Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: l4p0ktursEq1021ENSkjAyJHvbVh8Ka9YlF7Mce8zK8=
Subject key identifier: 8A:9C:4A:F7:72:9D:68:A4:EE:4A:74:6E:B8:26:0E:94:37:16:4C:D9
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019EB921C27585890DC61E6476D5C8988080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 182A
Signing time: Fri 12 Jun 2026 00:00:57 +0000
Manifest this update: Fri 12 Jun 2026 00:00:57 +0000
Manifest next update: Sat 13 Jun 2026 00:00:57 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: rahm7M/leDnayF+8aTgVMPDTyO2yD/6jnokdbrapC18=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:c2:75:85:89:0d:c6:1e:64:76:d5:c8:98:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Jun 12 00:00:57 2026 GMT
Not After : Jun 13 00:00:57 2026 GMT
Subject: CN=8a9c4af7729d68a4ee4a746eb8260e9437164cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:df:86:4e:ec:9e:5b:0f:14:7b:95:76:54:
cb:7b:10:02:5d:98:e2:5f:3c:56:76:6d:63:b6:b2:
60:9c:3c:00:c8:33:02:7b:56:e4:09:11:fa:7c:71:
c5:ae:68:e9:be:4e:eb:71:2e:7e:d6:8a:08:ff:25:
66:4b:80:95:43:39:c9:fa:b4:ac:0e:c8:a4:12:b1:
47:cb:66:7d:e8:b1:9d:f5:ff:bc:3b:3c:d2:7e:f0:
3e:6c:8a:22:9c:a4:66:9f:c4:00:5f:66:b1:0f:4d:
34:1a:a7:96:81:7e:2a:bf:0a:55:e8:e7:f6:24:b0:
85:de:04:c4:e4:c7:fd:54:58:09:e4:c8:b7:15:ae:
cb:1e:18:04:32:8e:22:17:9e:ca:a6:a2:28:9d:c2:
ca:36:d4:5d:dd:81:b8:8e:d5:3f:d4:af:15:72:7f:
90:9e:48:cd:f7:e6:ba:c8:b8:8d:6f:9b:5d:d9:d9:
32:ae:14:27:f6:14:45:94:41:b9:9c:d0:e7:ec:d5:
a9:ba:d1:f8:ef:4c:4f:e6:33:db:d8:58:fd:d1:40:
d1:a5:1a:6d:c2:a3:43:e6:c5:a5:25:2e:f5:05:0c:
df:35:2b:fa:23:cb:88:11:02:d8:0b:58:29:f0:fc:
50:04:35:62:fb:ae:5e:91:e4:ba:fc:5d:68:c1:0c:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:4A:F7:72:9D:68:A4:EE:4A:74:6E:B8:26:0E:94:37:16:4C:D9
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5d:87:f0:c1:9c:8d:aa:c8:64:10:62:bb:08:a5:5b:84:4a:
cf:60:d3:5e:94:f9:a4:d2:a2:f6:a7:2c:e5:63:88:e8:82:d3:
b5:06:7f:71:06:43:f6:68:41:d8:8a:7b:10:7b:e7:dd:d7:71:
7c:71:f9:21:1f:87:20:0e:89:8d:0c:3c:a0:24:d8:1b:81:13:
5a:34:3b:37:ea:1b:db:9d:77:3d:8e:6e:24:f1:53:ce:8a:65:
9d:0a:8c:1b:62:c4:7d:e4:d4:a3:33:a8:52:b0:d0:51:0c:1e:
9b:5d:e4:3a:ee:a5:40:55:f7:54:2f:78:f9:98:72:1d:08:a3:
f1:63:d3:21:89:ab:02:9c:d6:5d:47:91:aa:5e:46:0e:93:b3:
6f:2f:e2:bb:df:f7:8b:23:3b:5b:33:72:cf:2c:94:30:4d:fe:
43:77:c7:fb:02:ed:0b:33:cc:19:b7:d6:e4:3f:4b:2c:7f:d2:
0b:0c:30:a0:b1:25:3c:8f:f3:85:ec:96:34:80:31:be:76:9e:
74:72:65:ba:19:93:93:bd:fe:7c:3d:23:dc:03:47:40:d9:af:
9f:50:76:e6:bf:43:35:14:fc:c5:e8:a1:91:e1:37:ad:8c:25:
f7:89:25:65:84:20:46:8d:b7:5b:39:b7:59:a0:cf:d0:58:1f:
53:6c:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:51:51 2026 by rpki-client