Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: P0fENOP9OjLOFvwYjIfQlNsvuvW17IFY4SrgXJRJa0Y=
Subject key identifier: F4:5D:7A:30:9E:87:28:FA:88:78:9C:3E:49:14:B9:4B:C3:67:0B:35
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019DFF181D87D8F09614962F2C53DA488F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 18F7
Signing time: Wed 06 May 2026 21:01:03 +0000
Manifest this update: Wed 06 May 2026 21:01:03 +0000
Manifest next update: Thu 07 May 2026 21:01:03 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: bINHN3a71BTsAgf6Ra9PMLqQjsIIVgtHDHgPVAEFmao=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:18:1d:87:d8:f0:96:14:96:2f:2c:53:da:48:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: May 6 21:01:03 2026 GMT
Not After : May 7 21:01:03 2026 GMT
Subject: CN=f45d7a309e8728fa88789c3e4914b94bc3670b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:14:01:62:85:78:6b:f3:04:fa:28:8e:b3:
33:df:f6:ef:af:a8:69:66:17:eb:84:37:cb:ad:d1:
75:95:07:91:40:03:84:a6:41:46:4b:c2:5f:b9:e6:
83:17:cf:01:a2:eb:03:dc:f5:39:4a:ab:a9:80:18:
00:2d:4a:09:bf:5d:a6:cb:0b:50:15:bb:52:2e:d9:
88:42:d4:d8:6f:45:64:61:e9:01:fd:62:79:aa:77:
7d:fa:bb:89:08:49:19:5f:bd:ec:b6:fc:f1:73:55:
c1:b5:41:b9:2c:a4:39:0a:c9:c5:31:fb:0c:e1:db:
b2:e2:ae:2f:f8:d1:68:f8:1b:61:10:97:1d:3c:1c:
1c:18:43:ff:6a:9b:05:13:89:4a:c2:e3:2c:8d:d4:
67:de:a0:01:0b:aa:7b:66:61:7a:23:cc:88:b2:fd:
a5:bb:a9:24:4d:2e:81:0f:2e:07:0a:82:0e:37:9d:
95:16:03:24:3e:8f:d0:2b:ca:50:f9:43:0e:08:cf:
af:7b:77:d1:03:9f:de:b1:ce:61:e5:c7:1f:58:ba:
d0:33:0f:30:dd:f1:c4:c7:43:40:93:3e:0e:cd:f0:
50:a8:f0:f5:82:a7:4d:d8:7b:27:42:e3:a5:62:9c:
ab:1c:ad:da:2d:a3:16:fe:c7:76:42:6f:71:8a:c8:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:7A:30:9E:87:28:FA:88:78:9C:3E:49:14:B9:4B:C3:67:0B:35
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d3:58:c3:7d:6f:ca:21:f3:40:7b:c5:41:16:a1:0b:95:ce:
ef:da:01:3e:30:3e:26:69:05:6f:39:bb:c2:da:1b:f8:41:2f:
af:00:01:32:6c:cd:ac:04:68:78:ff:f0:98:60:ae:9d:a9:92:
68:d2:12:ab:3e:33:19:dc:8a:77:1e:97:ff:ec:03:45:fa:d9:
b2:24:b7:b4:58:c1:49:34:1d:17:90:5e:f1:98:3e:b8:c5:ca:
5e:01:bd:db:ae:dd:a1:6b:a8:8e:25:bf:69:6d:ab:35:f0:da:
70:fa:5d:eb:7a:72:87:a3:8f:cd:72:e1:b1:5c:db:90:aa:ca:
24:b9:e2:c6:c6:29:60:66:b4:f8:ab:2f:eb:9b:ea:0a:3c:a0:
3b:6b:c9:bf:a3:31:61:8f:80:da:c1:bc:fc:fc:9d:9c:c4:55:
cd:4d:64:5c:59:b2:25:a5:31:8e:b2:52:3f:f2:80:91:e8:1f:
e3:b1:61:86:96:c5:4b:c9:d0:68:f2:0d:d8:6a:97:9d:96:20:
95:55:32:bf:c3:74:5a:f5:23:fe:46:6f:75:29:42:a1:84:e5:
c2:84:67:fd:a0:84:66:e9:bf:54:63:2c:80:ad:f0:76:28:fb:
5f:f2:3a:18:03:f1:b5:21:26:be:3b:8f:4a:8f:2e:86:53:f6:
a3:86:8f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/GB2H2PCWFJYvLFPaSI9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj
OTNiODAwHhcNMjYwNTA2MjEwMTAzWhcNMjYwNTA3MjEwMTAzWjAzMTEwLwYDVQQD
EyhmNDVkN2EzMDllODcyOGZhODg3ODljM2U0OTE0Yjk0YmMzNjcwYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNgUAWKFeGvzBPoojrMz3/bvr6hp
ZhfrhDfLrdF1lQeRQAOEpkFGS8JfueaDF88BousD3PU5SqupgBgALUoJv12mywtQ
FbtSLtmIQtTYb0VkYekB/WJ5qnd9+ruJCEkZX73stvzxc1XBtUG5LKQ5CsnFMfsM
4duy4q4v+NFo+BthEJcdPBwcGEP/apsFE4lKwuMsjdRn3qABC6p7ZmF6I8yIsv2l
u6kkTS6BDy4HCoION52VFgMkPo/QK8pQ+UMOCM+ve3fRA5/esc5h5ccfWLrQMw8w
3fHEx0NAkz4OzfBQqPD1gqdN2HsnQuOlYpyrHK3aLaMW/sd2Qm9xisjJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRdejCehyj6iHicPkkUuUvDZws1MB8GA1UdIwQY
MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt
NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll
LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNNYw31v
yiHzQHvFQRahC5XO79oBPjA+JmkFbzm7wtob+EEvrwABMmzNrARoeP/wmGCunamS
aNISqz4zGdyKdx6X/+wDRfrZsiS3tFjBSTQdF5Be8Zg+uMXKXgG9267doWuojiW/
aW2rNfDacPpd63pyh6OPzXLhsVzbkKrKJLnixsYpYGa0+Ksv65vqCjygO2vJv6Mx
YY+A2sG8/PydnMRVzU1kXFmyJaUxjrJSP/KAkegf47FhhpbFS8nQaPIN2GqXnZYg
lVUyv8N0WvUj/kZvdSlCoYTlwoRn/aCEZum/VGMsgK3wdij7X/I6GAPxtSEmvjuP
So8uhlP2o4aP0g==
-----END CERTIFICATE-----
Generated at Thu May 7 06:30:31 2026 by rpki-client