Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: VKYcfH3Y386Q8WhdCb9o/PqNah5yrodMfkPJCGN38oM=
Subject key identifier: 6A:0A:57:3E:5E:69:FB:62:6B:D1:C4:FD:7D:16:6F:F3:D8:B5:F2:72
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 01A10F27F2DF89E1FCC655605B3A166C1507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 03:00:38 +0000
Manifest this update: Tue 06 Oct 2026 03:00:38 +0000
Manifest next update: Wed 07 Oct 2026 03:00:38 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: AfboR/DYU54UTa0vGL86jDjeiwI/vm9gRVJw3oHaWro=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:f2:df:89:e1:fc:c6:55:60:5b:3a:16:6c:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Oct 6 03:00:38 2026 GMT
Not After : Oct 7 03:00:38 2026 GMT
Subject: CN=6a0a573e5e69fb626bd1c4fd7d166ff3d8b5f272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:09:7f:9c:1b:81:e0:c9:28:62:74:36:14:
ec:25:74:16:82:4a:43:30:1d:64:19:dc:c5:12:f1:
81:c1:05:a7:ab:ce:22:30:df:c4:28:b9:d2:76:4b:
91:cb:cc:82:e4:c1:37:0d:cb:b6:9f:d1:98:28:e4:
c7:18:77:42:97:4e:4f:0e:98:df:b9:cb:13:1d:15:
bc:d1:57:30:c7:8c:58:00:0a:8d:94:67:cc:59:f1:
92:06:32:e6:07:05:4f:3f:f2:8d:7e:d3:bb:b7:4d:
9d:a1:ad:ee:10:5b:c2:52:98:c8:fc:19:0f:d5:88:
39:ab:99:72:40:19:b0:05:77:a9:b1:2d:2d:19:d5:
af:66:c7:a4:48:b0:89:92:4f:c1:27:39:a1:a0:a6:
88:c1:62:2e:80:84:20:61:dd:df:1d:05:d9:09:2e:
52:36:bd:b7:8b:ee:1c:27:50:45:1e:fa:84:0b:c8:
63:53:e9:32:5d:8f:47:a4:1e:3a:2c:54:81:be:63:
89:4e:bc:76:cb:d9:74:f8:16:d4:1c:b6:9e:ad:3f:
cc:ef:8b:e9:e3:82:35:3e:11:a4:bb:13:dc:08:f5:
ea:1b:a3:db:5b:8f:71:83:c8:8c:2a:a9:1f:b7:ac:
ea:9a:d1:34:63:af:9d:b4:fe:1b:dd:5b:65:b4:1d:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:57:3E:5E:69:FB:62:6B:D1:C4:FD:7D:16:6F:F3:D8:B5:F2:72
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f9:d6:d5:9d:cc:23:88:62:66:de:e1:05:ad:d4:4f:e5:6f:
f7:41:f2:05:eb:2a:36:16:63:e5:3a:d5:64:81:86:23:f9:2d:
11:c4:ed:a9:ca:db:d4:fc:48:97:a2:73:e9:13:2e:bb:7b:33:
aa:35:3a:cb:6a:4e:51:03:7c:90:89:14:64:7a:a2:47:7a:d1:
44:4a:09:49:6e:e8:d3:69:70:dc:43:e6:97:51:8e:20:da:95:
72:7c:c5:1e:6b:43:8c:5a:16:ba:a8:8d:2d:1e:1b:c5:f8:1c:
13:0b:c0:e0:22:9c:00:1c:19:6a:5a:36:03:93:0d:7d:34:32:
56:24:16:e1:e7:1e:37:16:3d:f6:08:3b:1e:12:ef:c1:e8:08:
d9:6c:e0:7d:e0:ce:66:b5:cd:0d:de:9f:f1:e7:b2:03:54:ef:
f1:71:29:f4:88:eb:21:53:f2:c1:f5:66:1e:4d:b5:8f:6e:3d:
55:a5:ad:29:f0:7d:ba:c2:7f:a7:1b:aa:e8:4f:51:6f:d2:05:
29:ad:41:f2:ef:fc:31:35:ca:b3:cb:0b:d2:ae:0c:08:ed:2f:
b5:5f:67:e6:0c:be:73:67:74:2f:91:ac:02:17:70:b7:9d:d5:
30:a3:7f:fd:79:83:9b:cd:0d:78:43:5d:48:9e:a1:b3:a7:a1:
5c:d0:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:27:58 2026 by rpki-client