Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: EVfifEVW50h3L2euunfRmvx5DEuTRVhHQukxVNrzpoo=
Subject key identifier: B0:A5:C2:8C:9F:1B:50:2B:D0:5A:3E:8D:29:45:A5:DF:BD:DB:7B:C6
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019D2A726DC1D5CAE6814258D4D934B4B573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 15C4
Signing time: Thu 26 Mar 2026 14:00:35 +0000
Manifest this update: Thu 26 Mar 2026 14:00:35 +0000
Manifest next update: Fri 27 Mar 2026 14:00:35 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: wZH6e7Fl+9L9lN/NX1Qz3mAyW8V60Pd05//hypbA1b0=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:6d:c1:d5:ca:e6:81:42:58:d4:d9:34:b4:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Mar 26 14:00:35 2026 GMT
Not After : Mar 27 14:00:35 2026 GMT
Subject: CN=b0a5c28c9f1b502bd05a3e8d2945a5dfbddb7bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:05:ad:94:dc:e8:3d:b2:ee:e0:74:44:2c:
08:e2:bc:84:76:85:d5:11:be:7f:e0:43:74:08:3e:
a8:5f:1e:60:d0:66:b6:b4:77:24:d6:ad:8d:a8:6d:
92:46:d4:3b:b6:e9:a5:5b:ea:a2:91:c7:98:9d:90:
76:88:80:8a:db:f9:b7:84:85:41:59:ad:d0:e5:f1:
e6:c9:a1:29:26:ab:22:99:96:3a:b7:03:43:17:b3:
31:99:75:14:28:af:f6:27:80:83:14:a0:f1:77:f4:
e2:38:94:91:35:c8:2d:ee:8c:b0:b3:cc:50:c0:f5:
a7:f4:57:75:4f:9a:72:85:6d:d8:03:51:ab:14:32:
99:e4:d4:1a:60:c8:d6:28:0a:98:ea:f6:3b:18:b9:
61:16:c3:8d:be:d3:ca:8e:0e:3b:fc:29:98:2f:f2:
6e:1d:26:f9:3a:43:7a:e8:49:66:91:61:73:37:46:
84:ca:49:2d:42:85:8a:e9:b5:23:64:30:04:cb:e4:
18:22:bb:8c:d0:ab:d1:02:67:b2:20:dd:67:a8:b6:
fc:39:e2:84:19:ba:f0:12:21:a6:71:20:ac:d2:5d:
a1:3e:fd:0d:0d:a5:5c:e4:c1:11:57:0c:ef:13:3d:
5f:d5:3c:6a:5d:5d:2c:af:3c:7f:64:b4:8c:79:91:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:C2:8C:9F:1B:50:2B:D0:5A:3E:8D:29:45:A5:DF:BD:DB:7B:C6
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:82:72:06:fc:ac:90:a8:e7:94:2e:a4:4a:ca:b3:ea:5b:8e:
dd:f9:89:44:6d:0c:ba:9d:5d:37:4a:74:41:30:48:99:55:af:
32:b5:95:87:17:90:e1:f1:de:20:0e:5f:2e:31:ce:8c:5a:11:
3e:1f:71:68:6f:15:e9:45:fd:0c:92:17:f4:15:bf:a6:d7:88:
eb:11:8a:7e:8a:c6:09:0c:72:bb:84:56:7a:e3:b9:4a:bc:0d:
44:17:2c:a8:c3:8d:9a:bb:0a:e3:3f:e9:85:9c:83:4b:9b:cc:
d4:d9:4e:4e:96:48:e5:7a:83:83:3a:95:94:23:1f:61:e7:92:
63:1e:f2:78:85:87:65:ee:f2:aa:c3:10:ca:a5:c3:72:2f:b8:
27:d7:84:f9:7d:5b:ee:96:8c:5a:a0:48:63:77:b9:9d:0c:22:
3b:be:90:ab:bb:07:42:4a:06:11:9f:5b:6d:35:80:4a:5c:e5:
c9:64:92:dc:8b:08:88:2d:2a:e4:65:a6:a9:e9:a4:dc:71:43:
59:d7:6b:fb:fa:f1:72:c8:5a:d9:e7:38:3e:45:48:fb:73:94:
c5:19:d3:ed:84:0e:f9:a2:8d:33:ea:60:22:fd:63:fa:a6:b0:
dc:df:60:91:75:3e:ce:72:0c:92:e5:3a:3e:64:28:48:95:fa:
cc:77:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:22 2026 by rpki-client