Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: oCtAKTrC3Tf0/iFf27X8/N0NNhnvTW+1/T38KPOVSTA=
Subject key identifier: 40:2E:69:A7:29:F0:8D:EF:1D:41:50:64:A8:DB:67:05:95:B3:21:5D
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019FFD5BD7F4C868C9836FF6D3406589BA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 164C
Signing time: Thu 13 Aug 2026 23:01:22 +0000
Manifest this update: Thu 13 Aug 2026 23:01:22 +0000
Manifest next update: Fri 14 Aug 2026 23:01:22 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 2AQKRvr7El/C9npCc+ycKWbqOzsbGjY2W4RU69Oo41o=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:5b:d7:f4:c8:68:c9:83:6f:f6:d3:40:65:89:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Aug 13 23:01:22 2026 GMT
Not After : Aug 14 23:01:22 2026 GMT
Subject: CN=402e69a729f08def1d415064a8db670595b3215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:3c:ff:2e:b8:03:47:47:d0:ca:a1:43:55:
d5:c3:1d:5e:6d:26:2e:63:fa:9f:bc:d7:59:b3:28:
cb:a9:ef:a2:44:61:06:7c:77:e0:41:a7:4f:1a:90:
48:d3:bf:ce:44:6a:94:63:21:fe:ec:e7:43:39:85:
7d:49:1e:f6:00:e0:e6:c6:c7:41:df:93:39:93:f3:
b3:a1:8b:f4:99:8c:b6:e8:4d:11:0d:e5:ff:bb:08:
f4:27:bd:55:b5:36:0e:20:9d:20:fc:33:e6:3a:58:
5f:50:47:8e:d6:c1:3c:d9:9b:91:43:e1:bf:7f:82:
83:67:f5:6e:df:39:a3:1d:9c:bf:61:23:ee:a7:de:
4c:ee:3b:5c:84:e4:ba:e4:de:2f:e3:0b:59:ff:2c:
bd:64:e5:79:57:45:48:c2:9b:03:6f:00:81:f7:18:
94:1a:65:dd:05:97:cc:84:16:3e:ee:b5:d2:fb:17:
34:79:ea:eb:70:bb:dd:92:3d:ef:48:6f:63:0a:2c:
85:57:b7:0b:27:ad:53:63:3a:ff:87:85:47:5b:31:
6e:ec:55:8e:25:00:a8:d5:8e:3f:90:73:3b:33:1e:
7c:d2:09:c7:03:e6:44:00:70:3d:34:35:63:b3:5f:
9e:8e:d1:40:a5:7d:00:ef:42:f7:b9:11:ca:37:ed:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:69:A7:29:F0:8D:EF:1D:41:50:64:A8:DB:67:05:95:B3:21:5D
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:c9:93:b9:a2:8f:7a:6a:81:90:f0:3e:ce:4d:ca:1b:b5:
51:a1:1f:e4:df:a6:eb:01:e3:04:41:a2:38:04:1f:7e:00:66:
c6:97:5d:4f:42:33:d2:16:d8:22:76:76:67:cd:c7:eb:48:e3:
28:23:e2:d2:30:d2:8d:07:43:98:81:d9:d2:fd:3e:da:08:64:
7a:f3:76:e9:e8:bf:3a:2b:31:a8:54:e1:c1:25:3d:06:bb:05:
dc:87:6c:0d:3e:64:38:f0:e7:3f:20:6a:fb:53:ef:c1:d2:91:
38:a5:49:c4:d9:fc:70:09:5a:54:0d:7c:77:ac:70:e9:5d:48:
14:b2:d2:fc:40:f2:91:a8:23:93:e7:38:ff:44:18:90:1e:8a:
f0:5c:a9:84:93:bb:fd:64:ef:34:b5:cc:aa:2e:4e:59:ce:56:
f0:31:ee:07:04:b9:d2:6f:f5:09:b0:21:14:e7:b1:1b:2a:bd:
86:3b:cc:e5:96:b7:87:64:a8:df:76:a6:7d:dc:92:c8:e2:73:
8f:a7:d1:07:19:45:ee:fc:6f:b8:6e:07:d2:91:2f:03:39:8e:
ce:85:4a:cd:2f:9a:29:9d:0d:6a:b4:ea:39:b7:86:2c:9b:53:
26:66:b3:75:61:3c:dd:32:a0:ab:a4:2f:c3:b7:ad:67:49:ce:
78:e0:f3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9W9f0yGjJg2/200Blibo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjYwODEzMjMwMTIyWhcNMjYwODE0MjMwMTIyWjAzMTEwLwYDVQQD
Eyg0MDJlNjlhNzI5ZjA4ZGVmMWQ0MTUwNjRhOGRiNjcwNTk1YjMyMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj88/y64A0dH0MqhQ1XVwx1ebSYu
Y/qfvNdZsyjLqe+iRGEGfHfgQadPGpBI07/ORGqUYyH+7OdDOYV9SR72AODmxsdB
35M5k/OzoYv0mYy26E0RDeX/uwj0J71VtTYOIJ0g/DPmOlhfUEeO1sE82ZuRQ+G/
f4KDZ/Vu3zmjHZy/YSPup95M7jtchOS65N4v4wtZ/yy9ZOV5V0VIwpsDbwCB9xiU
GmXdBZfMhBY+7rXS+xc0eerrcLvdkj3vSG9jCiyFV7cLJ61TYzr/h4VHWzFu7FWO
JQCo1Y4/kHM7Mx580gnHA+ZEAHA9NDVjs1+ejtFApX0A70L3uRHKN+24GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAuaacp8I3vHUFQZKjbZwWVsyFdMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB3Jk7mi
j3pqgZDwPs5Nyhu1UaEf5N+m6wHjBEGiOAQffgBmxpddT0Iz0hbYInZ2Z83H60jj
KCPi0jDSjQdDmIHZ0v0+2ghkevN26ei/OisxqFThwSU9BrsF3IdsDT5kOPDnPyBq
+1PvwdKROKVJxNn8cAlaVA18d6xw6V1IFLLS/EDykagjk+c4/0QYkB6K8FyphJO7
/WTvNLXMqi5OWc5W8DHuBwS50m/1CbAhFOexGyq9hjvM5Za3h2So33amfdySyOJz
j6fRBxlF7vxvuG4H0pEvAzmOzoVKzS+aKZ0NarTqObeGLJtTJmazdWE83TKgq6Qv
w7etZ0nOeODzZQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 06:57:19 2026 by rpki-client