Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: 70ullYYCtEnF0FyJdLYsnIdBvy2UMmLHSCXOc1giQag=
Subject key identifier: 61:57:16:79:A4:8F:57:F1:FD:1B:64:83:7E:43:05:94:18:74:74:81
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 01A08B68AB83BD1E9C3328D31F69DFE36846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 0188
Signing time: Thu 10 Sep 2026 13:01:27 +0000
Manifest this update: Thu 10 Sep 2026 13:01:27 +0000
Manifest next update: Fri 11 Sep 2026 13:01:27 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: k7FbSMaMK07Tjw2dbybPLHsim4L/AVXd6JIE8kZMC/0=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:ab:83:bd:1e:9c:33:28:d3:1f:69:df:e3:68:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Sep 10 13:01:27 2026 GMT
Not After : Sep 11 13:01:27 2026 GMT
Subject: CN=61571679a48f57f1fd1b64837e43059418747481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:32:6f:b3:01:51:54:db:4a:f4:1b:5b:10:
fc:c9:34:68:30:4f:dc:61:50:29:9f:65:9f:14:94:
5b:de:39:94:88:31:2d:c7:50:7c:a8:36:79:e5:8c:
cd:b8:f9:d8:d1:aa:11:6a:29:97:f0:0a:d2:18:a0:
41:96:e4:42:96:73:7e:2a:5d:ad:e6:6f:e7:a6:83:
6a:29:77:1c:27:46:47:66:ff:ca:24:62:d4:b6:3b:
95:07:c5:d9:31:8d:5f:72:df:96:6e:7a:e5:b3:3c:
22:b8:49:7c:7e:e1:7b:c2:ba:7e:cb:1a:47:fd:b6:
75:63:9b:91:fe:8b:e0:4e:40:9a:9d:b0:f3:23:e5:
f5:56:60:28:4b:f5:04:25:b6:2e:2d:85:15:5d:9e:
5b:9c:c9:a7:00:c4:a9:3f:dc:64:44:1a:81:4e:fe:
9b:5a:50:4e:aa:88:75:8f:5f:e5:0c:fd:5c:fb:00:
60:d8:1f:5d:ec:2e:79:c0:66:d6:48:69:9c:7b:5c:
1f:39:46:66:75:bb:99:bb:1a:d9:8d:f6:42:5a:b8:
ec:a3:49:e1:71:58:21:3a:a3:41:f2:ab:b9:35:f4:
0e:4d:de:34:5b:4a:f2:15:6a:f5:f0:c3:e6:82:a1:
48:53:5a:e4:e9:44:38:32:8a:04:ac:a7:f5:22:9c:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:57:16:79:A4:8F:57:F1:FD:1B:64:83:7E:43:05:94:18:74:74:81
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5f:24:ba:bf:8d:04:93:6a:00:e4:b2:0e:11:4f:86:fd:e7:
ad:7b:4a:64:f9:e3:58:a2:36:9b:12:97:40:9d:4f:f1:21:a7:
db:b9:7e:ac:84:69:9b:c7:8c:6a:b5:0d:4d:ac:8a:b8:cb:c4:
7c:84:d7:05:aa:1c:a1:a1:ee:ad:29:2b:6d:78:75:c1:6b:61:
88:5d:1c:c5:6d:66:fa:c8:ca:d4:95:96:20:6c:16:3a:ae:ca:
8e:89:fd:5f:95:8c:54:f8:b6:ab:3f:0b:f3:df:18:cc:e5:0b:
6a:b3:3b:96:fa:ad:52:d7:a3:52:9e:32:65:19:21:78:04:74:
d5:fb:a2:ed:e6:62:5f:a4:34:c8:ea:ff:3c:ac:05:cf:d5:9d:
b0:1c:42:4a:64:b9:22:f5:93:5f:75:17:ef:ff:66:36:9d:23:
90:f3:75:05:f3:6f:39:8c:47:12:d7:f0:c1:d8:67:5a:48:44:
f4:c2:42:d2:27:b5:d2:86:e7:8d:61:f0:cd:cb:e4:05:d4:d3:
62:7d:6b:70:c0:bb:9f:7c:f1:cd:88:b1:7b:66:6f:99:dc:40:
4b:c5:46:ec:14:67:3d:b3:70:09:62:92:7d:ca:e7:43:18:83:
b8:05:d2:09:ea:05:ed:a3:43:ef:4b:ad:f3:78:fe:dc:2e:b4:
8a:84:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:59 2026 by rpki-client