Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: IkSk2Xiy8l5V25rC847ntLdZngb1ChUtR4rvrtVVE8w=
Subject key identifier: 6C:37:A5:2F:EC:52:73:38:AC:F4:D4:97:55:88:F4:41:53:7A:8B:8D
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019CE5C9376EDD5CA3CE9AE1F7BE02DD6C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 1738
Signing time: Fri 13 Mar 2026 06:01:35 +0000
Manifest this update: Fri 13 Mar 2026 06:01:35 +0000
Manifest next update: Sat 14 Mar 2026 06:01:35 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: 8ZMGYaS9Sd1BRT5l25EpfIjpELxPi+uM9pmUjFVHvd4=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:37:6e:dd:5c:a3:ce:9a:e1:f7:be:02:dd:6c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Mar 13 06:01:35 2026 GMT
Not After : Mar 14 06:01:35 2026 GMT
Subject: CN=6c37a52fec527338acf4d4975588f441537a8b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:07:cf:73:40:74:1e:15:29:e4:39:73:d2:
d2:12:3d:63:67:85:69:14:f9:15:5e:84:df:3a:52:
db:12:f9:cc:4d:c7:f8:1d:58:14:cd:f0:c0:6a:f6:
22:dd:84:7a:54:69:94:b6:be:df:8f:02:6b:d7:af:
3f:23:f0:a5:4d:a5:fa:30:96:4f:5e:14:30:1d:6b:
60:90:54:a6:cc:08:48:22:78:5e:26:ac:37:87:cc:
ec:01:81:93:7f:12:d1:75:80:c2:15:94:f6:42:b1:
58:45:86:f0:95:41:ae:5d:00:ff:4c:b9:b3:be:a7:
bb:26:9f:f3:f4:5f:47:ba:1a:44:ba:99:a0:a9:c9:
3d:94:3a:98:ba:c6:19:67:7d:72:1c:90:7e:80:86:
11:b2:04:41:95:13:19:53:ee:24:1f:2b:0c:be:53:
55:86:20:10:81:85:33:8b:6e:9a:59:0d:52:6e:fc:
3f:41:e2:d6:41:f8:be:57:59:98:4a:16:84:fe:1e:
27:a5:23:bc:dc:8f:d5:23:3a:98:37:b2:6d:dd:d3:
8d:44:96:06:68:94:6a:c0:a9:10:56:bd:d2:4c:20:
b8:bb:ff:0e:76:a7:b3:a1:9e:c7:23:69:f2:af:99:
67:e3:89:85:63:aa:c8:20:9c:9b:9e:2f:bc:6e:d0:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:A5:2F:EC:52:73:38:AC:F4:D4:97:55:88:F4:41:53:7A:8B:8D
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:45:e8:dd:8d:06:67:31:3e:ab:1a:01:23:00:24:5a:db:
87:c5:0c:66:e2:64:c6:44:c0:af:5c:a2:b4:c7:0f:84:91:6a:
90:84:e2:d7:5a:9d:04:d8:c4:bd:6e:e9:1c:23:30:27:29:01:
4e:b4:2d:73:2d:77:58:6e:9b:1e:b9:03:73:21:7c:74:35:25:
ec:a7:c5:de:1a:ec:d6:70:46:c9:14:95:34:f0:04:21:86:40:
d4:ce:d1:21:40:cf:58:ff:69:af:4c:37:e0:8b:49:39:59:06:
ec:4b:aa:fa:64:db:05:90:6f:de:0b:b0:35:c3:a6:1e:83:01:
c9:47:ad:97:e7:f4:62:cb:f5:64:b5:88:99:a6:9d:15:86:5f:
c8:48:cb:cc:e0:8f:51:b4:8a:27:89:a7:db:10:96:66:51:63:
d2:bf:ed:ec:5f:0d:e8:55:b4:35:80:0b:f9:fb:85:29:9d:a0:
c3:ab:01:8d:ba:31:7c:64:23:c1:4e:96:47:66:9c:63:ac:78:
c5:be:56:88:36:5e:ff:4e:d6:85:fa:c7:f6:52:c6:52:9c:d4:
6b:32:f1:4f:d6:da:b7:cd:9a:f4:8f:49:46:cf:22:1d:36:f7:
e6:50:7b:79:60:86:02:d0:63:f3:69:e2:c5:88:7f:02:de:1c:
16:73:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:37:21 2026 by rpki-client