Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: 0dSORBANjCDXncJxqbefUH2LFSiGWd/fAqQ2l+kpt4M=
Subject key identifier: 13:55:DC:79:50:A7:4C:3D:0F:25:75:61:8F:2C:99:4D:B1:BB:A3:E0
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 36F0D82A6EA0CF884BE32439495684FC5D71FBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0625
Signing time: Wed 25 Mar 2026 19:57:23 +0000
Manifest this update: Wed 25 Mar 2026 19:52:23 +0000
Manifest next update: Thu 26 Mar 2026 23:29:23 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: Zj7XlsZzxJnpwDD41hwCCjB6Paa8j9YH5vbrMq7LrLI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f0:d8:2a:6e:a0:cf:88:4b:e3:24:39:49:56:84:fc:5d:71:fb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Mar 25 19:52:23 2026 GMT
Not After : Mar 26 23:29:23 2026 GMT
Subject: CN=1355DC7950A74C3D0F2575618F2C994DB1BBA3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:07:fe:de:c1:0a:10:43:a2:23:43:14:fb:
d6:d5:ec:55:15:12:b2:95:6c:42:e4:1e:5f:96:d1:
9e:e2:48:1e:48:fd:51:be:6a:86:b2:f7:4a:32:a3:
a7:cd:85:ac:3d:fc:4f:83:fd:a9:b4:aa:59:43:07:
ab:d0:aa:fd:73:ff:3f:f0:c7:3c:17:98:11:59:1d:
18:a6:d3:16:71:f4:ba:f1:76:e8:cf:cc:b9:fe:88:
9f:87:2c:4f:56:25:01:fc:32:3c:be:bc:4c:1c:93:
d0:b7:1f:7d:9e:40:d4:45:30:c8:f2:90:e3:83:3d:
c3:ba:bf:95:ba:b5:b5:b8:c4:8c:12:13:99:26:d4:
56:0e:3e:19:f6:26:c6:f9:8c:be:3d:8d:10:84:f0:
40:07:62:23:19:70:8b:40:93:e9:a6:6f:06:42:6d:
84:56:ab:fe:a7:5c:bc:4d:1b:50:ce:dd:16:4d:49:
53:19:19:d2:92:df:8c:4b:e9:70:ec:21:2d:71:e2:
29:63:1f:d8:89:19:fb:70:da:d9:75:92:7e:dc:5a:
8f:45:af:87:48:08:8b:cb:c4:1c:14:fe:2c:ce:5f:
25:20:32:2d:46:59:b4:c5:0c:e5:94:b5:8c:95:29:
c7:6b:6d:3f:db:5e:58:6f:ee:99:56:b6:29:5b:2a:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:DC:79:50:A7:4C:3D:0F:25:75:61:8F:2C:99:4D:B1:BB:A3:E0
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:f9:b4:60:a1:c6:2a:6c:10:2c:67:e1:a2:f0:9b:66:f5:
a6:81:45:49:5a:92:fb:98:f7:e2:be:3e:fd:fc:5d:e9:9c:45:
65:c4:ca:e7:55:03:4c:1e:26:0f:ab:08:01:64:04:d6:fd:07:
60:19:5c:6b:10:80:99:d7:55:5d:a2:2f:98:96:0f:00:bc:d4:
d4:14:e6:54:03:ac:ad:25:cc:cb:3e:5c:a5:c6:f1:8a:6c:55:
e1:c9:6d:9b:d0:c5:f5:96:36:f4:a9:93:e2:da:3f:3b:c6:a8:
56:81:6b:b8:86:7e:8d:51:cc:72:3f:72:16:cd:0a:f0:68:a4:
3b:c1:a9:1d:43:37:e1:83:f9:bf:f4:cb:38:e8:d7:97:ea:9c:
68:18:f7:92:97:34:29:6a:9e:3c:f1:f2:7b:04:51:33:64:18:
1f:df:ba:e4:35:f3:81:76:42:f3:49:85:85:64:e9:d3:0b:d4:
24:6e:cd:41:75:e1:af:a7:8f:d3:a6:b3:84:db:dc:f5:d5:e0:
89:47:be:02:78:e9:70:21:cb:b0:cd:9d:34:d8:26:75:00:9e:
32:31:18:3c:31:f2:0b:db:f8:03:23:b0:c1:5e:f8:78:59:b1:
b6:34:19:8f:55:e7:fa:59:9d:9d:d7:25:8f:70:29:57:28:9f:
9d:bf:9b:2f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNvDYKm6gz4hL4yQ5SVaE/F1x+7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjljOWM4Y2EzMmExMmRlN2M2ODZiNTI0MGQwMTE3M2Zj
NDNjNzFmZjAeFw0yNjAzMjUxOTUyMjNaFw0yNjAzMjYyMzI5MjNaMDMxMTAvBgNV
BAMTKDEzNTVEQzc5NTBBNzRDM0QwRjI1NzU2MThGMkM5OTREQjFCQkEzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLgf+3sEKEEOiI0MU+9bV7FUV
ErKVbELkHl+W0Z7iSB5I/VG+aoay90oyo6fNhaw9/E+D/am0qllDB6vQqv1z/z/w
xzwXmBFZHRim0xZx9LrxdujPzLn+iJ+HLE9WJQH8Mjy+vEwck9C3H32eQNRFMMjy
kOODPcO6v5W6tbW4xIwSE5km1FYOPhn2Jsb5jL49jRCE8EAHYiMZcItAk+mmbwZC
bYRWq/6nXLxNG1DO3RZNSVMZGdKS34xL6XDsIS1x4iljH9iJGftw2tl1kn7cWo9F
r4dICIvLxBwU/izOXyUgMi1GWbTFDOWUtYyVKcdrbT/bXlhv7plWtilbKqVnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUE1XceVCnTD0PJXVhjyyZTbG7o+AwHwYDVR0j
BBgwFoAUKcnIyjKhLefGhrUkDQEXP8Q8cf8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvMjlDOUM4Q0EzMkExMkRFN0M2ODZCNTI0MEQwMTE3M0ZDNDNDNzFGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tjbkl5aktoTGVmR2hyVWtEUUVYUDhR
OGNmOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS8yOUM5QzhDQTMyQTEyREU3QzY4
NkI1MjQwRDAxMTczRkM0M0M3MUZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4b5tGChxipsECxn4aLw
m2b1poFFSVqS+5j34r4+/fxd6ZxFZcTK51UDTB4mD6sIAWQE1v0HYBlcaxCAmddV
XaIvmJYPALzU1BTmVAOsrSXMyz5cpcbximxV4cltm9DF9ZY29KmT4to/O8aoVoFr
uIZ+jVHMcj9yFs0K8GikO8GpHUM34YP5v/TLOOjXl+qcaBj3kpc0KWqePPHyewRR
M2QYH9+65DXzgXZC80mFhWTp0wvUJG7NQXXhr6eP06azhNvc9dXgiUe+AnjpcCHL
sM2dNNgmdQCeMjEYPDHyC9v4AyOwwV74eFmxtjQZj1Xn+lmdndclj3ApVyifnb+b
Lw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:26 2026 by rpki-client