Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: sy6p8k/QCOopkfhS8B19Ki+hA0DHB5q0kQrLGCya+IU=
Subject key identifier: 3C:99:46:61:41:C7:1C:3C:01:CE:D3:10:16:64:3B:51:2B:15:BB:34
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019F11C063080878C9F11674B3CD82CFA217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 15D2
Signing time: Mon 29 Jun 2026 05:00:48 +0000
Manifest this update: Mon 29 Jun 2026 05:00:48 +0000
Manifest next update: Tue 30 Jun 2026 05:00:48 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: wbKtJ6v2TyomlCESi5nZeDEu7l832eyllB8CYFA4ZFk=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:63:08:08:78:c9:f1:16:74:b3:cd:82:cf:a2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jun 29 05:00:48 2026 GMT
Not After : Jun 30 05:00:48 2026 GMT
Subject: CN=3c99466141c71c3c01ced31016643b512b15bb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:a3:e5:3d:46:94:fa:77:60:9f:51:d6:71:
00:91:ee:07:96:1a:b0:12:23:ee:2f:e3:c3:aa:ea:
f6:19:d1:33:ef:b4:7f:63:a6:92:ad:f6:92:05:74:
47:af:64:2b:c1:93:b0:48:f4:3e:43:c3:95:07:bb:
6b:99:d8:4b:0c:cf:0e:35:16:4a:42:b4:44:83:41:
0e:2d:c9:55:55:40:e6:bf:2d:5b:55:34:4d:73:57:
48:48:12:cb:7e:f8:01:e3:3f:6b:ec:3c:86:5b:ec:
be:29:b2:9c:ac:93:75:34:ac:8a:5d:df:f8:4f:42:
6b:63:13:ce:70:48:73:19:e5:c2:ee:cc:bb:e0:60:
cd:76:ec:99:b2:42:e9:a9:fb:6d:e0:85:23:88:61:
4e:4f:6e:c2:53:1e:4e:da:01:9e:95:4a:5d:f2:c7:
77:e9:24:ca:ab:8c:80:20:e9:6c:40:92:fd:0d:2b:
18:d5:02:8c:63:cd:2b:96:0b:3d:f3:a8:0f:91:1b:
ce:7a:db:13:37:b6:30:16:35:e3:45:1e:91:00:8f:
16:0e:85:3e:2e:d2:95:d9:d7:da:d1:6c:b3:9f:c0:
1e:af:36:e5:68:6b:cf:76:83:b2:70:46:f0:ce:ec:
c2:d1:a8:f3:2e:ea:9b:db:74:67:06:86:c7:a7:8a:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:46:61:41:C7:1C:3C:01:CE:D3:10:16:64:3B:51:2B:15:BB:34
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b7:c6:a4:cf:a3:f0:03:27:21:4a:6b:16:0a:89:1f:65:84:
cf:c2:9f:23:52:84:9d:50:b3:c2:3a:04:6b:50:dd:72:2c:49:
86:f8:a2:c8:d2:49:de:3e:e9:db:2b:93:1e:c8:f4:6e:31:0e:
02:8c:94:57:d5:5b:29:4a:1a:ef:6a:32:86:63:95:50:03:6a:
d5:df:43:3b:20:10:74:a4:56:48:89:bf:a0:17:6a:b2:08:10:
f1:ac:4f:3f:67:1c:3d:52:d2:0f:7b:5f:f9:bc:8c:26:67:67:
d7:e7:0d:99:96:16:7a:23:03:1a:36:e7:47:4f:27:03:a5:72:
7f:35:e7:60:e5:ab:2f:de:57:a5:ee:af:f9:75:8e:48:da:86:
04:4f:f9:a1:59:36:a2:2f:5e:5e:00:75:9e:31:a5:75:70:ab:
71:19:0f:50:d6:c2:2d:d5:5e:78:3c:b5:b6:5e:70:59:87:d0:
f1:b8:89:4d:3b:22:83:b5:49:42:7e:f1:79:e5:d2:d5:83:d5:
46:87:79:1f:7c:91:ef:d2:ff:d3:b3:ba:31:6c:3f:1e:0a:e7:
c7:27:69:6a:93:d7:25:06:5f:90:f9:44:f4:e7:cc:97:4d:8d:
f7:00:9c:fa:82:9b:66:a5:06:59:58:6a:b8:e7:15:40:ab:5d:
e8:a7:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:11:05 2026 by rpki-client