Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: IHnViaeLli0pwBhkD8BEkJu/GT3QJeR28sy0hAzngqE=
Subject key identifier: 07:45:53:29:15:C0:CC:93:FF:04:4B:B1:E5:D5:E2:F9:13:DD:93:5C
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019DCF75B89EFAA3843F4C1DB728BEC13879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 17B1
Signing time: Mon 27 Apr 2026 15:01:31 +0000
Manifest this update: Mon 27 Apr 2026 15:01:31 +0000
Manifest next update: Tue 28 Apr 2026 15:01:31 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: /h3HtYElSPNeXTZjjzLt3wryqFSzSkN8VTx39bFLZzM=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:b8:9e:fa:a3:84:3f:4c:1d:b7:28:be:c1:38:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Apr 27 15:01:31 2026 GMT
Not After : Apr 28 15:01:31 2026 GMT
Subject: CN=0745532915c0cc93ff044bb1e5d5e2f913dd935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:56:80:e1:3f:c4:ce:b5:7e:f9:d6:87:61:
14:bc:1b:dd:26:be:ac:2f:1a:a7:80:6f:2f:6d:73:
25:4e:36:be:4e:00:59:97:c0:aa:98:66:e2:5c:96:
7f:2d:f1:23:25:4e:f7:83:56:8f:f9:70:21:dd:a7:
5c:b9:b1:32:9f:e1:25:ea:dc:c4:da:de:29:3c:63:
93:8b:c8:c8:34:43:36:d2:c1:ea:91:03:e9:ad:e5:
85:9b:d8:b1:bf:d4:8b:d4:4d:86:c8:56:00:dc:53:
61:f3:68:30:07:62:e7:c6:51:11:71:04:74:30:00:
61:07:75:0b:31:ed:01:5e:8d:a0:08:d4:56:5e:22:
60:c8:30:ed:e2:91:ed:34:ce:0a:5f:b8:ac:5b:28:
68:85:df:5f:7a:97:9e:56:2a:d1:4b:fc:ac:ce:63:
9d:07:10:15:53:df:84:31:f8:cd:fa:9b:00:54:8c:
17:17:a6:b6:bc:e2:a1:82:9a:89:64:19:4c:99:bd:
9b:97:cf:99:e5:6b:ce:ad:d0:25:a7:68:40:25:b7:
c6:53:5f:c1:c6:7c:71:3a:73:e1:d4:f7:51:b8:fb:
e6:24:96:9c:48:31:4e:ca:c1:2f:2d:c1:f4:ad:ce:
17:d6:8c:d3:70:bb:d0:26:83:3a:79:3c:a4:97:e4:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:53:29:15:C0:CC:93:FF:04:4B:B1:E5:D5:E2:F9:13:DD:93:5C
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:25:ee:cc:5a:c7:55:f7:fb:f8:e4:77:2f:2e:56:b3:c8:2f:
af:db:4a:64:bf:39:16:20:a7:67:8c:a9:ad:54:63:c2:80:5d:
4a:09:d0:9a:42:f4:7e:4d:47:55:f9:9b:b3:f8:64:04:5a:38:
34:0a:c1:26:1a:b8:9c:2e:40:71:5c:30:e7:be:c0:79:1b:25:
21:11:8b:46:c5:28:96:04:e0:65:51:d2:d9:51:f3:c1:a8:0b:
59:fa:69:2c:42:69:10:1d:4a:d1:8a:e6:f0:49:62:29:f8:74:
ee:cd:2b:92:d7:8a:6e:71:80:d9:17:71:58:63:e4:b6:5d:5e:
2e:b4:33:37:a6:f5:c3:36:b3:5d:b3:2f:6e:2b:0c:16:63:be:
63:6c:c0:89:f0:bb:00:cc:3d:d7:4b:ed:63:e6:53:cb:db:4c:
a9:7b:f7:96:a8:a9:c6:b0:4f:b2:af:2f:3b:7a:f1:61:e7:92:
1e:18:b8:ef:96:25:3d:de:3c:9f:af:79:e5:98:84:c3:cf:40:
3e:53:7b:c7:1e:04:8c:29:30:5c:b8:13:09:fe:99:40:58:80:
b9:d8:d8:f3:f0:b7:07:c1:6e:f6:90:71:95:f3:c4:1e:6f:8e:
ff:11:05:c4:4d:55:5b:15:23:92:7b:88:d7:51:75:13:82:ae:
f1:ac:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:02:33 2026 by rpki-client