Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: GoFGkDsq+mFEFH4+ULFlQ8A47BjHlThzIWq1sjfn/Fo=
Subject key identifier: 6B:C0:DC:8C:E5:76:8D:10:AC:02:48:29:37:B1:6D:77:99:61:84:5F
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019F189EF4385087ED74DB3B35A93CBA8A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 131E
Signing time: Tue 30 Jun 2026 13:01:38 +0000
Manifest this update: Tue 30 Jun 2026 13:01:38 +0000
Manifest next update: Wed 01 Jul 2026 13:01:38 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: 143L94aj+jVwaxoCGRrmFSV4vi2rbyf1Xaq0jF6+gRU=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:f4:38:50:87:ed:74:db:3b:35:a9:3c:ba:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jun 30 13:01:38 2026 GMT
Not After : Jul 1 13:01:38 2026 GMT
Subject: CN=6bc0dc8ce5768d10ac02482937b16d779961845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:59:71:0e:5d:4f:69:d9:25:63:2d:95:f6:
74:86:cf:7c:68:4d:a8:57:e3:63:1f:5e:96:ad:1d:
42:d0:4a:07:79:18:7b:27:9a:2b:1e:81:4c:ff:01:
eb:cb:2f:c8:6e:d3:79:bc:59:21:d1:5b:37:2f:2b:
75:7e:2d:b4:79:95:e7:9d:73:e0:1f:93:da:5d:71:
93:13:7e:33:7a:dc:31:54:a0:d3:df:19:71:d5:a0:
9a:b3:9f:ab:bc:01:5b:60:e2:7d:f9:a0:ad:fe:59:
94:a6:de:4e:53:ad:c3:1e:48:b7:78:74:87:0f:cc:
0c:0c:88:58:73:e8:a3:6c:8a:de:6e:7a:ad:94:43:
d0:24:54:1c:dd:9a:8b:44:34:0b:e6:a9:4a:ad:fc:
ab:61:05:a4:73:f8:72:db:92:4b:4e:ac:3a:0a:8d:
53:c0:fc:46:fc:06:5f:99:f9:ea:e8:45:18:91:38:
06:a7:f5:08:8b:46:59:32:00:d5:27:40:d9:81:2f:
a1:30:74:82:08:ab:d4:4c:8b:56:af:b4:7a:b4:80:
0a:bc:cb:7b:71:75:d8:19:50:f2:bf:06:8e:3d:16:
12:54:3d:13:fc:91:67:4d:a9:36:94:97:b2:11:50:
38:f7:0c:ed:bc:51:7d:20:85:56:4f:e3:10:11:4b:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:DC:8C:E5:76:8D:10:AC:02:48:29:37:B1:6D:77:99:61:84:5F
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:7d:2a:4f:9c:6c:45:00:5e:9a:b0:fd:97:e7:ec:10:92:
1f:15:4b:81:00:b6:23:31:b7:9b:88:1d:ca:3b:d3:34:dc:51:
0c:7d:cb:68:1e:63:94:51:01:d4:6e:6b:38:8f:f5:39:60:c0:
9d:6e:1a:df:18:7d:f9:63:c9:b5:b7:31:7b:9e:e2:bb:c2:2a:
0c:d5:d8:26:be:53:27:eb:83:25:e5:4a:6c:d1:b7:97:14:cb:
c3:b8:ee:fb:96:01:85:d1:f9:33:6c:a9:13:b1:8b:a8:41:b7:
e7:7c:dc:4c:1a:fa:6d:a5:98:4b:a0:fa:9c:06:26:12:53:5d:
eb:06:03:d7:b4:9d:0b:8e:b8:92:9a:2b:66:dc:d4:3e:a6:f9:
67:c5:a4:9a:b4:fe:59:fd:66:7b:f0:23:c0:1a:10:ac:e7:7b:
41:5d:6b:2a:c4:2f:7b:5f:50:5d:51:34:90:d1:fb:99:be:7f:
e6:60:35:a3:c8:17:61:40:d4:ad:cd:ee:29:08:03:f7:a1:a6:
ef:f2:2c:d4:16:84:8e:d3:29:7f:21:61:ef:75:75:3e:3f:5e:
00:7f:2a:2c:0f:67:87:3e:21:d7:30:7f:5c:cc:cb:1c:ea:cf:
d1:9f:0c:ea:37:c1:e2:fd:84:0a:5a:e0:e7:76:81:55:6c:32:
00:fc:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:20 2026 by rpki-client