Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: m82Wu05ueHe0lV3ddCoAJmunQntutZKWrpZ+zGtCo8Q=
Subject key identifier: B6:69:81:78:54:12:7B:0E:FB:9C:79:83:5F:AE:77:D0:5D:68:0C:33
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 01A0C821991C5E39B7A6AA48A15E7BF4ECDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 16B5
Signing time: Tue 22 Sep 2026 08:00:40 +0000
Manifest this update: Tue 22 Sep 2026 08:00:40 +0000
Manifest next update: Wed 23 Sep 2026 08:00:40 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: c3+8bUSpcB3KT64YDCGtaQbIi6v2VANHA+WtN86Wu6Y=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:99:1c:5e:39:b7:a6:aa:48:a1:5e:7b:f4:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Sep 22 08:00:40 2026 GMT
Not After : Sep 23 08:00:40 2026 GMT
Subject: CN=b669817854127b0efb9c79835fae77d05d680c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:00:ad:42:0b:2b:b8:fd:5b:73:0f:3e:4f:
b0:42:f3:f5:bb:89:79:ef:6f:5b:84:35:1d:c9:bb:
1d:a0:b0:47:7c:ff:b0:c5:d9:d6:e9:06:1d:98:1b:
d0:a8:a1:69:d5:f9:55:70:10:7c:c3:bf:bd:31:0b:
95:9c:17:c6:7b:c8:ce:5b:5c:86:9e:b7:a5:a2:e1:
28:87:b7:33:07:b4:0d:c5:00:5a:75:64:db:79:a5:
f8:81:a5:0e:15:a2:90:1a:43:54:b0:2b:91:cd:8d:
47:27:28:df:b5:85:55:4f:c6:99:45:ab:50:2c:42:
b1:f6:27:2c:64:5b:45:b9:7a:e6:e4:c8:0b:fe:f3:
79:01:a5:60:45:34:36:9d:d6:dd:58:b9:9a:e5:d3:
b5:8e:08:58:61:d9:d9:57:bf:7d:6c:7b:6a:c8:15:
81:71:f8:48:0d:df:95:d3:fc:8f:5e:ae:2a:a7:5c:
9c:3c:82:cf:7c:a6:1c:42:c2:f8:9e:3c:e8:b6:76:
b5:39:b8:b3:11:54:88:b9:86:bb:71:b2:8f:d7:df:
d5:17:a4:f8:b7:1d:a9:71:3f:92:96:94:c1:fb:93:
2b:d3:31:97:05:22:46:e1:4d:1a:14:11:2c:b5:1d:
af:2e:36:c6:f9:cc:dc:f7:b8:5c:4f:ab:6f:7d:c5:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:81:78:54:12:7B:0E:FB:9C:79:83:5F:AE:77:D0:5D:68:0C:33
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:e9:01:cc:c3:07:83:00:22:b5:30:03:ea:aa:c0:59:03:
78:d1:2c:4a:da:ca:d2:9c:64:84:9e:fa:d1:9c:e7:4f:64:ec:
ae:0f:61:8d:69:67:e8:3d:96:3c:9d:fe:a8:50:1d:31:96:8d:
f2:e2:68:87:a9:ab:37:8a:24:fa:b5:a0:69:e6:e1:42:93:87:
0c:87:29:61:1b:6d:97:72:58:9a:af:c0:b9:f0:12:ee:4b:76:
a6:ce:2d:34:1d:e1:98:2d:5f:1d:4b:c5:4d:b0:52:2e:54:be:
c0:f2:d7:2c:6b:35:0e:ce:c4:db:d1:c0:9c:f1:3b:c3:f5:74:
c0:ba:4d:3c:d2:00:e5:20:b0:5c:e1:65:88:0b:f5:8d:c7:05:
90:0c:17:b6:b7:3c:be:e6:3e:d1:e8:4c:0c:82:03:57:1a:94:
36:db:1a:19:cb:28:de:03:9a:e7:89:f2:0e:14:ea:31:f0:cd:
f6:b4:2c:52:b0:28:26:77:a3:b1:09:be:bf:37:df:ce:7d:5f:
ec:c2:5b:86:a1:76:0e:dd:f0:5e:f9:b1:a3:d5:58:02:5a:15:
ea:e3:26:79:9e:2c:a3:49:60:54:45:a4:34:32:2b:b0:65:c0:
8a:1c:e4:08:eb:ff:7e:db:60:f4:a3:5b:b6:67:6c:88:d4:b5:
43:23:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:09:54 2026 by rpki-client