Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: VyydNo/nQsFp4Vta1KNbH1NzHqlEHGcvpDlatSzgdlo=
Subject key identifier: B5:F5:A7:FB:9D:AC:C1:7C:7B:4B:16:21:2D:08:33:18:45:9A:7A:27
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019CABA2802E085F875A7FB87220B56EED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1494
Signing time: Sun 01 Mar 2026 23:01:19 +0000
Manifest this update: Sun 01 Mar 2026 23:01:19 +0000
Manifest next update: Mon 02 Mar 2026 23:01:19 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 1YUp6nUtEjFqAiwnd0JUzGYElWvWffMHsax1LsfOjNk=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:80:2e:08:5f:87:5a:7f:b8:72:20:b5:6e:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Mar 1 23:01:19 2026 GMT
Not After : Mar 2 23:01:19 2026 GMT
Subject: CN=b5f5a7fb9dacc17c7b4b16212d083318459a7a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:fb:64:f1:7d:60:37:80:56:4d:dc:99:2f:
81:9e:d5:77:ef:f4:8e:5f:f4:1a:c2:a8:a8:a7:5a:
cb:64:6e:97:30:4a:0c:3c:ad:4a:fc:66:6a:0b:19:
42:06:4c:69:9c:b7:a9:b4:18:c1:55:ed:01:19:f0:
e8:e2:ce:15:0b:3d:4c:51:d2:f2:58:7f:01:4f:6e:
85:f0:e4:6d:97:2a:b6:b7:3d:f1:ef:34:58:1c:ce:
77:fd:cf:d0:4f:65:f6:eb:52:cc:87:4a:41:ea:7c:
65:26:81:08:93:97:68:da:cb:3b:58:16:36:4b:78:
d4:0b:d8:60:de:24:11:2c:a8:4e:d3:9e:48:a2:17:
ab:1b:29:7c:c6:29:3a:e9:c2:d6:6a:ee:a8:ad:9a:
63:6e:72:21:d7:be:01:35:67:56:2d:5f:eb:be:ba:
5c:eb:e7:89:bc:91:20:b0:47:fd:6e:31:05:db:5c:
0b:ea:c8:4f:41:a7:e5:62:ca:b3:a1:e7:64:a2:e8:
71:f9:2a:b9:fa:a9:99:cb:43:96:44:db:55:fc:57:
e4:3f:35:91:0d:dc:5c:ee:74:38:dd:95:5e:ce:f6:
d5:d8:c6:b4:fe:da:16:76:22:76:b4:9c:24:da:24:
65:92:fc:0f:e9:9d:94:0c:2b:84:96:b8:54:46:75:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:A7:FB:9D:AC:C1:7C:7B:4B:16:21:2D:08:33:18:45:9A:7A:27
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:34:86:f3:dd:b9:d9:c4:de:2d:a2:26:d2:2b:99:6c:da:
21:9a:4c:4f:b4:1a:4c:c0:0b:72:c2:c1:e6:51:f9:4f:45:b8:
1a:25:67:05:9e:5c:0b:b3:b6:f1:2e:5c:f6:b5:b2:22:72:a6:
fd:0c:45:e8:f0:e9:ff:b1:57:5f:bc:16:d9:0d:e1:6e:34:9e:
64:32:47:59:e8:21:6c:6a:e1:4a:4c:e6:f2:37:1d:3e:ff:6d:
fc:7f:43:c5:c3:58:0f:fd:5f:b1:bd:bf:ef:45:48:c3:e9:bf:
c9:2c:8f:c0:81:59:ce:13:f3:0f:98:6b:0d:af:23:c6:92:63:
1b:0c:52:db:fa:54:2e:d4:95:b3:71:71:04:d9:11:45:7f:73:
6b:00:f4:24:17:bf:50:80:95:b9:22:c0:22:30:99:97:7a:13:
d9:2e:24:bb:82:e8:ad:ef:4c:d8:b5:51:73:15:e6:40:80:5e:
7a:9a:8a:cc:32:ef:bc:83:bd:a0:c9:3a:ea:4b:e3:ee:2d:4e:
e3:40:9b:f0:df:60:7b:fd:83:8a:98:70:cc:1a:64:15:cd:39:
08:47:9b:c4:5d:bb:9d:ae:95:42:d5:a3:52:d5:e5:a4:e4:f6:
b8:b0:07:9d:6f:e8:01:18:67:cb:60:49:42:ac:f8:d8:0a:a3:
e4:08:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:41 2026 by rpki-client