Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
File: 28oIlKm6MkLxFqd8OoU_25jXGSA.mft (raw, json)
Hash identifier: QHr5vmf3msk9Xpt+UvvU1HfFB/+XwiZqgz+J73F0h44=
Subject key identifier: 17:48:1A:D2:12:53:28:63:01:51:C4:8B:F5:E0:10:8E:30:02:7A:95
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 019F85D6F7C695937B078D800B4D66389B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:25 +0000
Manifest this update: Tue 21 Jul 2026 18:01:25 +0000
Manifest next update: Wed 22 Jul 2026 18:01:25 +0000
Files and hashes: 1: 28oIlKm6MkLxFqd8OoU_25jXGSA.crl (hash: /gKuUhI+4waknmdLsu21xgsWnrxknF+bP8rL+1OV1iI=)
2: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (hash: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:f7:c6:95:93:7b:07:8d:80:0b:4d:66:38:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Jul 21 18:01:25 2026 GMT
Not After : Jul 22 18:01:25 2026 GMT
Subject: CN=17481ad2125328630151c48bf5e0108e30027a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:b8:c1:1f:11:6f:5c:ac:30:22:37:81:cc:
d7:ca:42:30:8f:a9:82:f8:3a:ff:e9:60:7b:bc:0e:
d9:3d:e0:d2:f4:25:5b:ad:9d:ab:a2:cb:7d:bb:13:
21:65:a2:b3:50:da:96:4b:77:03:10:4a:00:73:92:
7d:56:08:10:af:32:9a:b3:37:68:cb:2e:9b:1b:73:
1e:83:0c:fb:77:de:fa:a0:eb:62:29:ad:14:6e:7b:
70:c1:cd:96:3b:a9:89:53:d7:e6:ed:ed:0c:b9:4f:
d1:74:fc:bf:3e:3b:e8:b2:25:a1:27:54:80:d5:5c:
3e:ed:9e:87:db:9d:8c:e5:c4:11:14:07:aa:a0:79:
67:51:e5:c8:c2:9c:c5:26:6f:44:7b:13:6a:e1:8a:
9b:ec:21:ac:17:32:c7:98:25:c2:5d:0c:7f:77:48:
3d:a3:e3:b7:3d:d7:bd:e8:f0:3a:d2:82:f7:f8:ae:
96:cd:79:f1:1e:12:6d:58:47:43:da:23:74:90:ca:
32:79:ea:0b:0a:2c:2d:be:8e:a8:6d:51:a4:de:da:
10:eb:a3:6b:2f:22:bc:dc:be:3d:ef:06:f9:da:f0:
ac:03:b1:76:cd:aa:98:f7:2c:dc:2b:7c:f2:af:2d:
c0:6a:e3:66:58:bb:fe:99:ae:16:92:f9:08:4f:36:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:1A:D2:12:53:28:63:01:51:C4:8B:F5:E0:10:8E:30:02:7A:95
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:a3:e9:1a:58:81:fa:ad:ec:ee:aa:99:77:19:6a:d4:f6:
06:b4:5e:21:82:8e:1e:69:63:0a:cc:03:69:4b:9a:2f:58:d0:
ba:2a:4d:dc:59:23:ce:cf:2e:02:55:17:a9:42:68:4a:7d:ad:
c7:07:c8:3e:d3:0b:32:c0:72:11:30:6e:3e:ff:65:04:6b:4e:
a6:89:fc:2f:59:16:1b:14:3b:8b:e5:21:3a:fe:7d:82:a5:19:
20:c1:ff:d3:93:38:9b:1c:79:6b:81:52:18:44:89:cf:8c:12:
52:67:2e:c4:d7:9b:be:9b:a7:10:32:f8:d8:9d:b0:38:92:6d:
9f:9e:d5:33:9c:d0:a5:68:af:ba:c1:dc:1c:4d:8e:a8:e6:1f:
ba:a4:7d:47:20:cb:94:a6:b3:f5:f9:95:b4:8a:88:96:91:74:
be:11:bd:7d:a6:31:b9:cf:d7:1b:28:9c:c0:be:7b:63:c2:81:
e5:c3:85:67:57:d1:75:e3:8e:7e:18:15:5e:5b:e4:56:af:ad:
74:9c:4f:da:a1:dd:00:70:f5:e9:6a:0d:12:cb:76:23:5d:8a:
fe:11:09:c1:19:75:3b:d2:ae:17:37:ab:f9:fb:4f:f5:b2:9e:
b1:c5:63:a9:9f:e8:6c:8a:ca:5b:45:07:37:ec:4e:39:6d:a9:
7c:c1:b5:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1vfGlZN7B42AC01mOJt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2EwODk0YTliYTMyNDJmMTE2YTc3YzNhODUzZmRiOThk
NzE5MjAwHhcNMjYwNzIxMTgwMTI1WhcNMjYwNzIyMTgwMTI1WjAzMTEwLwYDVQQD
EygxNzQ4MWFkMjEyNTMyODYzMDE1MWM0OGJmNWUwMTA4ZTMwMDI3YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsC4wR8Rb1ysMCI3gczXykIwj6mC
+Dr/6WB7vA7ZPeDS9CVbrZ2rost9uxMhZaKzUNqWS3cDEEoAc5J9VggQrzKaszdo
yy6bG3Megwz7d976oOtiKa0Ubntwwc2WO6mJU9fm7e0MuU/RdPy/PjvosiWhJ1SA
1Vw+7Z6H252M5cQRFAeqoHlnUeXIwpzFJm9EexNq4Yqb7CGsFzLHmCXCXQx/d0g9
o+O3Pde96PA60oL3+K6WzXnxHhJtWEdD2iN0kMoyeeoLCiwtvo6obVGk3toQ66Nr
LyK83L497wb52vCsA7F2zaqY9yzcK3zyry3AauNmWLv+ma4WkvkITzZG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdIGtISUyhjAVHEi/XgEI4wAnqVMB8GA1UdIwQY
MBaAFNvKCJSpujJC8RanfDqFP9uY1xkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhvSWxLbTZNa0x4RnFkOE9vVV8yNWpYR1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt
MDhmMDk0ZGFmMjQ3LzEvMjhvSWxLbTZNa0x4RnFkOE9vVV8yNWpYR1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3
LzEvMjhvSWxLbTZNa0x4RnFkOE9vVV8yNWpYR1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3Sj6RpY
gfqt7O6qmXcZatT2BrReIYKOHmljCswDaUuaL1jQuipN3Fkjzs8uAlUXqUJoSn2t
xwfIPtMLMsByETBuPv9lBGtOpon8L1kWGxQ7i+UhOv59gqUZIMH/05M4mxx5a4FS
GESJz4wSUmcuxNebvpunEDL42J2wOJJtn57VM5zQpWivusHcHE2OqOYfuqR9RyDL
lKaz9fmVtIqIlpF0vhG9faYxuc/XGyicwL57Y8KB5cOFZ1fRdeOOfhgVXlvkVq+t
dJxP2qHdAHD16WoNEst2I12K/hEJwRl1O9KuFzer+ftP9bKescVjqZ/obIrKW0UH
N+xOOW2pfMG1lw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:34 2026 by rpki-client