Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: +s5SrosVXSYd8sdjKBbkIUiY8Vzx19R7KEos95gpYxM=
Subject key identifier: 43:7D:ED:66:21:1F:AB:18:B9:98:98:8E:BA:F7:80:DD:49:0E:FA:36
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019F946E1BFB145E8E90FEF5D298F4283692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1704
Signing time: Fri 24 Jul 2026 14:01:11 +0000
Manifest this update: Fri 24 Jul 2026 14:01:11 +0000
Manifest next update: Sat 25 Jul 2026 14:01:11 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: 6Sv/+G3BsYiudCVArWf8mIsRbQCnhpMBIezkR7lNHBs=)
2: _La6PtoF5jLkCWE65PAIlLKb7OM.roa (hash: ITuPI24mY8JQVoX1aalNGISzouujTHCT9WRcEM45a4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:1b:fb:14:5e:8e:90:fe:f5:d2:98:f4:28:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jul 24 14:01:11 2026 GMT
Not After : Jul 25 14:01:11 2026 GMT
Subject: CN=437ded66211fab18b998988ebaf780dd490efa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:a4:0e:73:7b:c6:b2:b8:67:31:28:63:bd:
cf:98:fe:c6:de:49:7a:1f:12:18:34:d7:24:ea:76:
61:9e:60:58:bc:cf:9e:e9:12:19:c7:96:42:0e:01:
44:65:52:1c:25:dc:b7:91:d2:5a:b0:98:60:9e:e2:
b3:2a:da:b7:c1:95:c5:35:de:ee:be:4f:3a:bc:ab:
50:ee:0c:d3:31:7c:2f:ce:be:69:78:49:54:b4:70:
87:ca:07:e8:fd:bb:22:a2:7d:0b:01:34:99:26:41:
3b:d7:a2:ac:49:fd:ff:02:15:48:0f:75:a2:8d:51:
3b:81:c1:e2:1d:ec:07:94:a4:dd:30:c9:ea:69:47:
48:d4:c5:4a:aa:5c:6c:d4:d8:1b:3f:1a:cf:8e:2b:
da:2f:ad:88:88:9f:dd:27:0b:bf:00:94:e6:c6:29:
23:ea:33:39:4e:6c:c7:2f:0d:20:ad:60:91:e4:0e:
b1:28:9d:2c:04:19:1b:cd:ee:0f:41:83:28:cd:69:
7f:ab:ec:6e:c2:39:23:39:55:bb:63:cc:13:ba:f7:
84:42:35:cc:d6:15:76:79:a1:d7:41:26:1f:d9:89:
f5:19:48:37:8f:d2:33:25:69:4b:5c:82:d5:2b:dd:
9d:1b:a2:e9:b0:a8:51:df:d5:00:0c:35:57:e0:ce:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:ED:66:21:1F:AB:18:B9:98:98:8E:BA:F7:80:DD:49:0E:FA:36
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:08:bc:39:20:41:68:a9:82:4a:35:ca:dc:8f:6c:89:aa:
4f:38:74:b2:3e:64:46:e1:a6:00:eb:29:32:76:45:46:10:6a:
2a:0f:e8:12:81:3b:3b:3f:07:d3:c5:11:0f:91:0a:4c:b7:04:
cd:8c:6e:7b:e9:67:49:2a:5e:37:15:0a:96:ba:79:d3:6a:0f:
6c:e9:cc:15:b5:1c:71:21:ae:54:9b:a7:f4:26:16:60:03:43:
1f:8d:42:ad:c5:7b:6b:86:82:04:77:b1:88:05:41:0e:a8:f5:
d4:12:98:f4:ed:5e:07:f4:0e:e9:f5:6b:c4:9b:49:91:82:ad:
6d:db:32:3c:1f:c8:b6:5b:61:e5:9c:05:27:e5:64:c9:93:d0:
80:84:63:c7:2f:6a:ab:74:5d:8d:00:c2:02:57:a8:e1:d2:64:
df:60:c5:cf:9e:b4:d0:de:05:10:53:d0:7c:9a:ab:85:62:73:
25:22:54:ef:5e:ae:f6:37:2c:ea:37:ea:8c:d7:59:b5:10:82:
d7:23:a8:2c:de:6f:f8:55:1a:93:4b:40:e6:cf:ae:fa:b8:f3:
60:f2:41:b7:f2:e1:1d:8d:d6:56:3c:ae:1e:09:b7:f0:62:dc:
2d:11:78:7d:dd:bd:35:59:92:48:73:37:eb:f2:39:d5:40:23:
43:ea:fe:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubhv7FF6OkP710pj0KDaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj
MzU0ODYwHhcNMjYwNzI0MTQwMTExWhcNMjYwNzI1MTQwMTExWjAzMTEwLwYDVQQD
Eyg0MzdkZWQ2NjIxMWZhYjE4Yjk5ODk4OGViYWY3ODBkZDQ5MGVmYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtqkDnN7xrK4ZzEoY73PmP7G3kl6
HxIYNNck6nZhnmBYvM+e6RIZx5ZCDgFEZVIcJdy3kdJasJhgnuKzKtq3wZXFNd7u
vk86vKtQ7gzTMXwvzr5peElUtHCHygfo/bsion0LATSZJkE716KsSf3/AhVID3Wi
jVE7gcHiHewHlKTdMMnqaUdI1MVKqlxs1NgbPxrPjivaL62IiJ/dJwu/AJTmxikj
6jM5TmzHLw0grWCR5A6xKJ0sBBkbze4PQYMozWl/q+xuwjkjOVW7Y8wTuveEQjXM
1hV2eaHXQSYf2Yn1GUg3j9IzJWlLXILVK92dG6LpsKhR39UADDVX4M47SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN97WYhH6sYuZiYjrr3gN1JDvo2MB8GA1UdIwQY
MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt
YzY1NDM1NmIwN2M0LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0
LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifsIvDkg
QWipgko1ytyPbImqTzh0sj5kRuGmAOspMnZFRhBqKg/oEoE7Oz8H08URD5EKTLcE
zYxue+lnSSpeNxUKlrp502oPbOnMFbUccSGuVJun9CYWYANDH41CrcV7a4aCBHex
iAVBDqj11BKY9O1eB/QO6fVrxJtJkYKtbdsyPB/Itlth5ZwFJ+VkyZPQgIRjxy9q
q3RdjQDCAleo4dJk32DFz5600N4FEFPQfJqrhWJzJSJU716u9jcs6jfqjNdZtRCC
1yOoLN5v+FUak0tA5s+u+rjzYPJBt/LhHY3WVjyuHgm38GLcLRF4fd29NVmSSHM3
6/I51UAjQ+r+eg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:39 2026 by rpki-client