e4:27:c9:a7:0d:ac:89:1f:0d:a2:ad:bb:
ad:53:38:31:58:d0:b1:b8:d1:3c:66:80:c4:8a:87:44:8a:a9:
0c:b7:9b:e7:b9:7c:68:76:b4:ee:12:83:b1:41:c8:d3:61:47:
ca:09:a2:4d:eb:a3:ea:45:b2:15:9b:dc:61:fe:ef:eb:20:48:
f6:bc:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:05 2026 by rpki-client