Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: kKYL090sdBsHXLZ167PsfuWs1vVtWTG4eJ0CY17JtWU=
Subject key identifier: 01:D4:77:A7:F7:3A:49:17:D2:1D:D0:02:1C:8B:EB:6C:27:F3:22:64
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019E28141C1855A68FF43328EEBE426B3F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1559
Signing time: Thu 14 May 2026 20:01:06 +0000
Manifest this update: Thu 14 May 2026 20:01:06 +0000
Manifest next update: Fri 15 May 2026 20:01:06 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: o738ZeosBIMoxBW37M/MBKCGbTRmnV7J4sN3SehDtq8=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:14:1c:18:55:a6:8f:f4:33:28:ee:be:42:6b:3f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: May 14 20:01:06 2026 GMT
Not After : May 15 20:01:06 2026 GMT
Subject: CN=01d477a7f73a4917d21dd0021c8beb6c27f32264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:3f:2b:cb:f2:24:95:99:a8:c6:c3:20:2f:
e0:e6:43:5c:a9:84:dd:8b:f3:77:5f:50:5e:47:e4:
45:20:4c:21:b2:85:13:af:33:5d:b1:ff:ea:ee:74:
a1:cb:2a:13:66:37:78:e9:b6:cc:6d:84:d2:32:3c:
1f:2c:4b:2b:69:c1:30:89:43:85:8e:a7:b8:82:fa:
80:33:a8:69:b4:88:f6:3f:48:83:4b:c3:a8:c8:f3:
fd:4e:a6:35:b4:d6:fe:11:3d:7d:4c:72:27:9f:76:
22:b1:f2:ba:33:87:3a:55:96:94:c7:da:44:33:a2:
2b:3d:6c:36:e0:27:68:c3:ba:46:9b:32:89:e4:77:
d1:14:27:65:e7:13:65:88:42:ec:fc:0e:ce:1b:c6:
c5:76:8c:76:38:1e:7f:f7:e6:35:94:80:b4:20:10:
ca:e1:c2:2c:bf:3d:66:a0:3a:23:3d:5d:5d:42:22:
a8:64:b4:f5:d6:22:e8:2e:e0:6d:ab:69:36:57:8a:
e2:e2:db:19:7b:b6:1f:f3:19:95:5d:cb:66:5c:b0:
f8:65:50:ce:c4:26:9c:c9:c6:48:a5:db:c7:40:7f:
ce:61:db:d0:b5:06:4c:e0:d0:25:84:ea:2b:99:fa:
09:56:58:ab:a9:72:55:f5:5c:c2:11:a4:0c:84:1c:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:77:A7:F7:3A:49:17:D2:1D:D0:02:1C:8B:EB:6C:27:F3:22:64
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:29:91:30:7e:87:83:3a:65:a8:21:9c:7d:76:e9:16:ec:b6:
2a:ac:fe:9e:56:94:98:c5:92:6f:1b:ab:b2:13:d4:c3:9c:91:
f2:82:af:dc:6f:e9:9b:87:90:f8:46:cf:86:a2:0a:b5:b5:d8:
5d:d5:f1:49:6e:17:e5:72:4c:0f:cc:4b:2e:c0:d9:94:fb:f5:
72:99:a4:46:cc:38:3c:30:40:d5:5e:23:40:3c:eb:c4:a0:da:
7f:70:27:9a:5b:41:72:1a:c0:5c:84:3e:e1:82:56:c9:80:74:
68:dd:25:2c:32:2f:0c:ee:3f:28:f1:f2:02:22:53:f3:d6:74:
2c:bd:14:ef:c8:28:7e:01:ba:26:0e:8d:27:8f:38:dc:ac:41:
3b:56:ee:27:4f:7a:68:db:f3:06:41:35:79:a5:ff:ac:c8:44:
c1:71:91:f4:08:d6:48:77:96:ab:72:02:d7:70:2a:ed:78:27:
48:df:4a:8f:ad:a2:40:d6:04:25:4a:e4:a4:f4:4b:e1:b7:fb:
8c:25:d9:43:5a:fd:09:dc:ee:e1:57:d4:6e:bc:4a:24:9e:c0:
ba:60:e9:a1:d9:2b:1d:83:ea:c3:73:ac:1f:ed:2a:ae:45:69:
7e:55:30:df:30:d5:da:9c:1e:43:5e:b2:c5:45:50:97:3a:3a:
fd:6b:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:51:10 2026 by rpki-client