Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json)
Hash identifier: 9JYAH9Kha71possCuq9ZBAW/epua9r135ovjQ/+Usjc=
Subject key identifier: E8:66:76:31:41:EB:9D:08:82:0E:EA:D2:9E:6F:42:98:09:1A:BE:0D
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial: 019CACEBD1ECB44563D8F1E89A5557E34195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:01:01 +0000
Manifest this update: Mon 02 Mar 2026 05:01:01 +0000
Manifest next update: Tue 03 Mar 2026 05:01:01 +0000
Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: nL24pRhulsrDiB40/lcA3h+yh6MPXtM1RE2rHwzdX2c=)
2: S-s-KrbF6j3sLJbs4p0tEnINwc4.roa (hash: lbsHHCPLu65Xu8v8V5wooAKg5OLW3IhHzjvdCT203Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d1:ec:b4:45:63:d8:f1:e8:9a:55:57:e3:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
Validity
Not Before: Mar 2 05:01:01 2026 GMT
Not After : Mar 3 05:01:01 2026 GMT
Subject: CN=e866763141eb9d08820eead29e6f4298091abe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:07:6f:a6:44:cd:50:d3:25:ab:86:ea:85:
59:5f:1d:a3:dd:05:82:26:e2:ff:72:8f:65:9c:78:
3d:95:f7:50:57:ea:d4:67:f0:27:bf:88:ad:cb:ed:
b6:47:ad:67:30:ff:60:2d:cd:3a:a3:9f:09:d3:d1:
44:26:4e:3f:08:40:38:5e:ca:e3:23:58:96:dc:77:
08:93:bd:31:87:64:f8:ac:7e:0d:b5:07:1a:8d:58:
03:37:0b:fc:1d:b3:cd:9d:55:d7:5a:8c:72:ea:e0:
68:ae:89:04:65:aa:6b:e2:56:b3:b5:3b:c7:57:98:
52:fe:b5:73:24:71:ef:7d:14:f4:db:bf:2c:56:cd:
a3:d9:4e:a6:fc:99:43:11:6e:93:22:3e:d5:0b:47:
9e:f2:3a:f1:c4:74:b9:bf:79:55:fe:f0:ea:53:36:
60:71:e1:2c:4f:46:6c:5e:0d:59:3d:6a:27:49:45:
b6:52:4b:9b:db:27:2f:c1:10:48:a4:c6:ec:a3:10:
89:d6:c0:ac:73:11:f6:e7:d1:84:2d:21:f4:a5:e2:
33:c4:00:14:1f:ba:de:25:b8:74:c2:51:1e:a4:42:
d4:33:a1:bf:02:9a:92:d6:71:36:8b:49:fd:8a:c3:
09:53:51:90:19:9b:43:1b:e4:36:9f:e4:91:33:ba:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:76:31:41:EB:9D:08:82:0E:EA:D2:9E:6F:42:98:09:1A:BE:0D
X509v3 Authority Key Identifier:
keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1c:2b:4f:79:92:6b:30:d7:2b:58:4c:08:66:e3:c4:28:c4:
e5:fd:15:37:2e:48:42:fa:83:c5:7b:d4:68:4c:b9:5b:5c:12:
46:5d:d0:fe:a7:3e:fd:8e:c7:a4:1b:66:9e:ab:3a:dc:fe:24:
02:3d:52:f2:07:51:fb:8e:15:f5:ef:5e:59:78:d3:1b:a0:b2:
00:f3:0b:6d:67:0d:b1:cf:98:04:32:71:ef:a6:e4:0f:dc:47:
4a:9a:f3:46:02:c7:04:68:50:06:54:7d:f1:0a:8c:00:23:5d:
e8:6f:ba:b4:0b:1c:9f:a8:5a:ef:3c:b5:75:75:b1:ff:5d:a4:
b7:be:72:94:ce:89:11:30:8a:38:e2:3c:91:e3:be:96:01:4a:
41:fd:15:16:8b:08:73:94:4a:03:7c:fa:78:35:35:6f:68:f3:
09:1f:e2:80:6a:db:f8:66:c7:ff:39:63:86:41:61:61:5f:45:
bb:32:dc:8e:84:91:bc:0d:16:7f:e2:e1:48:83:83:46:96:db:
c2:dd:21:e7:51:bb:b2:33:49:c2:01:ab:3e:5a:a5:17:53:ce:
49:51:5b:00:c8:b6:5a:cc:4b:29:09:5d:66:23:6b:31:9a:0e:
11:c8:f3:03:c9:34:38:2a:ae:02:b7:38:e3:4c:99:e9:af:72:
6a:a8:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:37 2026 by rpki-client