Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json)
Hash identifier: q/1koiBqJfXGCq8DPANQDp3ypLc9FOr2rVHVDNTBYKc=
Subject key identifier: D4:CD:A2:67:22:C6:16:CD:33:57:97:84:01:2A:F4:CB:7D:CB:72:C0
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial: 019CAAFDA0713917291F1FFB7691398CBF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:01:14 +0000
Manifest this update: Sun 01 Mar 2026 20:01:14 +0000
Manifest next update: Mon 02 Mar 2026 20:01:14 +0000
Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: 4ZRqapA2D1xQqK0NZNRHH+fyOFQq9GaFZGhez+59fB4=)
2: S-s-KrbF6j3sLJbs4p0tEnINwc4.roa (hash: lbsHHCPLu65Xu8v8V5wooAKg5OLW3IhHzjvdCT203Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:a0:71:39:17:29:1f:1f:fb:76:91:39:8c:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
Validity
Not Before: Mar 1 20:01:14 2026 GMT
Not After : Mar 2 20:01:14 2026 GMT
Subject: CN=d4cda26722c616cd33579784012af4cb7dcb72c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:53:f9:ae:33:2e:22:9e:84:b2:b2:5c:ce:
e9:04:fb:f7:fd:93:44:0e:76:da:10:5f:94:62:2e:
d3:da:45:8c:c4:0d:6a:ff:74:36:50:a2:e5:e7:2a:
f8:51:61:ce:0f:c7:0a:6c:ec:73:85:f5:3c:c2:72:
a8:4a:75:33:a8:45:44:91:7b:a8:a1:9e:d7:0e:16:
3d:d1:f0:b9:3e:65:4d:68:17:3f:2d:db:52:43:79:
c1:99:fa:ee:7a:70:ca:f0:3b:0e:46:07:51:7c:01:
17:b1:de:6b:c5:2d:24:bf:fd:5b:d1:3c:f1:8b:49:
ae:6c:83:4b:f7:a2:16:f8:05:eb:58:27:04:1b:cc:
32:43:d3:57:be:5a:3c:cd:33:5a:d8:ed:d4:c3:2a:
f3:fe:ff:7b:94:8b:e2:63:f6:16:8c:28:52:11:90:
ed:90:5e:26:4f:fc:5c:65:6c:8d:7e:2c:c4:eb:74:
0b:98:d5:e3:6a:f7:a8:5f:56:d7:e7:ff:cf:95:a9:
db:11:c4:ca:7a:22:3e:6a:69:59:12:7e:52:d2:65:
52:97:52:1b:8f:f8:d5:d7:5c:c9:76:92:2e:8c:44:
55:8f:73:42:16:83:50:bc:ff:d7:2e:d7:d7:4a:e7:
2c:70:a1:b6:19:2b:0e:2e:8d:09:12:e9:19:30:4c:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:A2:67:22:C6:16:CD:33:57:97:84:01:2A:F4:CB:7D:CB:72:C0
X509v3 Authority Key Identifier:
keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7e:4a:08:fb:97:c1:88:12:64:f0:c8:f3:63:27:16:6d:e4:
e2:b4:2a:66:c5:db:3d:f2:28:95:51:82:bc:0d:10:00:a9:aa:
47:22:6b:c9:db:dc:ed:55:8d:18:b6:b0:6c:72:70:d6:b4:cc:
e8:45:55:57:05:28:b6:80:11:6e:27:17:58:f8:8a:0f:3b:12:
4e:74:95:d1:ea:05:4a:e8:d4:88:e4:5f:5d:db:2b:3c:3b:62:
37:be:a5:f7:07:a8:d0:f8:34:47:e2:b6:22:51:1d:e0:14:23:
45:b3:66:31:1b:cf:98:fb:cb:aa:81:fb:1c:75:b3:5d:00:f5:
6a:48:40:14:36:f0:0f:eb:01:83:90:b3:fa:10:55:68:b6:f5:
24:7d:b4:ba:b8:a0:d3:e9:f3:cf:14:99:47:99:6b:61:cb:d8:
97:89:b6:35:9f:15:c7:32:dc:71:f0:56:85:9a:7c:95:82:8a:
66:de:26:e6:93:1d:1f:bd:d1:0b:9c:ec:4a:25:1d:01:5b:a4:
17:11:0a:9e:14:32:bd:ef:35:30:13:88:08:ac:9d:86:67:29:
e6:13:dc:21:54:7b:d0:70:fa:d0:df:d5:73:53:d8:52:b4:56:
81:5f:05:3c:30:df:e5:06:60:28:fe:6b:bd:8a:4d:e0:2d:73:
03:a9:67:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/aBxORcpHx/7dpE5jL9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzk1MDA5ODQzNjI4MWNlZTU0MmExZTc0NTQ2NTUxZTFl
NTUyODMwHhcNMjYwMzAxMjAwMTE0WhcNMjYwMzAyMjAwMTE0WjAzMTEwLwYDVQQD
EyhkNGNkYTI2NzIyYzYxNmNkMzM1Nzk3ODQwMTJhZjRjYjdkY2I3MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5FT+a4zLiKehLKyXM7pBPv3/ZNE
DnbaEF+UYi7T2kWMxA1q/3Q2UKLl5yr4UWHOD8cKbOxzhfU8wnKoSnUzqEVEkXuo
oZ7XDhY90fC5PmVNaBc/LdtSQ3nBmfruenDK8DsORgdRfAEXsd5rxS0kv/1b0Tzx
i0mubINL96IW+AXrWCcEG8wyQ9NXvlo8zTNa2O3Uwyrz/v97lIviY/YWjChSEZDt
kF4mT/xcZWyNfizE63QLmNXjaveoX1bX5//PlanbEcTKeiI+amlZEn5S0mVSl1Ib
j/jV11zJdpIujERVj3NCFoNQvP/XLtfXSucscKG2GSsOLo0JEukZMEyFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTNomcixhbNM1eXhAEq9Mt9y3LAMB8GA1UdIwQY
MBaAFNvJUAmENigc7lQqHnRUZVHh5VKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDkt
ZjQ3ZTE2OTI2NmMyLzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDktZjQ3ZTE2OTI2NmMy
LzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV35KCPuX
wYgSZPDI82MnFm3k4rQqZsXbPfIolVGCvA0QAKmqRyJrydvc7VWNGLawbHJw1rTM
6EVVVwUotoARbicXWPiKDzsSTnSV0eoFSujUiORfXdsrPDtiN76l9weo0Pg0R+K2
IlEd4BQjRbNmMRvPmPvLqoH7HHWzXQD1akhAFDbwD+sBg5Cz+hBVaLb1JH20urig
0+nzzxSZR5lrYcvYl4m2NZ8VxzLccfBWhZp8lYKKZt4m5pMdH73RC5zsSiUdAVuk
FxEKnhQyve81MBOICKydhmcp5hPcIVR70HD60N/Vc1PYUrRWgV8FPDDf5QZgKP5r
vYpN4C1zA6lnTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:49 2026 by rpki-client