Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: xzxksztZ05SkG2NBQ7YdQOV55bJRJE/MYhkBk9BOdqQ=
Subject key identifier: 45:E5:4F:7E:15:CA:71:C4:3F:19:E2:01:50:FD:17:D1:76:F5:31:77
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019DCC74136CB89C9968B79123A1322750A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 1C
Signing time: Mon 27 Apr 2026 01:00:52 +0000
Manifest this update: Mon 27 Apr 2026 01:00:52 +0000
Manifest next update: Tue 28 Apr 2026 01:00:52 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: 8v8WZc7p/hwRItg2q87R9cMSDB2fSYo6yHPeubpqJcY=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:13:6c:b8:9c:99:68:b7:91:23:a1:32:27:50:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Apr 27 01:00:52 2026 GMT
Not After : Apr 28 01:00:52 2026 GMT
Subject: CN=45e54f7e15ca71c43f19e20150fd17d176f53177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:5a:73:65:fc:31:06:de:ac:7e:fe:5f:25:
ca:87:37:30:eb:5c:8d:d3:d4:44:c3:82:c5:17:1c:
77:7a:a3:8c:31:34:db:5a:a7:fd:c5:34:65:ea:f8:
27:ad:fa:da:1c:96:7a:41:38:76:24:8b:58:0a:49:
a7:a4:6c:07:ec:fe:7d:7a:38:19:72:c0:22:b7:61:
ad:fd:07:b9:ab:86:ab:b0:ba:2b:a3:15:10:11:ad:
8d:b8:b9:51:15:b1:c0:92:fe:a2:93:70:5e:84:e5:
c1:ed:98:bc:0d:33:0a:e5:c8:53:70:76:93:68:9d:
9c:b0:84:c8:56:33:05:0b:fd:c7:c0:39:7a:db:1a:
f5:b4:b0:a4:04:78:0d:22:7c:a5:54:47:55:0a:bd:
ff:37:1e:d8:9e:09:39:d7:ed:a7:4d:2b:bf:ff:c6:
4c:30:7b:fb:fd:cc:69:34:26:9e:fe:ec:7a:e9:a0:
6c:3d:3e:4a:43:fb:73:2d:78:53:10:1a:d0:e4:d9:
21:ad:b0:4c:ed:a6:bc:97:21:5a:02:1a:81:22:86:
5f:ad:42:3c:98:89:b1:ad:f3:8d:35:d3:b3:1f:09:
bb:3b:3f:0b:d8:c7:60:ce:40:91:69:e5:c5:3c:f4:
71:7d:4e:14:ee:ae:0f:4f:36:54:74:aa:6b:23:97:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:4F:7E:15:CA:71:C4:3F:19:E2:01:50:FD:17:D1:76:F5:31:77
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ab:12:9b:ae:b5:b7:d3:fd:e2:9c:75:c4:ca:f5:04:18:af:
c9:d6:b3:94:00:eb:c3:c3:3f:5a:dc:6c:72:9f:94:af:6f:60:
7c:fc:ab:15:0f:be:cf:61:c9:d9:95:2e:3a:22:a2:a1:01:a9:
27:37:af:92:79:30:22:d3:5e:c1:72:5b:5b:d3:0a:81:ac:91:
36:7c:4e:c6:a1:eb:5f:97:c3:28:78:e6:9a:98:8b:6a:07:fa:
d6:1a:de:fb:04:24:74:e2:0f:72:21:e6:86:15:7b:11:9a:fd:
cc:82:6a:23:3d:db:4e:e9:98:20:b7:8c:66:93:96:d9:57:4c:
37:db:09:f4:49:2a:b6:54:41:dd:ab:b9:d9:a5:05:cf:2f:50:
25:32:f2:f9:01:a3:e9:e0:b6:1d:eb:5d:2e:63:a9:bd:73:50:
02:95:d3:ca:8e:1a:ab:ed:37:c8:41:91:82:94:c8:fc:9e:c9:
e2:f3:4b:f0:8c:92:60:6d:2e:2e:01:91:e6:82:46:51:3f:be:
63:11:6d:9e:db:86:1c:bd:2e:9b:85:55:ca:f5:eb:ad:12:33:
5b:4e:f7:68:a9:6e:46:47:26:6e:31:8b:48:c3:0c:5b:71:6c:
76:a5:2a:97:b3:18:20:02:db:b6:89:07:d1:23:4e:1a:12:63:
ee:bd:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:08:30 2026 by rpki-client