Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
File: 28oIlKm6MkLxFqd8OoU_25jXGSA.mft (raw, json)
Hash identifier: CkY+OVQYdMVTb278DdR23UXk/FP5PRr0a1e1myMrkJw=
Subject key identifier: 8E:A3:B5:C6:CA:4C:75:86:DC:A5:E4:9F:76:8F:5B:CF:A6:0E:42:F7
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 01A06D95C48EE720FCCFE839B1C50F38B384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:02:06 +0000
Manifest this update: Fri 04 Sep 2026 18:02:06 +0000
Manifest next update: Sat 05 Sep 2026 18:02:06 +0000
Files and hashes: 1: 28oIlKm6MkLxFqd8OoU_25jXGSA.crl (hash: V0+2//BiLot79x73mdvMcvz2rFAo7NG4mS2+w7E4i0A=)
2: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (hash: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:c4:8e:e7:20:fc:cf:e8:39:b1:c5:0f:38:b3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Sep 4 18:02:06 2026 GMT
Not After : Sep 5 18:02:06 2026 GMT
Subject: CN=8ea3b5c6ca4c7586dca5e49f768f5bcfa60e42f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:82:ae:90:7f:1e:53:2d:67:88:6e:bd:88:
2e:79:13:80:e9:c6:73:85:c9:2c:09:41:26:d3:1b:
3c:c8:90:5c:3e:1a:b1:48:6c:d3:57:72:8c:15:c3:
b7:74:11:16:be:2e:07:a6:32:48:7c:cb:04:cd:69:
7e:85:73:69:1d:d5:ba:d2:00:9e:51:22:33:58:ad:
fb:20:65:c6:75:d4:72:81:e6:78:22:f4:f4:e2:ba:
0b:cb:17:9c:aa:59:17:97:bb:c8:e3:24:7c:e9:0b:
bc:15:9e:fb:23:8f:ff:76:98:1b:66:f1:0f:a8:41:
8f:9c:45:ea:58:7d:77:ba:6f:bb:8a:8f:e9:1b:b9:
a2:6a:e1:58:03:69:93:ac:7a:d0:3f:95:ce:08:91:
14:ef:c4:6c:d1:aa:94:e0:36:e6:c9:21:04:02:ae:
af:25:aa:07:9f:f7:0c:b1:6e:e7:b8:89:80:ac:65:
ab:79:23:e8:7c:7b:ce:89:52:37:78:10:e6:a6:a4:
9f:d9:2b:59:54:31:71:91:ce:51:df:9b:20:36:2f:
9a:6a:cb:ad:aa:9c:08:9d:df:34:6f:3b:5a:cf:fb:
fe:44:b9:8a:cf:12:51:5e:f1:58:55:c0:be:9c:3a:
e0:b0:39:4a:44:03:c0:f3:b2:1d:e7:a9:55:c7:ee:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:B5:C6:CA:4C:75:86:DC:A5:E4:9F:76:8F:5B:CF:A6:0E:42:F7
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:89:f9:c7:99:f7:74:b9:6b:74:60:96:44:4d:ba:13:52:97:
83:e5:54:5b:3c:ec:38:16:7a:a2:f2:05:e3:5f:cb:76:c1:62:
55:d8:f3:c5:fe:5e:9a:ac:c6:2b:91:c9:c8:a9:da:35:cf:c9:
c3:4e:89:0b:8b:b4:cd:29:71:46:30:1c:f2:ff:48:03:a2:5f:
0a:fd:79:70:41:60:fe:f9:e6:51:e0:e7:37:9f:a9:ea:47:db:
63:a0:a8:35:5e:f4:35:61:b0:2d:28:72:8b:ec:7c:6f:6f:ad:
2c:47:1e:46:1d:e1:84:d0:3a:5f:dd:7a:c7:47:0b:6f:e6:7c:
f0:18:c4:08:df:b2:e5:c3:77:ce:d8:54:e8:fd:d3:b1:f6:5d:
39:3a:4a:4d:68:54:b4:8e:48:70:57:2d:94:41:e7:39:b1:ab:
22:08:6f:46:23:7c:bc:03:af:a5:f6:3a:9a:a5:5c:b7:8a:48:
8a:34:b6:7b:a9:e9:d6:fa:0e:54:54:b2:dd:1b:e1:9b:5b:64:
e3:b8:92:cb:ca:22:75:71:49:64:13:27:5d:a4:af:92:b5:a3:
61:25:76:aa:21:d0:93:37:d1:89:32:4a:8e:f0:36:a8:e0:4f:
0a:36:92:3d:53:07:d5:a1:01:fb:47:92:7b:13:80:f8:34:6e:
f3:93:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:10 2026 by rpki-client