Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File: 28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier: o4Ag9V5Q35G2Fe8izlfg/wJNMDOee1PJ6xGnibo4+v0=
Subject key identifier: F1:24:AA:2B:90:E8:09:FF:EC:DD:FB:26:A0:8B:F4:29:64:D5:9C:1D
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019F95EE6B275EA4189FB39378F7CAE9F63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number: 0196
Signing time: Fri 24 Jul 2026 21:00:57 +0000
Manifest this update: Fri 24 Jul 2026 21:00:57 +0000
Manifest next update: Sat 25 Jul 2026 21:00:57 +0000
Files and hashes: 1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: 5sZebPFqRb5WQ8sQb4pS7J30KbSRzjrd9SjPTd7oVlg=)
2: VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa (hash: PsHxBvZ369SRFDSO+Fj2EJJzFPlfyfCCV/NJdrfL2e4=)
3: rReuKYKAVqr3CoKH5UO-1aSW-mc.roa (hash: fGoH+yub0teNtoDmdJ6CIXMKMtZMJfMpSQSYdG/VkrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:6b:27:5e:a4:18:9f:b3:93:78:f7:ca:e9:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Jul 24 21:00:57 2026 GMT
Not After : Jul 25 21:00:57 2026 GMT
Subject: CN=f124aa2b90e809ffecddfb26a08bf42964d59c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:93:10:63:40:78:ec:d1:df:4a:d2:fc:94:
97:ef:76:66:f9:95:d5:70:c3:18:c3:22:b6:f4:fb:
92:c7:f1:be:17:4e:01:75:77:16:c2:96:5c:d7:de:
c6:57:bf:c1:d8:f7:eb:cc:ba:1e:f3:89:cd:66:8d:
8f:9a:21:12:fa:0c:7a:d6:5f:b7:fd:3c:d3:c4:3c:
ce:18:18:33:86:37:5f:06:ea:62:79:b9:63:38:fc:
8d:02:d5:a1:85:84:af:54:46:39:cd:5b:9e:0b:0a:
c9:a3:2a:cb:5d:b5:30:63:c4:3c:c1:45:43:aa:1f:
20:3f:42:1c:9c:1c:23:76:17:e1:18:60:51:65:98:
da:7f:f4:52:5d:52:b9:9e:2a:72:4a:31:0b:68:b0:
ef:a5:19:54:3e:16:93:f9:fd:0f:45:8b:2a:a8:df:
67:23:aa:68:cb:72:6b:42:3c:e3:57:28:5c:59:d8:
88:4d:22:17:cf:06:6b:63:26:df:68:03:90:83:d5:
d7:12:54:e4:b6:39:02:0a:e9:fb:2f:22:b2:be:55:
e5:3b:db:6a:a2:56:71:59:7a:9d:09:32:9e:32:c8:
b7:fb:92:05:a9:12:87:0f:17:c1:78:e0:c1:bb:84:
89:a8:88:97:45:19:be:e4:f0:6b:fe:39:95:9a:da:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:AA:2B:90:E8:09:FF:EC:DD:FB:26:A0:8B:F4:29:64:D5:9C:1D
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:51:38:cb:18:ec:ff:b5:bf:58:f9:93:a2:fb:d3:ff:42:6f:
f1:40:2a:50:7d:96:dd:22:bb:64:5d:9c:42:3f:b0:51:76:63:
bf:87:48:3c:08:4b:3a:99:a1:de:af:5b:e1:f8:2e:1d:14:55:
01:bb:a6:75:ea:60:b6:e9:69:eb:36:28:d3:e8:10:ab:39:63:
b4:43:cf:27:47:5a:91:d5:6c:f6:f4:76:70:a2:49:df:bf:de:
d9:df:99:aa:af:1c:ff:c8:86:44:81:8b:e9:03:2a:88:ac:d0:
6b:04:ab:a8:49:fa:b0:8c:82:b0:2f:83:87:83:80:50:59:8a:
28:1b:4c:20:56:0c:30:b3:c7:1d:72:03:09:31:e5:d4:da:e8:
da:93:e5:9b:ab:45:f9:32:60:5c:59:a4:4a:5e:62:5e:1f:ee:
1f:99:87:37:20:f3:70:d0:36:a4:1a:bc:ed:b4:3a:f0:7e:8f:
d4:ad:3a:7b:5f:ca:fb:0c:ec:05:d2:38:24:09:5e:64:00:bc:
6d:68:e0:88:98:be:ce:4e:2d:b5:b6:81:4f:d4:ca:79:0e:a7:
b9:13:49:94:f8:ae:d1:de:3d:f3:0e:5f:7a:a1:9e:71:4b:4b:
87:ae:e2:2e:a3:6b:2b:c3:77:17:e6:bc:81:0e:91:e7:34:f4:
35:57:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:57:38 2026 by rpki-client