Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: rh/ygDCGfZOyBlhuWC+VC30bpdG+As7smw3qquOIpuc=
Subject key identifier: 5F:49:DF:57:21:E8:EA:FA:A3:68:03:FC:75:2B:7C:9C:3C:01:59:FB
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01A0005CFF1AB8D783CB4ABE5223EE2416A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 1396
Signing time: Fri 14 Aug 2026 13:01:29 +0000
Manifest this update: Fri 14 Aug 2026 13:01:29 +0000
Manifest next update: Sat 15 Aug 2026 13:01:29 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: 3l5UX85m3W9zThjUxNIIhJwlQ9fUnAr+bkDP5NnfD5U=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:ff:1a:b8:d7:83:cb:4a:be:52:23:ee:24:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Aug 14 13:01:29 2026 GMT
Not After : Aug 15 13:01:29 2026 GMT
Subject: CN=5f49df5721e8eafaa36803fc752b7c9c3c0159fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:30:af:36:be:19:05:de:30:ac:a0:6e:4a:
25:07:e7:07:d6:ab:bc:85:68:fb:00:32:d2:98:6e:
7a:af:9c:72:9e:1c:45:94:a3:4c:14:d6:7a:68:16:
54:a0:bc:97:2f:66:69:96:18:ad:ed:0b:fa:8b:3f:
8e:63:7b:a0:e7:60:7a:86:fc:d5:2a:06:1d:f6:07:
30:c0:22:dc:ba:24:21:a0:cf:d7:46:1a:2f:99:49:
60:c2:a0:8d:cb:de:8a:69:18:ba:ce:26:71:f8:6f:
fa:98:83:be:31:02:cf:7d:f9:15:3d:d1:df:c1:b9:
66:90:d4:14:95:60:ea:f1:f0:d2:aa:18:bf:e0:0b:
69:e2:3b:a8:3b:d0:8b:b4:79:0a:cb:0b:e2:ed:9f:
a2:04:66:b5:33:35:a1:be:c4:9f:6a:ab:31:d8:a8:
ee:93:11:71:5f:02:0c:41:a0:d6:ed:cb:00:1b:55:
f3:dc:9d:69:e5:7a:5b:84:c6:c1:8b:41:72:d0:32:
50:cc:2c:fd:67:b0:a0:c1:b6:dc:77:d7:43:95:e8:
7a:96:a4:ab:95:5d:cc:66:0f:35:78:0b:5f:0a:e3:
2f:92:c9:ee:d6:33:ed:12:ab:81:39:9c:2f:db:68:
d6:7a:e7:4f:71:ff:c0:c6:55:1a:40:1f:99:d9:e6:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:49:DF:57:21:E8:EA:FA:A3:68:03:FC:75:2B:7C:9C:3C:01:59:FB
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:49:8a:8c:39:98:dc:05:bf:ae:36:23:df:09:ce:52:4a:56:
fa:a4:7d:25:a0:cc:2a:30:49:b0:8a:76:de:71:64:59:65:bf:
41:77:c9:89:7c:54:f5:fb:a0:c8:1d:6a:02:39:24:ea:25:f6:
b9:a5:f2:e0:23:3d:41:8d:98:c6:8f:5c:d8:d9:f5:86:33:b3:
b8:85:12:c8:c9:d6:90:49:20:2e:a7:7d:7c:72:04:7b:16:6a:
38:6c:43:21:a5:31:c6:92:c1:c0:95:2f:90:52:02:ca:34:c7:
11:71:31:90:ef:4b:59:3d:c2:ad:bc:db:54:0a:ed:1b:d9:a3:
2c:c2:75:bd:1e:64:53:3f:79:2a:fa:32:a3:66:ea:cb:79:0c:
33:a7:bb:01:66:0e:6b:42:13:68:5d:22:87:ef:c7:11:04:2c:
61:a9:c4:c6:19:81:9b:70:12:a8:ba:ac:40:55:b1:83:7c:fc:
32:61:a0:bf:ea:45:28:b4:5b:f8:cd:dd:c7:ab:73:2b:43:63:
d6:bf:0b:7f:d9:c8:08:70:c4:c2:84:b0:91:3d:25:ad:2b:40:
50:91:d0:dc:53:0b:11:74:1a:fe:d3:2d:a9:23:46:73:46:8a:
23:81:da:51:98:a5:88:f8:c5:3c:36:2c:fe:6f:ec:6b:04:af:
a0:ff:29:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXP8auNeDy0q+UiPuJBapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjYwODE0MTMwMTI5WhcNMjYwODE1MTMwMTI5WjAzMTEwLwYDVQQD
Eyg1ZjQ5ZGY1NzIxZThlYWZhYTM2ODAzZmM3NTJiN2M5YzNjMDE1OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53cwrza+GQXeMKygbkolB+cH1qu8
hWj7ADLSmG56r5xynhxFlKNMFNZ6aBZUoLyXL2Zplhit7Qv6iz+OY3ug52B6hvzV
KgYd9gcwwCLcuiQhoM/XRhovmUlgwqCNy96KaRi6ziZx+G/6mIO+MQLPffkVPdHf
wblmkNQUlWDq8fDSqhi/4Atp4juoO9CLtHkKywvi7Z+iBGa1MzWhvsSfaqsx2Kju
kxFxXwIMQaDW7csAG1Xz3J1p5XpbhMbBi0Fy0DJQzCz9Z7Cgwbbcd9dDleh6lqSr
lV3MZg81eAtfCuMvksnu1jPtEquBOZwv22jWeudPcf/AxlUaQB+Z2eYfOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9J31ch6Or6o2gD/HUrfJw8AVn7MB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUmKjDmY
3AW/rjYj3wnOUkpW+qR9JaDMKjBJsIp23nFkWWW/QXfJiXxU9fugyB1qAjkk6iX2
uaXy4CM9QY2Yxo9c2Nn1hjOzuIUSyMnWkEkgLqd9fHIEexZqOGxDIaUxxpLBwJUv
kFICyjTHEXExkO9LWT3CrbzbVArtG9mjLMJ1vR5kUz95Kvoyo2bqy3kMM6e7AWYO
a0ITaF0ih+/HEQQsYanExhmBm3ASqLqsQFWxg3z8MmGgv+pFKLRb+M3dx6tzK0Nj
1r8Lf9nICHDEwoSwkT0lrStAUJHQ3FMLEXQa/tMtqSNGc0aKI4HaUZiliPjFPDYs
/m/sawSvoP8pww==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:50 2026 by rpki-client