Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json)
Hash identifier: UWwS1DSOFQ0Y04V78YeGvorVeZEi/TDA/aqYC2JfEGI=
Subject key identifier: 01:DB:6D:96:71:98:B7:BD:E9:36:59:A5:F6:D4:55:0E:B8:BF:DD:DD
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial: 019CB2B67593EEA71D7D225F44801F65D6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
Manifest number: 184D
Signing time: Tue 03 Mar 2026 08:00:27 +0000
Manifest this update: Tue 03 Mar 2026 08:00:27 +0000
Manifest next update: Wed 04 Mar 2026 08:00:27 +0000
Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: TVDB8qYMx6fKlKWFBUUJfDjD3x5BG5i4YqimSJWq1ao=)
2: S-s-KrbF6j3sLJbs4p0tEnINwc4.roa (hash: lbsHHCPLu65Xu8v8V5wooAKg5OLW3IhHzjvdCT203Bc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:b6:75:93:ee:a7:1d:7d:22:5f:44:80:1f:65:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
Validity
Not Before: Mar 3 08:00:27 2026 GMT
Not After : Mar 4 08:00:27 2026 GMT
Subject: CN=01db6d967198b7bde93659a5f6d4550eb8bfdddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:c2:1a:bc:8a:98:4a:63:e1:6c:5d:c0:8f:
61:0a:c6:29:64:f9:be:f5:9d:8a:8a:5a:26:f1:f4:
6a:e9:56:95:7b:17:55:5e:45:19:d4:1f:76:5a:4b:
d8:7f:7c:79:11:ff:ac:93:f2:ce:9a:00:c9:57:8d:
02:8c:51:f8:d3:f5:99:96:f1:15:bd:95:b3:62:57:
a1:45:2b:23:ce:77:8b:43:79:68:33:8b:a9:0b:64:
c5:59:d8:f4:64:d6:8c:5f:14:85:ca:d4:2a:74:0d:
24:6b:42:e1:22:c5:14:0c:62:a7:86:32:02:15:09:
ab:8e:ee:36:f3:af:4c:2f:02:54:7e:ce:fc:64:e3:
3b:5e:fc:5c:29:81:d8:fc:20:29:c7:95:11:15:bd:
71:7a:0a:cb:fd:06:c6:04:5e:f3:ef:e6:9b:2f:95:
ed:a6:c3:bb:59:0b:24:15:36:84:ef:e4:9f:ce:79:
78:e8:24:e5:b0:42:b8:7c:db:a1:f4:2f:85:74:eb:
e5:38:4a:cd:1c:a4:89:5b:b9:3c:58:84:5a:8c:c8:
80:2b:f5:f0:c0:18:ff:6a:d4:68:6b:23:b6:ee:c0:
45:b5:10:c7:fb:80:50:7c:05:36:07:bc:e9:51:44:
fd:ec:81:67:21:ae:02:39:08:99:18:78:46:7d:65:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:6D:96:71:98:B7:BD:E9:36:59:A5:F6:D4:55:0E:B8:BF:DD:DD
X509v3 Authority Key Identifier:
keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0c:d9:91:44:12:f7:13:41:ee:6f:0a:d2:49:b1:6f:55:aa:
72:d4:b1:70:f9:be:bf:0e:e4:2e:c5:c2:5b:c9:7f:9c:29:13:
ce:e1:96:36:20:81:2b:21:ec:d9:db:da:2e:fd:ca:44:f3:3a:
a2:c2:c4:72:dd:66:ca:73:d3:a0:24:cc:c7:cc:20:17:38:38:
8b:30:9c:29:c3:93:31:55:13:d8:4d:bb:19:e1:dd:3f:2d:f2:
49:d2:ff:7f:ab:77:9a:65:74:e1:60:43:80:6a:00:e5:23:1f:
6b:c6:67:d5:3e:c6:11:e3:10:68:e4:0e:80:06:f4:ac:0d:9b:
57:b5:c5:56:0a:af:0b:18:1c:4c:fa:f5:0b:f9:4f:80:26:4e:
a0:39:fd:3f:b7:a2:9d:37:17:7d:72:e2:b7:19:56:f0:5e:00:
59:1c:1a:ea:94:94:4a:08:e1:84:f6:8d:0f:64:b3:41:95:72:
33:4d:b2:11:1d:80:e7:00:5d:31:dc:62:e9:ba:39:21:ca:5a:
55:d2:c6:aa:0d:a4:f1:46:0f:16:74:ba:20:46:fb:c8:89:45:
f3:79:13:d9:ba:3f:ad:8a:fb:67:0a:57:77:42:87:e8:d6:37:
ec:40:75:f5:da:e7:2b:1a:62:2c:32:42:95:06:85:a1:f2:0f:
bf:f4:2b:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyytnWT7qcdfSJfRIAfZdbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzk1MDA5ODQzNjI4MWNlZTU0MmExZTc0NTQ2NTUxZTFl
NTUyODMwHhcNMjYwMzAzMDgwMDI3WhcNMjYwMzA0MDgwMDI3WjAzMTEwLwYDVQQD
EygwMWRiNmQ5NjcxOThiN2JkZTkzNjU5YTVmNmQ0NTUwZWI4YmZkZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6jCGryKmEpj4WxdwI9hCsYpZPm+
9Z2Kilom8fRq6VaVexdVXkUZ1B92WkvYf3x5Ef+sk/LOmgDJV40CjFH40/WZlvEV
vZWzYlehRSsjzneLQ3loM4upC2TFWdj0ZNaMXxSFytQqdA0ka0LhIsUUDGKnhjIC
FQmrju42869MLwJUfs78ZOM7XvxcKYHY/CApx5URFb1xegrL/QbGBF7z7+abL5Xt
psO7WQskFTaE7+Sfznl46CTlsEK4fNuh9C+FdOvlOErNHKSJW7k8WIRajMiAK/Xw
wBj/atRoayO27sBFtRDH+4BQfAU2B7zpUUT97IFnIa4COQiZGHhGfWXaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHbbZZxmLe96TZZpfbUVQ64v93dMB8GA1UdIwQY
MBaAFNvJUAmENigc7lQqHnRUZVHh5VKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDkt
ZjQ3ZTE2OTI2NmMyLzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDktZjQ3ZTE2OTI2NmMy
LzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewzZkUQS
9xNB7m8K0kmxb1WqctSxcPm+vw7kLsXCW8l/nCkTzuGWNiCBKyHs2dvaLv3KRPM6
osLEct1mynPToCTMx8wgFzg4izCcKcOTMVUT2E27GeHdPy3ySdL/f6t3mmV04WBD
gGoA5SMfa8Zn1T7GEeMQaOQOgAb0rA2bV7XFVgqvCxgcTPr1C/lPgCZOoDn9P7ei
nTcXfXLitxlW8F4AWRwa6pSUSgjhhPaND2SzQZVyM02yER2A5wBdMdxi6bo5Icpa
VdLGqg2k8UYPFnS6IEb7yIlF83kT2bo/rYr7ZwpXd0KH6NY37EB19drnKxpiLDJC
lQaFofIPv/QrJg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:40 2026 by rpki-client