Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: +bmWvu3aGTrA6RFX3jCi/nMD1qZspoSth9gvkTVuBFQ=
Subject key identifier: 81:B2:33:F0:E6:C6:48:49:D7:2A:86:A9:7F:0F:B6:08:DB:C4:25:8D
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 019D3AC236EE618DF671E083061DEE3C5009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 187C
Signing time: Sun 29 Mar 2026 18:01:39 +0000
Manifest this update: Sun 29 Mar 2026 18:01:39 +0000
Manifest next update: Mon 30 Mar 2026 18:01:39 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: N2rXHx0mDIRkShaY8psr7g087wSTXqi09n+jovFy60k=)
2: DP7T_q2dH40UAoEeaOyilRTarIc.roa (hash: eI6A0wd8tTUmEmNVJN3J+AgyOo9pOZ6DcargfGd5ggE=)
3: sxE81xLDEQT0P-TPsy-WofGvQHg.roa (hash: DGA+4dzkewtJxSyfNRDqxt+xT7jcUam8PPEoRnh0nXE=)
4: zkEx11XO93N85vwrTCOs3PDbZd0.roa (hash: Qdd6ijsBLwMFkDU5X4d6hXWxnnXx+SCnTnhqOiOzcAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:36:ee:61:8d:f6:71:e0:83:06:1d:ee:3c:50:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Mar 29 18:01:39 2026 GMT
Not After : Mar 30 18:01:39 2026 GMT
Subject: CN=81b233f0e6c64849d72a86a97f0fb608dbc4258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:4d:73:37:38:cc:75:d5:be:11:09:c8:32:
35:67:32:e7:e2:0e:a7:51:b1:93:46:99:42:0f:9e:
ab:76:74:9b:bb:dc:c3:fa:f7:45:a4:2c:86:f7:4e:
4b:68:fb:27:45:9c:2f:74:bb:bc:46:4a:a5:4f:81:
67:cd:20:99:6d:4b:74:51:90:4e:de:9f:c5:5d:5d:
cf:7b:be:dd:f1:b2:52:9e:d0:9f:18:ab:cb:c6:95:
1d:a8:50:9c:f1:48:92:11:1f:49:d7:f3:fc:c1:61:
ca:21:03:a9:ba:50:e9:8b:8e:4c:0b:ad:cb:c5:13:
71:80:ac:a8:80:51:23:b8:74:e9:ff:df:38:df:54:
19:04:97:bd:81:9c:f1:ec:00:2c:02:34:cd:a2:93:
ed:83:1c:63:56:e7:ff:35:45:4c:69:d6:9d:df:35:
54:93:59:a4:00:04:9e:a5:07:fe:67:31:33:a3:e2:
50:a6:91:30:03:b7:60:57:0f:bb:ae:0b:ab:c8:a3:
5c:49:a6:4a:22:d2:92:75:d7:1b:4e:3e:ee:b0:50:
05:f9:44:29:1a:2a:61:05:2e:77:28:40:8e:9a:05:
8d:7d:fb:74:76:31:27:1f:0c:65:6b:f1:2f:f3:00:
25:0c:53:49:29:59:4c:98:5d:b9:4c:a6:63:af:6a:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:33:F0:E6:C6:48:49:D7:2A:86:A9:7F:0F:B6:08:DB:C4:25:8D
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:07:e1:45:11:e2:94:c8:2f:93:6d:e2:99:b7:73:b1:2b:
41:95:27:be:96:f7:6c:59:55:3e:d0:d2:f2:4b:9f:ec:1f:ca:
b6:4f:5c:da:90:81:a4:e1:08:9a:8f:cc:89:e5:f3:05:7b:79:
ad:64:89:40:20:85:63:4d:85:cf:08:56:2b:3a:8c:de:99:2e:
65:44:0f:7e:24:30:5d:e2:fb:8c:56:38:c5:cb:95:db:d7:1d:
6e:c9:d5:22:7e:3b:eb:b7:16:46:b9:af:80:5d:a3:b2:91:14:
be:f6:e7:6e:54:68:64:2f:54:89:df:60:df:17:8b:35:89:c0:
5d:55:aa:f2:35:3b:88:58:2a:be:19:48:8a:41:d5:1b:95:ff:
40:0c:ca:68:7f:b3:5e:3d:b4:19:01:6e:c0:28:2c:87:23:71:
f8:bf:d8:a7:fa:19:08:7b:71:b9:6f:70:62:4a:69:9a:51:e8:
55:33:1a:0b:4d:59:ca:fa:1d:73:7b:92:37:df:94:1c:b8:fe:
75:60:ec:1b:6f:db:d4:5b:a8:b9:61:36:08:d8:b7:3c:6c:6c:
60:95:04:62:66:ff:e3:71:ba:6d:e6:b0:32:1d:e6:af:8d:1e:
8c:85:fb:6b:40:3d:28:fb:13:fb:3d:ca:06:85:81:3b:31:1b:
45:22:46:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wjbuYY32ceCDBh3uPFAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2
NDEzMzMwHhcNMjYwMzI5MTgwMTM5WhcNMjYwMzMwMTgwMTM5WjAzMTEwLwYDVQQD
Eyg4MWIyMzNmMGU2YzY0ODQ5ZDcyYTg2YTk3ZjBmYjYwOGRiYzQyNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaVNczc4zHXVvhEJyDI1ZzLn4g6n
UbGTRplCD56rdnSbu9zD+vdFpCyG905LaPsnRZwvdLu8RkqlT4FnzSCZbUt0UZBO
3p/FXV3Pe77d8bJSntCfGKvLxpUdqFCc8UiSER9J1/P8wWHKIQOpulDpi45MC63L
xRNxgKyogFEjuHTp/98431QZBJe9gZzx7AAsAjTNopPtgxxjVuf/NUVMadad3zVU
k1mkAASepQf+ZzEzo+JQppEwA7dgVw+7rguryKNcSaZKItKSddcbTj7usFAF+UQp
GiphBS53KECOmgWNfft0djEnHwxla/Ev8wAlDFNJKVlMmF25TKZjr2pLvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGyM/DmxkhJ1yqGqX8PtgjbxCWNMB8GA1UdIwQY
MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt
NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj
LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojMH4UUR
4pTIL5Nt4pm3c7ErQZUnvpb3bFlVPtDS8kuf7B/Ktk9c2pCBpOEImo/MieXzBXt5
rWSJQCCFY02FzwhWKzqM3pkuZUQPfiQwXeL7jFY4xcuV29cdbsnVIn4767cWRrmv
gF2jspEUvvbnblRoZC9Uid9g3xeLNYnAXVWq8jU7iFgqvhlIikHVG5X/QAzKaH+z
Xj20GQFuwCgshyNx+L/Yp/oZCHtxuW9wYkppmlHoVTMaC01Zyvodc3uSN9+UHLj+
dWDsG2/b1FuouWE2CNi3PGxsYJUEYmb/43G6beawMh3mr40ejIX7a0A9KPsT+z3K
BoWBOzEbRSJGRw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:59 2026 by rpki-client