Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: 3xj5xY7aRac34KXc40yKscAErw2g93LtVI3pdDrwGv4=
Subject key identifier: EC:0C:11:CB:0F:18:9E:BF:EF:D3:D5:B5:51:DE:42:61:0C:34:3B:92
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019F13AF509F8CE58FE9609E4116234C3936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 15D3
Signing time: Mon 29 Jun 2026 14:01:24 +0000
Manifest this update: Mon 29 Jun 2026 14:01:24 +0000
Manifest next update: Tue 30 Jun 2026 14:01:24 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: TXTPLPL6GuN/X+MznVCHish4P83Ja1Zn3waCl8XSazA=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:af:50:9f:8c:e5:8f:e9:60:9e:41:16:23:4c:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jun 29 14:01:24 2026 GMT
Not After : Jun 30 14:01:24 2026 GMT
Subject: CN=ec0c11cb0f189ebfefd3d5b551de42610c343b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:ac:9f:c4:c9:95:e2:a9:a5:6f:bb:71:2f:
cb:db:18:89:98:b4:47:08:6e:a2:cb:33:c4:af:fb:
2a:eb:57:1d:65:25:30:44:88:b2:45:f5:0f:c9:49:
fd:f6:d0:ef:48:b5:9f:2e:7d:24:c8:ec:ca:49:3d:
d9:51:52:0b:34:45:17:e3:07:79:dc:f4:f6:9e:8d:
4a:23:f6:a7:16:8e:c1:a7:51:99:d2:93:58:01:e2:
92:86:fa:c4:c7:b5:32:65:e9:05:7f:00:30:e2:59:
80:24:01:c7:74:08:ee:e1:ef:bd:23:e5:54:26:56:
23:c2:49:52:2d:3d:42:f3:96:d4:81:8b:9d:45:c4:
b3:16:73:a3:5c:24:d7:63:94:49:87:f1:97:3f:7e:
48:87:8a:7f:9f:98:13:b8:28:d3:3d:f9:c7:c4:89:
40:5f:cd:18:e1:95:e0:5c:97:20:1b:32:44:33:3d:
0d:2e:c0:e4:56:d4:36:ae:55:5f:65:32:93:6a:2a:
eb:a6:99:62:79:ae:6e:8c:a0:39:07:75:35:e6:22:
31:d3:60:90:43:e0:35:e6:2b:84:03:ef:9f:bd:68:
b1:c2:70:b2:eb:7f:fd:ae:ba:b3:51:ba:ca:1f:fe:
13:58:88:77:1a:f5:9b:67:61:f9:86:4a:b6:03:95:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:11:CB:0F:18:9E:BF:EF:D3:D5:B5:51:DE:42:61:0C:34:3B:92
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:79:c8:62:ec:e6:fb:5b:95:f1:9d:e2:94:b5:d4:58:a8:e3:
60:e7:7b:9a:74:91:48:22:2f:46:2e:cb:fc:97:3e:cb:9f:18:
0f:df:10:d1:3f:ad:87:88:93:4f:45:21:4d:b5:50:19:68:57:
db:6a:44:aa:57:a2:33:71:8d:43:88:9e:08:9a:91:de:7f:1d:
2f:10:aa:67:1e:f0:ea:33:0b:60:ec:15:de:1a:bd:50:33:5f:
d4:a4:28:19:4e:fb:77:40:3e:50:19:ff:9e:15:50:51:24:69:
3f:9e:ab:17:e6:c5:9a:63:f6:3c:e8:02:76:7a:2c:d5:e7:ca:
ed:2a:c3:25:f5:f1:0b:c8:20:f2:e0:08:22:83:d9:c5:d8:83:
8f:0e:ec:ac:e4:9c:8e:9e:d9:05:74:f7:a6:cc:9f:f8:46:30:
31:26:49:04:30:2e:4f:35:db:db:34:36:e4:2f:5b:cf:06:bd:
6d:12:2d:e3:3f:fc:01:11:84:af:4f:19:fb:b9:e7:d7:0b:47:
05:49:88:1d:44:e0:f4:29:f0:dc:0c:b1:fa:64:1c:60:ca:d8:
50:93:29:9a:13:9f:ed:3e:73:56:9d:63:fe:c6:cf:f7:1c:be:
5f:5b:71:53:ba:22:c3:55:0e:e7:28:b5:a8:e4:ab:10:93:67:
22:1e:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:08:33 2026 by rpki-client