Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: RKEZ9iq6e2gNSqxzr92l5cFJDb16v7JBrr5MqRX5AdE=
Subject key identifier: 82:27:9F:82:1F:9E:ED:C1:B5:54:41:F7:1C:82:BB:E5:67:8A:90:06
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019D39AEF1AABDB08D7E62F3587484BDA97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 1226
Signing time: Sun 29 Mar 2026 13:00:59 +0000
Manifest this update: Sun 29 Mar 2026 13:00:59 +0000
Manifest next update: Mon 30 Mar 2026 13:00:59 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: W9wAq7X9Fz9xBH3DaeSEuiMIHFppvpOEXiIkDTARzUI=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f1:aa:bd:b0:8d:7e:62:f3:58:74:84:bd:a9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Mar 29 13:00:59 2026 GMT
Not After : Mar 30 13:00:59 2026 GMT
Subject: CN=82279f821f9eedc1b55441f71c82bbe5678a9006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:b2:e7:3b:68:27:13:14:70:70:ef:f8:b2:
63:0f:0a:bf:6c:67:87:3e:25:73:e2:58:fd:05:1f:
20:7e:99:14:25:87:4d:02:68:7b:09:d6:a4:a7:94:
33:1d:d6:99:ef:95:61:cf:db:ac:a2:73:43:a2:ad:
3f:a7:91:87:4e:3b:9d:e4:ae:7d:c2:d5:e1:23:ed:
cc:8a:92:c6:a5:c4:05:60:40:46:bf:75:f0:ac:4f:
f6:bd:1a:77:a8:ac:25:e1:1f:5f:ef:49:f0:5d:db:
27:20:f9:cf:d5:81:e7:5d:df:5e:36:07:21:90:b6:
0a:ed:64:98:10:a0:41:61:39:70:8e:78:4e:56:36:
28:cd:b5:cb:66:9f:6f:d5:d3:09:1a:aa:bf:65:91:
20:f5:ea:69:01:33:4b:36:f1:8a:fd:47:31:5d:ee:
e1:4b:ec:ab:1c:8c:74:d4:1c:c6:76:04:9c:55:ee:
24:ab:35:f7:26:2a:34:c6:6a:b9:65:2b:61:35:01:
e0:7e:4a:a4:df:f1:2d:19:7c:33:bb:12:6d:03:ab:
ee:52:b6:8f:99:81:59:62:49:61:b4:05:d2:4f:75:
f1:34:5e:98:1e:5c:94:13:c5:d3:88:50:45:3f:8a:
1b:42:e3:77:87:f7:5a:bb:69:6e:75:20:14:10:ac:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:27:9F:82:1F:9E:ED:C1:B5:54:41:F7:1C:82:BB:E5:67:8A:90:06
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:60:c0:72:d6:14:65:c3:92:98:0a:2f:4c:ab:bc:21:32:
0d:ea:f9:88:17:13:92:1c:10:b7:11:cb:66:0a:9c:7e:1c:aa:
1c:6b:68:f2:b2:7f:2c:53:33:5a:e4:4f:07:82:76:1b:2b:6f:
1f:32:c3:0e:b2:6e:2e:fd:8d:2f:4d:59:98:79:df:d5:9d:bf:
f5:38:dd:7e:0b:bd:a1:79:3f:9d:f3:a6:41:46:77:18:df:93:
e9:67:fc:7a:d8:3e:a3:d6:52:f2:ee:a8:aa:f2:46:d1:ff:7d:
1c:66:84:f3:e8:e5:e7:cf:5a:f4:67:ae:c9:db:6b:1a:2a:c1:
20:23:45:af:60:38:e5:2c:eb:00:67:7f:e2:8a:b6:e1:be:02:
04:31:df:44:92:76:37:27:44:cf:67:45:17:53:03:c1:d0:2f:
62:53:05:0a:6f:0c:e8:e5:60:9b:d3:fd:94:05:e1:e5:ec:f6:
c2:e4:6a:aa:ac:bf:2d:b9:52:cf:c6:8f:0f:7b:60:55:1b:88:
63:bc:e8:63:c6:20:ef:e2:55:a9:89:3c:05:a4:ec:95:97:6d:
6b:74:77:88:e8:56:4f:62:e8:8a:bd:5a:2b:38:68:e7:05:6f:
4c:b6:81:1d:30:4a:9d:72:0a:22:0b:44:14:56:fb:3b:4d:1c:
88:92:b3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rvGqvbCNfmLzWHSEval6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjYwMzI5MTMwMDU5WhcNMjYwMzMwMTMwMDU5WjAzMTEwLwYDVQQD
Eyg4MjI3OWY4MjFmOWVlZGMxYjU1NDQxZjcxYzgyYmJlNTY3OGE5MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Ky5ztoJxMUcHDv+LJjDwq/bGeH
PiVz4lj9BR8gfpkUJYdNAmh7Cdakp5QzHdaZ75Vhz9usonNDoq0/p5GHTjud5K59
wtXhI+3MipLGpcQFYEBGv3XwrE/2vRp3qKwl4R9f70nwXdsnIPnP1YHnXd9eNgch
kLYK7WSYEKBBYTlwjnhOVjYozbXLZp9v1dMJGqq/ZZEg9eppATNLNvGK/UcxXe7h
S+yrHIx01BzGdgScVe4kqzX3Jio0xmq5ZSthNQHgfkqk3/EtGXwzuxJtA6vuUraP
mYFZYklhtAXST3XxNF6YHlyUE8XTiFBFP4obQuN3h/dau2ludSAUEKyKjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIInn4Ifnu3BtVRB9xyCu+VnipAGMB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdlgwHLW
FGXDkpgKL0yrvCEyDer5iBcTkhwQtxHLZgqcfhyqHGto8rJ/LFMzWuRPB4J2Gytv
HzLDDrJuLv2NL01ZmHnf1Z2/9Tjdfgu9oXk/nfOmQUZ3GN+T6Wf8etg+o9ZS8u6o
qvJG0f99HGaE8+jl589a9GeuydtrGirBICNFr2A45SzrAGd/4oq24b4CBDHfRJJ2
NydEz2dFF1MDwdAvYlMFCm8M6OVgm9P9lAXh5ez2wuRqqqy/LblSz8aPD3tgVRuI
Y7zoY8Yg7+JVqYk8BaTslZdta3R3iOhWT2Loir1aKzho5wVvTLaBHTBKnXIKIgtE
FFb7O00ciJKzHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:17 2026 by rpki-client