Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: UpQXiEtm1+nwbBiVcOEcjsB/oH/XXM/FpQsKsAwWRrM=
Subject key identifier: FF:F0:20:D0:D1:E1:C6:37:EB:80:48:A7:32:AC:AF:70:BD:55:68:A3
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019EF8377EC1FF97025DA9B7646D3A62953C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1978
Signing time: Wed 24 Jun 2026 06:00:46 +0000
Manifest this update: Wed 24 Jun 2026 06:00:46 +0000
Manifest next update: Thu 25 Jun 2026 06:00:46 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: BbYMbAm6w/oLK08xy42q50p/Z1N8PXSR0rOHjoq75RY=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:37:7e:c1:ff:97:02:5d:a9:b7:64:6d:3a:62:95:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jun 24 06:00:46 2026 GMT
Not After : Jun 25 06:00:46 2026 GMT
Subject: CN=fff020d0d1e1c637eb8048a732acaf70bd5568a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:77:40:17:3a:7b:08:b9:4a:c7:8c:91:56:
b2:ca:3e:5b:24:0d:af:9d:ee:cb:9d:6f:82:b4:25:
04:90:ac:c1:53:40:8d:45:33:13:ee:c0:0c:a9:2b:
56:e0:fc:70:41:65:d8:ce:d2:9b:8b:ec:e2:33:c4:
69:bd:b8:7b:e6:dd:65:9f:52:67:4d:20:85:da:06:
a8:6a:4d:bc:80:ab:17:ef:4c:c4:34:17:4f:f4:47:
07:8a:35:82:47:36:77:3c:b6:ee:88:35:b2:cf:f2:
06:70:7a:db:1c:2a:0f:d9:51:f5:51:3b:3d:27:fb:
70:08:86:08:79:48:cc:a7:fb:55:a7:cb:fa:4f:be:
1a:4e:65:70:04:8f:9b:6c:80:5c:f0:e7:43:d1:20:
68:be:b0:36:fd:4a:9f:be:5d:16:c5:71:28:11:4e:
9b:31:61:9e:89:8d:89:9f:c6:23:b2:03:47:38:d5:
d4:d0:64:42:b4:b7:14:7b:c9:dd:f1:c6:33:c5:45:
15:4a:08:c4:60:23:d6:98:a6:1c:3f:5b:77:e9:00:
6e:25:a4:e9:c2:44:63:b2:db:3b:fa:df:0e:3a:0d:
48:ff:93:53:3e:53:f8:56:14:bf:b2:d5:a0:f4:ad:
d4:87:25:19:a8:bc:d2:82:28:4d:92:d4:ed:c4:59:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:20:D0:D1:E1:C6:37:EB:80:48:A7:32:AC:AF:70:BD:55:68:A3
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3f:80:4e:18:ef:56:70:3e:0b:1a:a3:8c:85:e1:a8:25:ee:
da:53:cf:f0:52:f9:07:6a:9d:36:2e:55:cd:35:21:59:97:7b:
c2:7a:6c:7a:78:ec:84:7d:fe:f7:d2:98:d9:c5:af:23:9d:a9:
fc:9f:06:cd:38:c2:25:f3:0a:63:18:9d:73:04:8c:f2:a8:67:
35:4c:42:13:89:c7:5b:69:c8:58:b8:1d:b1:7b:d0:c0:f7:c4:
33:50:f2:bf:29:61:20:b5:c4:6f:2f:b3:39:d6:e4:51:80:e5:
06:ba:a9:e5:42:42:6a:20:8d:59:40:98:3d:92:20:15:de:dd:
c1:18:db:a6:b7:38:2e:5a:28:5d:19:17:10:6e:13:1d:c7:d6:
8a:c7:52:f4:d8:08:d4:27:75:4e:b6:9f:6a:d5:64:1d:df:ae:
38:3b:13:a1:4d:09:3c:c4:14:01:46:9a:7c:00:a6:1e:e7:ac:
86:83:1e:3e:28:56:4d:d7:38:93:77:2a:ea:ff:91:d5:0e:9a:
8b:90:c8:26:8f:9f:4f:7b:e8:36:4f:9d:77:2e:d9:d4:50:b4:
d6:29:22:b9:82:2a:fc:48:77:d8:d2:22:d3:38:1b:c1:18:87:
9f:23:12:34:8d:ef:66:3b:67:67:c8:1c:e8:a9:19:c4:28:f6:
1b:d3:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:03:26 2026 by rpki-client