Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File: 28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier: QjVtracSfZTW+cTkLBhrYxfvqh/uVu2+pmUhtGHxcI8=
Subject key identifier: 40:06:D6:79:8C:3F:F7:C1:93:45:18:02:B1:08:13:CB:A7:31:0E:F7
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 01A1A3A4DA37E09E8F04178988640D5979AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number: 02AF
Signing time: Tue 03 Nov 2026 23:00:52 +0000
Manifest this update: Tue 03 Nov 2026 23:00:52 +0000
Manifest next update: Wed 04 Nov 2026 23:00:52 +0000
Files and hashes: 1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: +GIzVW7fKPaYftwE6sYH0oxnIzPwR4shmgcNCQdq74w=)
2: 2ySzXXxIAMmvP-kf7e_CfT3TUeI.roa (hash: a3t6SRnrWmBfVlWLIG8w/Hd547YNd8Sh7p0TlNZoH7E=)
3: HcZu53ikNbm6E6nULbzZ5BaC4s8.asa (hash: aZUh5JSJtmadcsFgBZ/s+52L71m5F6dmNv0c812Q2Cc=)
4: WVpSnVD2XbbHskptNMohrIQV0mQ.roa (hash: ekTZwonJWta0T5gYa1GrQIkkLaJSP+32NHWlky3tYhI=)
5: YmpUQsKRqD4AX2JDKXONqEy4OUc.roa (hash: CUbgFiyC5v44xgVPVpw5zZbv2WHebTNf1FSrJBghQuE=)
6: atcPnoh5T8KOdOi3deCvWkqUy-k.asa (hash: LdBBxBTgr2OX/cP1E0OPxVrVAk6jJMcVk9Wps9UoWQw=)
7: kVVClsohK8v0CmN7V4mao5zOy-Y.roa (hash: 5SMcfvyiEiZ0acwIzHT+t4Qsip/6uu/MeUu0s1Ku4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:a4:da:37:e0:9e:8f:04:17:89:88:64:0d:59:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Nov 3 23:00:52 2026 GMT
Not After : Nov 4 23:00:52 2026 GMT
Subject: CN=4006d6798c3ff7c193451802b10813cba7310ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:21:67:e0:00:b8:dc:1f:60:7c:fa:20:29:
db:05:aa:c5:1f:72:1f:39:08:3f:bb:dc:ce:1f:94:
ba:ef:b0:1f:9a:1a:85:7c:da:90:6a:2b:ef:cd:82:
5a:88:dd:75:b3:7b:a5:da:ba:79:4e:49:28:9d:6d:
84:d2:94:ee:a4:81:ea:51:08:15:c2:7c:99:3f:61:
b3:90:79:e2:17:e2:bd:ee:38:ef:c9:3b:4d:8e:38:
03:c7:ca:bb:f8:20:71:88:a1:c2:d6:e2:e2:dd:37:
3a:3e:b6:0f:5c:42:d6:7a:5c:e3:17:34:93:0b:ba:
68:d0:5f:23:45:6f:fd:e1:f2:28:5f:ea:b5:c8:bc:
7f:0b:a5:05:46:db:df:24:4d:01:95:2a:12:72:ce:
03:34:13:6b:3e:de:64:1a:aa:1c:32:a5:9d:ae:cc:
05:11:94:57:1b:8d:15:44:44:e2:f3:09:17:64:86:
db:c4:d8:58:15:ae:ac:75:08:d6:e1:e0:95:a7:2d:
d3:d7:c0:d0:82:02:5d:2e:5f:24:d3:3e:14:7e:a8:
f6:82:ec:65:ae:a4:d4:cc:d2:83:d1:0f:45:dc:a0:
54:50:1d:13:1f:dd:13:c7:97:0c:04:27:94:25:26:
8d:e9:dd:72:15:11:6d:28:57:15:7b:4f:4c:48:03:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:06:D6:79:8C:3F:F7:C1:93:45:18:02:B1:08:13:CB:A7:31:0E:F7
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2b:c4:4a:d7:65:3c:71:c8:fe:62:f2:bd:9b:bc:2a:49:2d:
14:fd:4d:5f:94:1a:ee:bc:6d:c7:06:f6:22:7f:9d:5e:81:fa:
a7:c6:87:76:70:f8:c2:06:ec:3b:a5:06:13:e9:d3:f7:99:c9:
0b:60:87:51:fc:18:71:fd:cc:f7:e9:f1:93:e7:06:3a:3d:35:
f6:a6:76:1c:8f:09:01:e3:26:8e:02:c3:d4:d5:34:61:8a:97:
d0:75:c8:93:2b:69:4a:f4:24:ee:b1:99:53:8d:b3:83:b8:34:
da:13:20:72:d6:28:39:bf:fa:be:63:ee:df:e6:49:0e:00:27:
c7:99:fb:5e:77:be:1d:d1:76:5c:27:18:37:95:80:c8:a6:16:
95:a5:4a:f3:51:ef:c8:1b:78:b5:95:2e:92:64:82:f8:3b:cc:
af:3f:1e:1c:0f:c4:6f:84:da:db:02:80:de:b1:17:dd:7d:af:
73:83:46:c5:6a:75:98:c9:69:b1:dc:a6:9b:64:df:6c:43:a0:
05:f8:df:6c:d7:17:22:1a:45:10:66:ae:0e:4f:f3:5b:39:71:
46:8e:43:58:bb:4a:76:1e:a0:8e:48:e3:01:5c:b3:9c:80:d8:
9c:29:c8:b7:8b:08:fb:da:67:fb:61:0c:7c:40:2b:c2:31:fa:
f2:77:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:37:54 2026 by rpki-client