Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File: 28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier: 8O0SlsrMzVF5ybU8md7H0x18puuFStE7yEXsr5jhZYc=
Subject key identifier: 4E:0C:D8:81:88:8F:34:7B:C9:8B:CC:45:9E:41:96:CD:EE:0E:48:15
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019D3A8AE4AE9CAA601A38E2E200C864FB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number: 5D
Signing time: Sun 29 Mar 2026 17:01:14 +0000
Manifest this update: Sun 29 Mar 2026 17:01:14 +0000
Manifest next update: Mon 30 Mar 2026 17:01:14 +0000
Files and hashes: 1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: 8Rgu3T/Yhyx3JLUehlolQ1e8G0T8xV5TdTbgj2YxWeE=)
2: rReuKYKAVqr3CoKH5UO-1aSW-mc.roa (hash: fGoH+yub0teNtoDmdJ6CIXMKMtZMJfMpSQSYdG/VkrY=)
3: sUQqwSxZusUBi9vAsx5snTDra5E.roa (hash: ZFriObyQYAxJbwjMxasjggndiXLds723oCaqAYJCBYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:e4:ae:9c:aa:60:1a:38:e2:e2:00:c8:64:fb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Mar 29 17:01:14 2026 GMT
Not After : Mar 30 17:01:14 2026 GMT
Subject: CN=4e0cd881888f347bc98bcc459e4196cdee0e4815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:33:7d:6e:19:0b:86:f8:53:8c:a9:47:05:
64:3a:3e:98:99:83:ac:3e:b3:13:91:17:66:73:4f:
84:51:45:9b:f8:49:e1:61:66:79:9d:f7:16:71:9c:
b1:fc:27:51:62:ea:b4:9a:3f:6a:d1:97:84:e7:20:
bc:bb:82:8c:57:cf:2b:a7:74:83:82:b6:ac:9e:84:
6f:d9:14:1e:24:c4:08:dd:59:35:ff:b1:f5:32:3f:
4e:a7:42:0e:fe:f1:83:04:f6:aa:ee:ff:28:28:d0:
2e:60:2a:92:dc:fe:42:f3:31:36:2e:cb:90:69:e9:
4b:23:23:8b:2b:2d:e0:e6:71:62:92:2b:9f:4c:c5:
dc:19:a3:cd:f1:bc:16:10:32:6b:86:15:78:15:d2:
7a:e1:dd:5f:0f:28:d1:e5:53:5e:47:42:c8:41:63:
da:3e:91:d6:ba:c9:cb:e5:86:28:23:37:34:65:07:
74:99:44:49:6a:20:82:bb:cc:bf:bb:8b:14:ef:d0:
4d:24:4b:6b:51:7f:0f:02:fa:ee:b3:f5:7c:bb:35:
de:a9:5a:bc:50:69:e5:b9:4a:50:4b:c3:2f:9a:80:
43:8e:67:b6:ef:6d:92:dd:57:27:f7:ff:d1:7a:2c:
9f:3a:b0:66:ed:03:a9:f1:73:2f:c1:d6:36:69:fe:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:D8:81:88:8F:34:7B:C9:8B:CC:45:9E:41:96:CD:EE:0E:48:15
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:2d:2b:9b:aa:79:61:c6:ee:f3:80:05:29:01:1e:6e:4f:
f1:06:47:9d:f6:88:e5:f7:0a:c8:95:72:25:3e:be:da:1e:0e:
ee:73:40:bb:6c:69:2e:fe:de:e7:6b:e9:7c:b1:b5:3e:db:ba:
ff:63:43:68:75:9a:ae:e0:d0:e5:ae:52:c8:cc:dc:2c:07:fc:
b8:ad:a0:c3:76:e2:90:06:92:9b:2c:06:fd:82:16:bd:44:dd:
17:5a:53:f4:b6:43:78:d2:35:29:60:c2:1f:01:52:a2:ee:33:
95:4c:9c:9d:20:12:8c:e4:92:4f:06:d1:c5:64:bc:b7:59:e7:
e9:81:0b:c2:4f:7f:db:74:4b:bc:45:0a:4f:82:82:c6:ca:ef:
41:2e:4d:97:80:b4:b7:30:db:48:ca:e8:3a:56:5e:ee:f7:76:
43:43:14:3d:56:32:12:de:19:2d:69:69:d7:6d:9e:15:73:68:
62:a3:97:9a:c7:e6:f0:72:27:25:0e:f0:b6:9c:53:01:47:22:
4c:30:ff:a6:b1:33:ba:e0:76:e6:55:c2:26:e2:16:d6:6b:d0:
8e:42:3a:10:29:16:45:47:b1:e4:7b:58:ec:a0:24:a3:89:ed:
e8:45:8e:e3:49:fb:4a:90:17:0b:48:8c:10:08:84:94:50:b5:
b1:1b:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:33 2026 by rpki-client