Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: 8zEGEHQGl868yzTdKyLpj81dSa3uy30NnehSxgMAiI8=
Subject key identifier: A9:70:B1:8B:82:1F:51:5F:3F:38:5F:A6:27:1E:F1:47:C7:7F:E5:FF
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019F9FCCB9BED5F5BE7A5E7D05A36B5A239E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 010E
Signing time: Sun 26 Jul 2026 19:00:21 +0000
Manifest this update: Sun 26 Jul 2026 19:00:21 +0000
Manifest next update: Mon 27 Jul 2026 19:00:21 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: oGDfngeCb8j/AH7/dL13lHAa9bUFBhjP/3vj8f+uRN0=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:b9:be:d5:f5:be:7a:5e:7d:05:a3:6b:5a:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Jul 26 19:00:21 2026 GMT
Not After : Jul 27 19:00:21 2026 GMT
Subject: CN=a970b18b821f515f3f385fa6271ef147c77fe5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:15:1b:87:37:0a:c3:22:e3:4f:73:b1:e6:
04:2e:c6:46:a5:09:45:30:dd:43:ae:e2:71:94:a7:
19:97:f3:fe:32:36:9c:70:cc:56:2f:e0:9e:49:66:
d9:86:97:de:47:b3:8a:91:f0:b2:f6:f4:a1:0b:7f:
c6:7f:6e:42:8e:d7:9c:eb:62:d9:da:cf:9d:61:ba:
2e:95:75:bd:5c:9d:e6:d3:c6:db:a1:bc:98:e5:2a:
f3:18:b6:4e:4c:c5:96:99:b2:ca:02:de:85:d4:e9:
80:df:7a:c1:a9:ba:ab:1c:44:b7:03:22:e8:f1:22:
dc:a5:1e:02:87:6a:4b:8e:e1:1b:ef:fa:92:39:48:
ee:c7:06:96:3f:6b:a9:47:5b:c5:31:e0:76:05:34:
8b:af:33:29:85:cc:84:1f:e7:52:96:f6:f5:b6:9c:
50:e0:ca:03:8f:07:f6:c8:9f:cd:d6:8a:b3:9a:bd:
4d:63:d8:25:2d:bc:c1:f2:92:eb:3e:ee:92:ce:04:
07:52:c6:0f:b9:e1:ff:62:45:fc:83:02:f0:30:ff:
e3:e6:a3:7b:9a:45:9b:7d:3a:6a:7d:b7:97:f6:5c:
58:49:91:84:ca:df:0e:81:09:4f:fa:08:83:2c:d1:
25:b1:96:db:1f:ac:d1:cd:59:75:2d:b3:5a:29:31:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:70:B1:8B:82:1F:51:5F:3F:38:5F:A6:27:1E:F1:47:C7:7F:E5:FF
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5f:71:3e:98:7f:20:cb:c8:9c:e2:c9:3c:58:7d:9b:15:1c:
c0:22:2a:3b:9f:bf:2a:29:05:80:6d:c3:71:98:f9:a0:0f:57:
91:30:2f:41:d9:e9:ba:2a:24:0e:ff:46:e0:ec:3a:86:5b:72:
3f:c6:50:d0:e1:1a:c3:a1:a9:13:3c:e9:89:04:fc:05:38:19:
e1:ad:8f:e1:53:04:89:a4:8b:e6:55:88:a6:c1:8b:a8:db:6d:
a0:70:7f:f3:09:4c:53:42:f2:b9:8a:4b:c4:76:d5:be:ba:8c:
d2:00:9c:36:33:cc:1d:41:dc:36:bf:9a:59:db:f4:6f:fc:7a:
78:55:0e:7e:cd:2a:3e:95:8b:d2:0f:77:73:d9:a1:0f:21:f5:
39:26:3d:23:15:51:0c:28:e6:ed:ea:a5:49:ab:56:74:7c:1c:
07:b0:49:9c:30:b6:73:fe:be:f8:3f:8d:32:33:2e:35:81:30:
b7:74:75:d7:00:cc:ff:e9:79:15:2c:8b:52:4a:f9:9c:cb:3d:
08:1a:f0:24:4f:42:84:fd:5b:a7:09:ee:f6:15:e7:28:2b:ba:
55:1b:8b:3a:3a:3d:24:d0:5f:1d:48:4f:31:73:30:fa:0a:d8:
16:4a:5d:59:a4:f6:75:fc:84:00:75:77:74:b8:6b:87:d9:f9:
31:b6:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:15 2026 by rpki-client