Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: AwvQAnZGNz5rgN6OphNVOLAqq8+iI9tGZl2ZaH4HWR4=
Subject key identifier: 6A:39:B6:B3:69:9B:11:08:5A:02:21:7D:D2:CB:E1:D4:55:B5:FD:57
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019D07E71566FD899DD3E29C59FB56C7846B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1877
Signing time: Thu 19 Mar 2026 21:01:17 +0000
Manifest this update: Thu 19 Mar 2026 21:01:17 +0000
Manifest next update: Fri 20 Mar 2026 21:01:17 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: dfhgXuIyj5OqXaTb23UdbU5R9aewCUZmI6CDJS+hIjk=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:e7:15:66:fd:89:9d:d3:e2:9c:59:fb:56:c7:84:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Mar 19 21:01:17 2026 GMT
Not After : Mar 20 21:01:17 2026 GMT
Subject: CN=6a39b6b3699b11085a02217dd2cbe1d455b5fd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:04:f8:3d:22:4c:78:55:32:7b:d3:2b:1b:
81:2b:a8:6f:03:1f:13:05:b0:0f:93:95:4d:35:86:
4f:85:a4:5f:ce:fc:5e:64:24:35:39:8c:73:d2:1b:
cd:2d:e7:12:a9:63:8e:9e:2c:82:56:94:91:d1:b5:
11:6e:e9:c1:13:5d:76:6e:e0:e2:33:c3:85:23:3d:
5d:05:47:f7:20:24:a7:b4:34:d0:9a:32:f8:4b:0d:
40:1e:e7:96:5a:78:c6:9d:68:fe:29:fc:08:36:de:
a1:46:ee:c7:e4:c1:e0:ce:f1:f6:04:4f:8f:7b:3c:
31:bd:eb:03:a7:5b:74:45:55:fe:0a:f9:65:7d:bb:
16:ca:78:57:1a:89:a7:4e:0e:4c:b4:84:b8:b2:9d:
30:fe:ec:26:d3:86:67:43:ab:a3:f7:7e:81:88:f2:
85:e4:db:53:3f:62:d1:ca:33:df:23:92:fe:f7:e0:
30:6b:e7:f5:04:af:4b:f1:dc:1e:e7:65:07:93:71:
dd:64:aa:2e:64:34:e2:dc:99:0c:39:c7:25:d9:57:
09:35:c9:59:8e:46:bc:80:5b:de:1f:e8:86:4e:9f:
53:10:14:9d:7b:74:da:72:50:11:c4:b5:2a:a5:a7:
10:63:a0:39:fc:48:fe:36:cd:6d:fc:b7:e3:53:2b:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:B6:B3:69:9B:11:08:5A:02:21:7D:D2:CB:E1:D4:55:B5:FD:57
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:f2:b4:0a:5e:29:21:a1:07:b0:85:c5:36:13:ed:e7:cc:
ca:06:4b:0b:09:47:1d:43:da:b2:92:66:a9:26:bb:91:4e:4b:
ac:01:65:65:53:fd:04:14:d4:91:9c:7d:c6:d3:ed:a8:9b:23:
53:1f:b9:30:e3:54:a9:c9:c7:51:81:cb:28:6b:84:d7:ca:18:
ee:a9:e2:21:b5:67:59:01:19:a1:64:27:41:3f:59:c9:e2:fe:
ef:ba:25:a4:f4:55:1d:10:2f:05:83:bb:64:8b:d5:3f:04:98:
ea:ee:77:bd:df:f0:50:49:21:bd:3e:88:ee:07:79:4c:a2:05:
20:ad:2a:b1:d4:3d:81:53:a0:8e:cd:3b:30:91:0c:63:5c:b4:
e9:02:be:b8:e4:64:96:ab:52:ea:e6:aa:0c:84:d3:19:2b:c1:
64:e8:b5:83:30:60:d6:58:20:0b:10:6f:51:32:5e:57:62:42:
f2:85:63:5d:99:dc:0c:60:7e:3d:70:ba:56:e5:30:86:a6:08:
ce:ea:c1:cf:0e:dd:d6:68:02:b3:8e:e4:ca:37:bd:46:7a:2f:
f8:87:05:9c:80:cf:04:a7:43:a5:3c:73:06:1a:1c:24:37:68:
e2:68:e3:41:e2:48:6a:41:52:2a:a8:52:a8:92:2a:12:fc:f1:
ec:e5:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:34:01 2026 by rpki-client