Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: 6czgEsbgMEXNYaEOjV5MCFCfezvn32yzxNDSkZADOmE=
Subject key identifier: 7C:33:B2:63:ED:C5:C5:73:65:F6:B2:B8:65:8D:7D:3E:8A:AE:C8:FA
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019E1FB5CFC1370272E6C3A5AF1BD32F05E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1643
Signing time: Wed 13 May 2026 05:01:09 +0000
Manifest this update: Wed 13 May 2026 05:01:09 +0000
Manifest next update: Thu 14 May 2026 05:01:09 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: nyjj70wULC4VyYuMWnrfJ2qiw828QcExUR9CDWAYp3E=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:cf:c1:37:02:72:e6:c3:a5:af:1b:d3:2f:05:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: May 13 05:01:09 2026 GMT
Not After : May 14 05:01:09 2026 GMT
Subject: CN=7c33b263edc5c57365f6b2b8658d7d3e8aaec8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:a4:26:6b:fc:8b:d3:15:90:58:04:07:f4:
fc:38:9b:b4:c2:d7:16:db:22:a0:26:c2:81:f8:32:
d8:8a:56:90:1c:88:50:cb:39:74:66:42:e4:4e:8f:
b3:e1:9a:c1:49:63:cb:87:e1:e6:f1:bd:73:2e:11:
99:49:c5:2b:9e:69:f5:bf:81:fc:4c:ed:e5:a5:d2:
27:e2:3a:8c:92:82:47:8e:51:7e:49:7b:71:65:69:
72:19:a8:98:d7:3e:f3:f3:cd:93:32:b6:ab:a7:cb:
4e:e1:a9:66:16:70:08:87:b9:89:5a:da:e5:a2:bd:
0c:a1:4b:2b:d6:97:c6:83:dc:22:dd:07:01:ec:77:
3c:45:f4:c7:6a:0d:bc:c5:56:a9:87:4f:6f:6f:a5:
3d:9c:30:4a:7b:e7:56:ee:c2:58:19:e6:31:02:ee:
2b:cf:b7:7d:af:23:cd:40:d3:2a:3e:21:1a:9a:61:
4b:9f:40:14:39:2d:4c:f5:a9:20:30:5f:8c:1e:37:
64:25:37:08:d8:cf:75:16:09:01:9d:41:79:16:50:
33:a8:e0:db:64:2e:64:3f:8b:00:98:38:6c:8f:dc:
9e:fe:14:7c:0b:8d:36:76:7a:c1:5f:20:39:f5:89:
3e:fa:a9:89:4e:ad:e4:be:d1:a4:6e:bb:50:b4:2c:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:B2:63:ED:C5:C5:73:65:F6:B2:B8:65:8D:7D:3E:8A:AE:C8:FA
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e6:b8:5d:3f:b0:62:db:da:b7:f7:e1:f0:ab:de:b2:fa:61:
bb:a8:e1:96:8c:f9:7e:03:a0:06:4e:0f:d3:40:a1:41:73:53:
b0:51:80:db:94:15:1d:27:32:67:05:cf:92:18:1f:90:db:4a:
e4:39:f2:a3:4b:91:50:c5:61:46:9a:e3:b2:9b:62:5a:f6:b4:
18:89:65:7b:98:6c:29:b9:b7:77:7b:32:71:27:26:5f:cd:ba:
ae:a6:34:52:3b:53:56:34:f6:24:64:f0:f2:ca:dc:5f:fd:05:
bc:19:de:9c:59:54:20:68:74:3a:54:b7:2c:32:1d:c8:74:46:
21:5a:da:ed:2f:14:59:4d:2b:f6:8c:fe:53:02:6b:e0:86:64:
6f:e4:22:8f:a5:2b:4e:70:c3:e9:92:ed:26:6e:83:06:9d:0a:
75:75:87:e1:fe:6b:2e:19:6e:dd:4f:77:9c:c7:88:a8:c9:37:
ed:fe:9b:ec:a9:e3:4a:9d:e1:36:fa:19:0d:49:46:54:53:c5:
8c:05:87:cb:12:b4:7b:4a:5f:82:61:41:7d:3e:61:9b:89:6f:
27:4e:dd:46:17:ab:3d:32:05:73:fe:e0:b3:02:d9:42:df:97:
b3:2f:9f:b2:a3:dc:5f:34:60:26:3a:21:70:c5:d5:8e:36:30:
4c:eb:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:53:55 2026 by rpki-client