Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: ckVM6NIuT+h+Q4m8pbMLCiL2cX91GDKG66c2uXJuT5s=
Subject key identifier: 94:95:9E:48:D2:2D:BC:21:7B:EB:C3:E5:62:C4:0D:05:1E:DF:00:01
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01A14C86C22C257AB64ED4C138E459E3EAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 1442
Signing time: Sun 18 Oct 2026 01:01:02 +0000
Manifest this update: Sun 18 Oct 2026 01:01:02 +0000
Manifest next update: Mon 19 Oct 2026 01:01:02 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: M+0a+uYyipLwOzlBe0hR4trLcNdQUuQxiFvfS2DFi1A=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:c2:2c:25:7a:b6:4e:d4:c1:38:e4:59:e3:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Oct 18 01:01:02 2026 GMT
Not After : Oct 19 01:01:02 2026 GMT
Subject: CN=94959e48d22dbc217bebc3e562c40d051edf0001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:93:08:41:9a:e2:a8:9e:53:2d:26:b2:2f:
78:08:0e:2f:f7:c6:d7:a8:79:54:92:b9:bb:00:6f:
9b:ee:f2:b8:39:93:c6:25:00:1d:36:a2:86:03:fe:
d5:b6:bc:f4:44:52:23:87:ea:aa:6e:7d:3a:be:1a:
26:31:c6:02:f1:05:40:03:27:e0:52:ee:91:17:5a:
7e:ac:8f:f4:7a:02:9e:8e:d5:5a:ff:68:fe:81:fb:
62:14:86:ee:69:be:53:fc:df:c8:6d:7f:30:9b:c7:
44:2f:07:ff:58:2c:36:4c:1c:e7:cc:1d:1b:92:30:
cb:78:8f:b3:8d:23:2b:62:87:f7:e4:af:e0:cb:31:
e2:ba:6b:5a:74:fe:d0:a4:f3:b8:de:19:95:f3:71:
da:7e:70:5c:59:19:d2:19:63:0e:d9:70:bf:b0:0c:
b4:75:28:8e:be:20:43:b3:d7:f5:cc:d4:81:ca:c8:
22:3b:e3:74:ec:bf:29:b7:f2:3f:af:b5:64:18:cc:
1b:99:da:ae:d3:fc:40:a8:64:d4:45:21:0b:de:df:
0c:4b:58:65:0f:69:b7:ed:6e:55:ed:65:19:09:7f:
e7:cd:c5:b6:55:51:89:d8:66:e9:4c:fb:84:5e:e1:
b6:bb:6a:23:47:01:95:b5:ff:d5:89:9d:26:ab:fe:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:95:9E:48:D2:2D:BC:21:7B:EB:C3:E5:62:C4:0D:05:1E:DF:00:01
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3a:d1:c5:c3:81:77:07:88:f0:37:75:96:fe:5c:d8:7c:a5:
8f:ca:dc:41:e7:ba:da:13:0e:65:86:7d:a1:8a:d0:82:89:66:
14:59:3c:f5:43:4f:61:ec:fa:95:e6:91:69:75:54:cd:2b:e1:
43:c6:e8:f8:a6:ac:fa:d3:47:3a:38:4e:e4:4a:a7:64:d0:e0:
23:cd:93:22:f9:4e:42:92:44:bf:79:cc:c8:47:82:b4:9a:42:
22:d7:57:93:e7:6a:79:e8:d0:f3:23:b4:f4:dd:58:79:95:57:
2e:98:58:f7:e6:ae:09:35:f7:2d:ea:b2:4f:93:53:10:8b:1f:
34:f6:62:17:a6:0c:d8:6a:5e:9d:b4:b5:41:6c:48:ec:ac:33:
4d:85:46:2e:01:be:10:cf:9e:a8:aa:48:85:2d:8a:9c:b2:a4:
d3:23:03:fc:42:e7:35:af:44:ae:5f:75:dc:b3:1c:5e:cb:5d:
35:47:e3:c8:e9:3f:d9:15:55:12:28:96:49:cf:0b:1f:af:ff:
f4:f2:15:ed:68:aa:e5:b2:52:71:3f:96:b9:54:58:bf:23:71:
d5:91:34:22:1a:b0:49:b2:f0:ba:20:19:92:ca:27:bd:33:8f:
71:74:66:c0:60:87:96:6e:08:c3:c5:84:18:55:f0:29:29:46:
6c:cd:7b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMhsIsJXq2TtTBOORZ4+rlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjYxMDE4MDEwMTAyWhcNMjYxMDE5MDEwMTAyWjAzMTEwLwYDVQQD
Eyg5NDk1OWU0OGQyMmRiYzIxN2JlYmMzZTU2MmM0MGQwNTFlZGYwMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvKTCEGa4qieUy0msi94CA4v98bX
qHlUkrm7AG+b7vK4OZPGJQAdNqKGA/7Vtrz0RFIjh+qqbn06vhomMcYC8QVAAyfg
Uu6RF1p+rI/0egKejtVa/2j+gftiFIbuab5T/N/IbX8wm8dELwf/WCw2TBznzB0b
kjDLeI+zjSMrYof35K/gyzHiumtadP7QpPO43hmV83HafnBcWRnSGWMO2XC/sAy0
dSiOviBDs9f1zNSBysgiO+N07L8pt/I/r7VkGMwbmdqu0/xAqGTURSEL3t8MS1hl
D2m37W5V7WUZCX/nzcW2VVGJ2GbpTPuEXuG2u2ojRwGVtf/ViZ0mq/7lTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSVnkjSLbwhe+vD5WLEDQUe3wABMB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDrRxcOB
dweI8Dd1lv5c2Hylj8rcQee62hMOZYZ9oYrQgolmFFk89UNPYez6leaRaXVUzSvh
Q8bo+Kas+tNHOjhO5EqnZNDgI82TIvlOQpJEv3nMyEeCtJpCItdXk+dqeejQ8yO0
9N1YeZVXLphY9+auCTX3LeqyT5NTEIsfNPZiF6YM2GpenbS1QWxI7KwzTYVGLgG+
EM+eqKpIhS2KnLKk0yMD/ELnNa9Erl913LMcXstdNUfjyOk/2RVVEiiWSc8LH6//
9PIV7Wiq5bJScT+WuVRYvyNx1ZE0IhqwSbLwuiAZksonvTOPcXRmwGCHlm4Iw8WE
GFXwKSlGbM17kg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:39 2026 by rpki-client