Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: hdxzgYqMtk9waADnmZFLT1vTNZMpTFj36S4FcGRydtM=
Subject key identifier: 3D:CE:A6:22:34:71:06:29:55:14:33:CD:A1:28:AB:F4:86:AA:2F:45
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019D992B1F74E7E7CFAB3DDBCA42D099983B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 150F
Signing time: Fri 17 Apr 2026 02:00:33 +0000
Manifest this update: Fri 17 Apr 2026 02:00:33 +0000
Manifest next update: Sat 18 Apr 2026 02:00:33 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: q21NJe8w+pHn7mDftSEGRx6vO/VLq013HOQHgvTSRyk=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1f:74:e7:e7:cf:ab:3d:db:ca:42:d0:99:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Apr 17 02:00:33 2026 GMT
Not After : Apr 18 02:00:33 2026 GMT
Subject: CN=3dcea62234710629551433cda128abf486aa2f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:29:b0:a5:b8:d6:b8:53:ad:26:b3:60:26:
87:a8:15:c9:58:dc:a7:15:f1:5e:c1:9e:6e:f3:70:
46:eb:3d:e0:f6:b0:92:8c:0e:05:d7:95:38:e7:f0:
ca:04:78:c1:9f:a2:07:87:f8:f6:61:21:12:e4:e1:
7f:75:87:7d:c1:ed:0b:0b:a8:94:4e:bf:e2:a4:8e:
c3:e1:a2:ec:0c:a3:ea:e2:62:f1:01:07:51:fd:d7:
78:83:2f:28:5c:05:6a:2c:80:5f:78:8e:0b:03:e9:
09:8e:67:9f:d8:73:c1:02:2f:3c:ba:42:6b:6c:ca:
30:c1:ab:ce:ae:6f:32:96:d4:f6:e7:d2:2a:45:a9:
5d:88:f9:5c:6d:54:5e:e8:99:4b:3a:5e:18:7e:0d:
df:f4:9b:5a:6b:fb:45:8b:d0:4e:c5:4e:8e:5c:43:
54:da:74:c3:e8:77:2b:15:e8:3e:46:44:27:70:65:
e7:bf:ce:af:f8:e9:63:bd:55:03:7b:49:fc:6b:11:
6f:6b:98:33:11:52:3d:39:34:f3:11:3e:4a:9f:6c:
9b:d5:fa:36:f4:82:d7:24:3e:bf:03:f0:d7:14:f8:
7f:d6:3c:ef:2b:64:50:fe:e7:3e:f0:6e:29:2e:ab:
0f:9d:17:6b:f7:ab:fd:ce:c4:70:65:46:9c:da:6f:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:A6:22:34:71:06:29:55:14:33:CD:A1:28:AB:F4:86:AA:2F:45
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:10:cf:c4:0c:4e:d4:1b:29:d7:3f:b6:19:84:e9:8b:b6:01:
e5:b1:9e:f3:f4:b0:6e:2f:dc:ef:3d:87:97:79:2d:bd:76:2d:
dc:74:95:d8:76:47:b3:7e:e0:ee:29:b1:79:f2:5a:ea:ed:0b:
e2:37:ce:50:15:ac:4c:a7:17:ef:ea:95:5b:4d:4e:ad:60:dc:
b5:ef:23:80:54:4c:ea:cc:0b:4c:30:ef:62:c7:ca:8b:94:48:
e2:ec:3a:71:ec:99:0f:ee:1a:bc:7e:a9:94:b2:02:74:6d:e0:
e3:06:b8:01:e3:45:3f:c8:52:0f:2e:42:1e:b8:50:6a:a7:bf:
ca:37:82:4a:ed:76:35:6e:49:96:5a:bb:15:a9:ae:2d:4e:a8:
96:8a:37:59:dc:e1:cf:6d:93:89:03:c0:0c:8e:c7:5e:b1:53:
3d:fb:a5:49:58:1e:d5:dc:0c:a7:7b:b6:22:db:65:4b:73:48:
b5:7c:d4:62:8f:66:84:b7:a1:a2:b9:bc:53:56:75:83:e5:bf:
c8:29:7c:29:eb:58:d1:db:1c:05:64:24:87:ef:3d:b9:18:89:
65:e5:09:52:d7:c9:55:a9:ce:d1:69:63:70:b5:98:58:9c:ff:
1e:69:64:ad:20:fb:2f:7c:f0:4d:50:69:a7:4d:f2:44:07:66:
84:52:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:15 2026 by rpki-client