Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: 10HvAp5ZXVOWbp5dXm4mS84zgGAh1+rLMGBJRbR2fP0=
Subject key identifier: D3:F6:12:52:19:F5:7A:ED:9A:01:14:42:88:D9:6F:AA:D0:B5:B1:8A
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 01A1306A7CFE4861B56A4B12BE7F0B4304D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 16EB
Signing time: Mon 12 Oct 2026 14:00:47 +0000
Manifest this update: Mon 12 Oct 2026 14:00:47 +0000
Manifest next update: Tue 13 Oct 2026 14:00:47 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: f7pAxXjrvHgxUsjKkhfelfX9ANtk75Mm+ZLpTg/QxbY=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:7c:fe:48:61:b5:6a:4b:12:be:7f:0b:43:04:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Oct 12 14:00:47 2026 GMT
Not After : Oct 13 14:00:47 2026 GMT
Subject: CN=d3f6125219f57aed9a01144288d96faad0b5b18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:fd:d5:c4:b3:86:47:90:de:5b:07:2e:81:
df:65:f9:41:76:5b:f9:37:ae:f4:3f:5f:6b:b1:1f:
d4:28:d5:87:14:01:ce:ec:e8:8a:c5:d4:35:f1:be:
96:e7:dd:bb:59:a1:ab:70:f7:dc:0e:3a:9b:c2:50:
81:66:7f:75:15:95:ea:bd:09:e3:04:ca:e8:ab:86:
7f:8c:ef:97:de:e6:56:6a:85:c8:45:15:bc:84:91:
a2:08:b4:60:58:6a:79:83:2b:68:5b:ff:9c:56:e1:
9c:76:f9:6c:b9:6d:ee:6d:1b:11:5c:cd:0b:e3:43:
48:b3:52:b0:26:54:99:00:89:16:62:7b:00:b0:59:
50:2b:21:3c:ef:fa:59:45:9a:36:4d:c6:4c:54:96:
9a:3a:cd:c4:97:10:aa:78:37:76:18:02:db:cb:62:
fe:b9:c3:c2:57:40:c5:01:10:1a:d1:68:84:74:9c:
d6:0b:f4:40:c3:52:84:7b:75:13:e3:da:a8:da:f0:
26:f3:65:bc:ce:96:30:b2:ca:09:cf:87:3d:05:c5:
9e:d4:64:b9:b4:f0:a3:5a:03:fd:8f:78:e5:d9:4f:
57:7c:94:0e:5b:23:7c:e6:df:93:7c:01:fb:26:5d:
5c:d4:dc:ed:ec:1f:de:7e:4e:d6:4f:e6:2d:83:7e:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:12:52:19:F5:7A:ED:9A:01:14:42:88:D9:6F:AA:D0:B5:B1:8A
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a5:0b:05:94:c5:51:9a:b2:c1:60:5c:34:5f:c9:02:0e:74:
ea:e6:2a:47:94:eb:93:a5:57:ab:bb:75:81:44:dc:79:d1:9c:
71:ce:e9:fa:e9:7f:72:75:60:98:d0:1f:31:62:e3:12:77:f0:
56:fa:19:0b:9d:8f:8d:5d:97:cf:08:11:92:cd:5e:2f:d9:2a:
c6:d7:ff:9f:0c:d4:e9:de:0a:ec:f6:5c:35:a9:1e:f8:60:26:
34:d4:fc:14:87:44:62:4f:3c:aa:43:ed:71:d6:81:60:e9:83:
5e:49:01:c9:e0:05:0f:2a:13:4d:2d:ae:35:89:08:d5:a2:6a:
cc:4e:d9:a0:3c:af:20:f2:2d:88:ef:a6:01:15:a1:76:00:7f:
e0:be:a7:b6:52:e4:ba:24:6c:ce:c8:4d:ce:88:f9:fa:64:e3:
e4:2a:ac:07:8d:91:e9:ba:10:8b:1d:4d:6a:bb:0f:c7:ab:c2:
29:84:5e:55:88:d3:ef:01:59:5c:e4:e6:64:86:55:5c:85:0b:
23:84:ec:11:9e:1a:8a:b1:06:51:d8:df:a9:79:6c:dc:e0:9f:
ff:65:05:48:5a:32:d1:23:b8:7d:56:e2:2e:21:f4:71:e0:20:
bf:37:c9:4f:2a:ec:2d:79:cf:cf:50:a3:65:dc:e3:b8:80:93:
f9:6f:9c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwanz+SGG1aksSvn8LQwTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjYxMDEyMTQwMDQ3WhcNMjYxMDEzMTQwMDQ3WjAzMTEwLwYDVQQD
EyhkM2Y2MTI1MjE5ZjU3YWVkOWEwMTE0NDI4OGQ5NmZhYWQwYjViMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hj91cSzhkeQ3lsHLoHfZflBdlv5
N670P19rsR/UKNWHFAHO7OiKxdQ18b6W5927WaGrcPfcDjqbwlCBZn91FZXqvQnj
BMroq4Z/jO+X3uZWaoXIRRW8hJGiCLRgWGp5gytoW/+cVuGcdvlsuW3ubRsRXM0L
40NIs1KwJlSZAIkWYnsAsFlQKyE87/pZRZo2TcZMVJaaOs3ElxCqeDd2GALby2L+
ucPCV0DFARAa0WiEdJzWC/RAw1KEe3UT49qo2vAm82W8zpYwssoJz4c9BcWe1GS5
tPCjWgP9j3jl2U9XfJQOWyN85t+TfAH7Jl1c1Nzt7B/efk7WT+Ytg36qQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP2ElIZ9XrtmgEUQojZb6rQtbGKMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6ULBZTF
UZqywWBcNF/JAg506uYqR5Trk6VXq7t1gUTcedGccc7p+ul/cnVgmNAfMWLjEnfw
VvoZC52PjV2XzwgRks1eL9kqxtf/nwzU6d4K7PZcNake+GAmNNT8FIdEYk88qkPt
cdaBYOmDXkkByeAFDyoTTS2uNYkI1aJqzE7ZoDyvIPItiO+mARWhdgB/4L6ntlLk
uiRszshNzoj5+mTj5CqsB42R6boQix1NarsPx6vCKYReVYjT7wFZXOTmZIZVXIUL
I4TsEZ4airEGUdjfqXls3OCf/2UFSFoy0SO4fVbiLiH0ceAgvzfJTyrsLXnPz1Cj
ZdzjuICT+W+c6Q==
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:27:54 2026 by rpki-client