Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: 62oUAKgedrAvqNAhrSfA5rK78B32zk+bem7172JcCgw=
Subject key identifier: EB:7C:6C:6C:CE:5D:EE:73:0F:F7:42:B9:0A:B2:B1:A3:89:EB:49:49
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 01A154AE7C7A10468262AD1837A907FC4878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 15:01:23 +0000
Manifest this update: Mon 19 Oct 2026 15:01:23 +0000
Manifest next update: Tue 20 Oct 2026 15:01:23 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: VqmF/rsMRnO8lhCRmlkR3Z9Xlt6wFMeZs7ZUvi1el08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:7c:7a:10:46:82:62:ad:18:37:a9:07:fc:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Oct 19 15:01:23 2026 GMT
Not After : Oct 20 15:01:23 2026 GMT
Subject: CN=eb7c6c6cce5dee730ff742b90ab2b1a389eb4949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:5b:58:62:a4:91:8e:c4:cc:a7:47:47:0b:
18:ce:43:80:d0:c9:82:3d:14:2a:5f:a5:b9:f4:3e:
07:ae:11:33:79:75:10:65:b7:64:44:ba:89:74:28:
d8:3f:a8:ff:cc:23:a0:d9:e0:1e:07:9c:58:8b:a7:
58:c3:aa:98:37:3a:4f:b4:1e:fb:43:21:a4:61:ec:
a9:ff:6f:5c:93:96:5a:85:ba:2d:8e:a8:80:85:85:
2c:a5:3c:bf:cf:e0:9b:15:87:7c:3d:d6:af:a0:9b:
32:cf:eb:49:00:e2:8b:ce:31:17:07:7d:d9:b7:31:
11:7d:d2:8f:fa:22:1e:6c:fe:fa:07:9c:25:5e:35:
07:28:d2:a8:68:ac:36:bb:55:fc:3d:a3:ff:8f:d6:
51:93:33:27:c7:67:5e:8f:d3:40:5d:78:82:8c:70:
6e:8d:49:19:49:eb:ff:26:8a:a1:e8:56:a0:99:84:
32:1a:16:e8:11:74:42:ea:54:51:60:5a:be:5d:78:
12:40:b1:10:b2:2f:02:f0:c0:fc:d5:3d:bf:57:9d:
26:53:5e:bf:38:b0:a5:34:ae:1b:22:5d:01:fe:ae:
9c:f6:8e:a2:4c:e1:69:e6:da:3b:6d:d4:e8:9f:dc:
f4:d0:ee:dd:0d:ac:fc:21:ca:fe:78:03:a3:36:30:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7C:6C:6C:CE:5D:EE:73:0F:F7:42:B9:0A:B2:B1:A3:89:EB:49:49
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:24:e7:bb:42:b0:b7:d7:80:bf:7f:15:a6:09:87:28:66:b0:
43:42:82:be:e4:34:7f:d7:4b:4f:22:1a:ab:e6:c6:af:f4:c9:
c1:a8:60:31:3e:e7:9a:a1:a6:7b:38:cf:2c:62:92:44:27:0b:
24:d9:7a:d8:cb:81:e6:a3:0a:6a:52:ef:85:21:5a:fd:61:fc:
6b:be:69:33:b4:81:62:91:04:0c:6d:ec:d1:2c:16:3e:d8:92:
f9:45:13:f4:4b:a0:38:a3:57:a6:ac:53:d3:05:03:d0:0d:61:
1f:31:9c:e3:e9:7a:45:af:58:5e:46:eb:1b:63:ec:81:3d:c6:
1c:81:51:75:6e:b9:d7:4d:fd:66:f8:74:f0:48:49:ae:21:cc:
78:09:5b:6e:ca:50:72:8b:a7:c7:b2:1c:21:ca:9d:c5:50:f7:
4d:f2:c1:b8:77:60:1a:99:a1:fe:8c:52:e6:3a:14:45:8a:a9:
e1:c8:6b:c1:06:8a:d3:db:f9:96:8a:9c:0e:6e:75:0b:2a:53:
08:20:79:e9:09:88:69:ca:bf:7c:73:6d:a1:09:75:59:9b:5a:
e3:f2:ca:2c:89:63:e0:ac:ce:ca:02:f7:92:ff:64:72:f2:54:
0f:3c:b3:86:52:5b:b0:ed:bb:f7:06:07:dc:80:61:64:9e:8b:
a2:d7:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:29:16 2026 by rpki-client