Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
File: 28oIlKm6MkLxFqd8OoU_25jXGSA.mft (raw, json)
Hash identifier: j8e7Oq9Pa0OrueDEbOhBG6qVz9x1C370ZpOMEE3EKTA=
Subject key identifier: 94:D9:61:AC:08:FF:4A:C6:8F:BC:81:80:B0:46:A6:40:10:B3:95:E0
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 01A0C8598A59BBF98A6C3DE5327878648658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:46 +0000
Manifest this update: Tue 22 Sep 2026 09:01:46 +0000
Manifest next update: Wed 23 Sep 2026 09:01:46 +0000
Files and hashes: 1: 28oIlKm6MkLxFqd8OoU_25jXGSA.crl (hash: JcB+pXXsuSTBKCDW+sD/SPivSZVorkEyn53fq7A0Ras=)
2: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (hash: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:8a:59:bb:f9:8a:6c:3d:e5:32:78:78:64:86:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Sep 22 09:01:46 2026 GMT
Not After : Sep 23 09:01:46 2026 GMT
Subject: CN=94d961ac08ff4ac68fbc8180b046a64010b395e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:40:bb:40:29:30:f5:ee:cc:50:91:d2:18:
68:24:61:ce:38:95:fe:46:c2:13:1e:b4:87:71:b3:
1b:40:26:c8:3d:f7:38:de:f2:e4:b3:ab:d7:22:90:
98:8c:c3:80:8f:59:66:e0:54:95:c3:d6:2b:a6:8b:
4e:69:3d:aa:56:80:41:2e:1b:53:86:e2:e3:24:5c:
dc:be:f5:21:5e:7e:5d:44:da:89:08:e0:0e:ea:95:
0b:a7:eb:87:6d:36:da:58:51:28:3d:b2:5f:ce:8e:
06:d8:0d:83:bf:bf:07:c2:46:04:79:1b:19:64:52:
e3:b7:22:f5:dd:33:c7:b1:90:97:36:f8:0c:89:0d:
6d:9a:f6:15:58:0a:7f:8e:10:4e:a7:1e:48:84:6b:
0e:9a:1f:92:bd:79:3d:c7:a5:e5:d4:34:15:fb:a0:
a0:81:ba:80:f1:ba:86:24:db:21:86:96:cc:8d:3b:
5c:97:3f:60:a9:81:ce:3c:18:c7:a7:e3:6d:16:e6:
cd:2a:01:f3:b6:23:de:6f:73:3b:ef:2c:21:27:d8:
ee:67:0e:ff:a4:59:84:65:2d:63:24:b8:0a:6b:4d:
7e:7e:f8:fc:1b:41:a3:60:01:0b:0b:a1:fe:16:b1:
fd:8b:d7:24:64:1d:fa:98:ad:f7:30:4c:c3:51:b5:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D9:61:AC:08:FF:4A:C6:8F:BC:81:80:B0:46:A6:40:10:B3:95:E0
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:82:0c:6b:8c:8e:12:77:d7:5d:19:de:e8:05:9a:e0:88:04:
c0:41:0e:16:d9:d5:7f:1f:19:8c:06:48:30:57:fb:75:22:25:
37:24:c8:9c:e1:d0:f9:0f:62:32:81:0b:f6:19:0a:07:aa:e1:
c7:0a:9e:39:9c:d3:5f:5d:25:3e:49:e8:da:4a:97:19:eb:b7:
c5:65:45:e5:8c:91:51:84:d3:81:07:6c:52:73:97:c7:29:c7:
bf:6a:6a:32:ad:81:86:b6:6a:a4:e5:3d:1a:1e:d2:b4:d3:60:
ca:f7:44:c3:0f:4e:75:e3:45:d5:f4:98:71:00:c1:1a:5f:b1:
a2:3a:2d:75:39:6a:68:1a:2a:94:06:55:c3:0a:6d:0d:be:8a:
7b:d7:29:46:c0:a6:b9:d4:d0:aa:2a:5b:ae:b1:83:ca:ba:39:
59:09:a3:9c:41:4a:84:35:e2:b0:db:5b:9e:39:a5:4e:c9:15:
93:53:53:5a:c9:50:e4:68:89:d8:bd:bc:e9:f1:2e:c5:df:7f:
64:40:b5:bf:88:03:61:4d:25:2e:96:fa:d9:f0:d9:5f:63:40:
86:05:f3:01:9a:95:1b:9d:68:58:e6:cb:c5:ff:b0:0c:71:6d:
b1:4b:f8:a5:7b:da:6f:54:91:21:e0:af:aa:b7:82:5b:1f:6e:
3b:9a:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:08:11 2026 by rpki-client