Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
File: 28oIlKm6MkLxFqd8OoU_25jXGSA.mft (raw, json)
Hash identifier: 9IDO+BZ1zvXsHvmLKK396Zz0RCMhPDwYLnnAh6a8K9s=
Subject key identifier: F4:4C:9B:21:10:11:80:4B:98:64:C5:F0:ED:75:51:25:66:09:BB:97
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 01A15D0CAD5FC0D09A8A614C23D09899AC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
Manifest number: 012E
Signing time: Wed 21 Oct 2026 06:01:14 +0000
Manifest this update: Wed 21 Oct 2026 06:01:14 +0000
Manifest next update: Thu 22 Oct 2026 06:01:14 +0000
Files and hashes: 1: 28oIlKm6MkLxFqd8OoU_25jXGSA.crl (hash: AEFBOz6SbeX+fe0LKCQcN1KXvuaP0ElxnOMe7dXKUg0=)
2: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (hash: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:0c:ad:5f:c0:d0:9a:8a:61:4c:23:d0:98:99:ac:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Oct 21 06:01:14 2026 GMT
Not After : Oct 22 06:01:14 2026 GMT
Subject: CN=f44c9b211011804b9864c5f0ed7551256609bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:43:06:62:ce:02:d7:e2:12:64:5c:00:c9:
f3:cc:18:ac:05:f6:02:e0:93:b6:ef:0d:37:88:a8:
a2:36:d3:c5:31:05:5e:fd:67:99:69:3e:ea:e4:6e:
c4:33:d7:d5:3a:50:74:13:40:54:1f:5a:66:d0:50:
37:e1:8a:7c:50:0d:68:e9:d5:6e:a0:91:5b:7c:ea:
65:49:68:f8:87:f8:b9:b5:fb:3c:82:39:fa:75:0c:
1b:b1:d4:52:d1:89:7f:70:31:8f:ed:d2:31:77:59:
24:90:dd:de:22:c4:47:3f:a2:96:7d:8a:9e:c4:90:
48:67:75:a0:ef:82:39:a7:fb:b9:56:9d:01:fa:6a:
72:da:75:2a:8e:9b:d2:3b:59:10:12:ab:40:13:c5:
72:a6:2e:35:a1:79:e7:2b:34:00:7d:57:8a:05:d2:
4b:1b:64:02:03:e8:b9:45:be:ce:60:74:7a:24:94:
ca:97:a7:a8:fb:26:93:fc:e5:b8:dc:25:69:b8:bd:
b3:2f:86:50:60:f4:bc:39:01:17:e4:96:fd:8f:b1:
8d:16:68:62:8a:5f:b4:26:74:b4:bb:b2:b6:c3:a7:
d2:ba:79:eb:64:ea:8d:79:1e:72:ab:a5:28:6f:27:
3b:a6:d5:cc:3a:cb:a3:d5:7c:25:70:30:65:7b:27:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:9B:21:10:11:80:4B:98:64:C5:F0:ED:75:51:25:66:09:BB:97
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:be:82:73:00:e8:af:6b:3f:06:f0:1d:de:5e:55:f8:c3:9c:
cb:61:0a:30:08:cc:42:b4:4d:f4:cb:dc:d4:33:74:47:1d:53:
9f:e1:75:a4:19:3b:11:a4:39:96:60:5c:cd:74:13:93:19:57:
1a:90:59:3f:7d:a2:82:4a:b2:e3:03:f2:b2:b1:8c:b1:2c:8b:
e3:68:61:3e:57:fe:e4:73:62:8c:07:bf:63:39:fd:a5:79:4c:
37:57:f4:28:ec:85:23:e1:8a:59:aa:13:09:2a:79:60:d4:d1:
d8:b8:84:a2:10:b5:18:a1:5d:80:59:c4:60:e5:7c:3f:ac:64:
92:09:0e:f5:82:c0:32:73:2d:f1:79:7d:78:7a:4f:e0:95:02:
c7:44:54:1b:ae:2d:ce:fa:f9:29:81:51:f8:f9:5b:9b:5b:c4:
a6:88:8d:fc:f7:4c:99:60:55:4c:d9:f5:82:a9:95:1c:6a:ba:
70:1b:71:c8:8b:98:df:12:8c:69:87:e2:cb:5c:2e:15:e1:51:
c0:d4:82:0d:6a:d4:1e:50:46:e2:51:7e:90:c8:8f:87:e4:f4:
08:57:9e:75:62:ed:31:6b:10:5f:ae:ca:8d:95:70:79:29:42:
6b:55:88:d8:a7:e3:8d:1e:13:dd:76:f5:7b:2a:17:4d:87:6f:
eb:2d:07:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdDK1fwNCaimFMI9CYmawiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2EwODk0YTliYTMyNDJmMTE2YTc3YzNhODUzZmRiOThk
NzE5MjAwHhcNMjYxMDIxMDYwMTE0WhcNMjYxMDIyMDYwMTE0WjAzMTEwLwYDVQQD
EyhmNDRjOWIyMTEwMTE4MDRiOTg2NGM1ZjBlZDc1NTEyNTY2MDliYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWtDBmLOAtfiEmRcAMnzzBisBfYC
4JO27w03iKiiNtPFMQVe/WeZaT7q5G7EM9fVOlB0E0BUH1pm0FA34Yp8UA1o6dVu
oJFbfOplSWj4h/i5tfs8gjn6dQwbsdRS0Yl/cDGP7dIxd1kkkN3eIsRHP6KWfYqe
xJBIZ3Wg74I5p/u5Vp0B+mpy2nUqjpvSO1kQEqtAE8Vypi41oXnnKzQAfVeKBdJL
G2QCA+i5Rb7OYHR6JJTKl6eo+yaT/OW43CVpuL2zL4ZQYPS8OQEX5Jb9j7GNFmhi
il+0JnS0u7K2w6fSunnrZOqNeR5yq6Uobyc7ptXMOsuj1XwlcDBleydsNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRMmyEQEYBLmGTF8O11USVmCbuXMB8GA1UdIwQY
MBaAFNvKCJSpujJC8RanfDqFP9uY1xkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhvSWxLbTZNa0x4RnFkOE9vVV8yNWpYR1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt
MDhmMDk0ZGFmMjQ3LzEvMjhvSWxLbTZNa0x4RnFkOE9vVV8yNWpYR1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3
LzEvMjhvSWxLbTZNa0x4RnFkOE9vVV8yNWpYR1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL6CcwDo
r2s/BvAd3l5V+MOcy2EKMAjMQrRN9Mvc1DN0Rx1Tn+F1pBk7EaQ5lmBczXQTkxlX
GpBZP32igkqy4wPysrGMsSyL42hhPlf+5HNijAe/Yzn9pXlMN1f0KOyFI+GKWaoT
CSp5YNTR2LiEohC1GKFdgFnEYOV8P6xkkgkO9YLAMnMt8Xl9eHpP4JUCx0RUG64t
zvr5KYFR+Plbm1vEpoiN/PdMmWBVTNn1gqmVHGq6cBtxyIuY3xKMaYfiy1wuFeFR
wNSCDWrUHlBG4lF+kMiPh+T0CFeedWLtMWsQX67KjZVweSlCa1WI2KfjjR4T3Xb1
eyoXTYdv6y0Htg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 13:29:36 2026 by rpki-client