Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: X3Wli6e1b9vnok8VCk49cGaIKFr4c0LzrCgeopZpnMc=
Subject key identifier: DA:87:58:C4:94:6D:66:56:0E:9B:74:76:7D:B3:8F:18:D0:5E:46:3C
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019EB80EC5A145EDB88F8B8C913386057E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 96
Signing time: Thu 11 Jun 2026 19:00:36 +0000
Manifest this update: Thu 11 Jun 2026 19:00:36 +0000
Manifest next update: Fri 12 Jun 2026 19:00:36 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: EOjSlQWbP8L8J2TiKuSgyRg1465aZwTtUK8FAZwPcKQ=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:c5:a1:45:ed:b8:8f:8b:8c:91:33:86:05:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Jun 11 19:00:36 2026 GMT
Not After : Jun 12 19:00:36 2026 GMT
Subject: CN=da8758c4946d66560e9b74767db38f18d05e463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:71:d1:31:de:31:a4:67:fd:e0:a0:0c:85:
f1:f3:70:1b:c1:df:81:9a:92:81:47:06:44:96:e0:
96:9c:bf:be:87:79:b4:9a:38:b2:39:ec:6a:cd:6b:
8f:5c:de:f3:eb:96:85:01:dc:ab:be:be:6b:4b:0c:
82:80:d1:29:fd:31:19:b7:54:77:c6:1b:42:bd:ad:
d7:be:7d:15:a7:cc:79:ce:6a:f2:f3:05:1e:16:85:
a3:dd:29:eb:03:fb:a0:67:28:d0:03:16:2f:4f:a5:
48:90:8b:58:f9:32:c8:49:21:f9:bc:fc:a9:51:e6:
83:74:a5:fb:d7:25:72:dc:23:28:76:01:01:cc:85:
b0:8a:22:e2:b6:e4:53:cd:fa:ef:0e:ef:e6:17:ca:
f6:e5:5d:d8:f8:71:32:1e:f4:0b:5b:ec:72:df:b5:
98:57:3c:c0:5f:1c:df:5b:b1:99:78:a4:4f:df:87:
2a:17:d6:9c:a9:3e:12:72:f3:e2:b9:09:5f:d9:aa:
e4:c8:a1:01:5e:6e:15:5c:0e:18:9e:d6:d6:6c:3f:
7b:51:82:8b:18:6e:f3:3a:10:db:aa:1e:d6:4c:9b:
11:9e:29:68:7b:81:10:25:2a:c7:ac:62:33:4d:48:
3c:2f:8a:57:50:d1:97:cd:8e:6e:7c:cc:53:55:f3:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:58:C4:94:6D:66:56:0E:9B:74:76:7D:B3:8F:18:D0:5E:46:3C
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:82:7e:1a:c9:df:3a:58:f6:8d:61:7e:37:18:e4:5d:19:
1a:f0:53:80:73:f2:80:4c:c9:92:f6:54:73:ae:26:48:1c:f5:
76:a8:0c:37:e9:2c:b3:6c:b8:ae:a6:6a:d4:26:f6:d4:ed:33:
03:30:bc:dc:55:d9:ad:5c:0d:18:26:6c:e8:6f:f9:59:15:68:
d5:c0:8d:07:3f:22:b3:90:4e:08:c2:0e:62:c8:e7:b3:8e:10:
32:b0:18:6b:99:a7:5a:83:5e:5b:74:72:44:35:57:7a:da:86:
c7:a4:5f:ae:22:c1:5e:94:76:3a:47:5d:b5:1e:86:ae:0a:d0:
6e:e3:e8:e1:9d:96:d9:48:8f:f8:ee:9e:7a:1a:15:45:6b:54:
29:1d:13:64:b6:38:50:3a:9b:ea:6d:e7:75:d7:56:8e:0c:76:
fb:86:ce:2b:33:f2:0b:fb:af:fb:cb:ed:8b:6d:b5:fc:5b:aa:
57:c0:41:d0:d9:4d:fa:fa:86:dd:86:1c:55:06:a1:a7:2c:36:
bf:28:d1:ff:74:eb:20:1f:c1:99:fc:bf:5d:2c:f2:8b:fe:a9:
eb:4e:fb:c7:bc:ac:12:dc:09:a5:92:47:f3:ed:27:0e:7b:cc:
ce:e0:05:39:b2:08:3e:1d:1e:bd:dc:41:a9:d2:a4:c7:76:5d:
01:c3:8e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:44 2026 by rpki-client