Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: +TPwP8drSTTzJgMMrF15LupKyDfF3Cp29T+p6Kkjf+4=
Subject key identifier: 00:A5:83:AD:3D:08:B1:30:C4:B1:6B:10:97:FE:36:AC:58:D2:21:3F
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019D382E1B44D215654C1EBDBDB56E627F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 1rC97U5uCuGvq6aUq3oDL0oa1TIEjOwRAX5ZMEdn1+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1b:44:d2:15:65:4c:1e:bd:bd:b5:6e:62:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=00a583ad3d08b130c4b16b1097fe36ac58d2213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:a4:b8:3e:06:3b:f2:a8:21:06:13:c3:31:
1f:14:5c:49:e8:b5:ef:d8:b4:52:34:2b:10:13:09:
e9:eb:e2:3a:08:3b:b0:b6:8b:fe:5c:ad:cd:b4:65:
d7:e8:92:31:b9:c4:b1:ec:7d:87:2d:f6:d3:4b:88:
f3:97:51:fe:b8:b0:a9:58:74:10:b7:e1:5a:9e:a4:
45:e3:81:c7:53:2e:06:55:7b:72:44:62:65:97:fa:
f9:09:a5:12:4b:1f:43:70:a4:bc:71:41:93:ac:06:
10:86:52:02:96:45:29:b7:ff:32:b4:87:e0:30:87:
d0:f5:f1:50:00:9b:7d:71:65:ad:98:2e:83:09:63:
5d:11:95:26:2b:34:1f:d1:d4:d8:ee:53:48:f0:10:
5f:0a:e7:eb:19:08:1e:b9:4a:05:bc:bc:30:b4:1e:
ed:1d:ef:0f:85:8c:e4:f2:1e:19:92:9f:78:f4:66:
9e:d1:5f:8a:5d:69:ce:5c:04:e5:65:a5:15:2d:97:
21:7a:1e:78:a0:aa:5d:3e:f6:df:f3:7b:73:92:cd:
2f:c2:7e:5b:06:d4:6e:77:00:48:ca:7c:57:1e:ba:
fd:6c:07:9c:77:22:d5:e3:f9:13:73:e8:43:04:1e:
96:67:70:60:af:97:5a:d6:bd:a0:fa:73:c2:88:63:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:83:AD:3D:08:B1:30:C4:B1:6B:10:97:FE:36:AC:58:D2:21:3F
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:57:f5:cb:54:32:7d:b7:34:52:a4:6f:38:61:72:3d:55:4d:
1a:d7:3c:2c:67:66:37:8b:60:ff:38:31:33:33:66:02:80:04:
d4:71:11:f9:c6:e0:9e:14:df:c0:46:46:72:3b:aa:eb:24:ef:
85:88:3e:a1:9b:a6:cf:ad:6e:71:bf:1f:69:9d:73:4a:95:b0:
d8:2b:0f:f6:f0:9b:91:db:72:47:8f:e5:fc:96:0e:05:17:b8:
e0:8d:b3:74:d5:e1:4b:5a:99:50:01:78:00:9a:20:4d:28:44:
82:d3:22:be:fd:86:a1:32:2c:9f:6e:66:86:e2:02:40:fb:6d:
5d:5f:87:3b:5b:08:d7:d4:28:3d:61:6e:19:0c:69:c6:45:fc:
ab:97:23:03:fb:d4:2e:42:08:9b:c0:73:2b:5c:d8:a8:16:c2:
97:26:63:08:71:5a:3e:47:21:ef:2f:82:3c:d8:d7:1a:f9:a2:
e9:69:4a:26:77:80:04:a2:f9:fb:7c:ab:1e:e7:4b:45:34:6c:
7b:19:d3:5f:3a:20:ae:37:2e:46:f7:0f:6e:55:6e:03:58:90:
7f:ba:d8:29:df:fc:85:c5:23:96:1b:c0:6d:53:1d:dd:35:24:
d6:bc:e1:fa:f8:5b:05:2b:fd:d7:46:82:d1:15:6d:02:4c:d2:
89:14:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:04 2026 by rpki-client