Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: 62G+x56mFk5Wm/7MUWJ0cDXdUFYGrcgKzbwoGpX/PMA=
Subject key identifier: B9:89:49:FA:9E:05:15:17:0D:38:F0:03:CF:90:A7:01:2C:DB:1C:37
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019EBEB604580DB3834F9C9B2F8D978F2B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 15A7
Signing time: Sat 13 Jun 2026 02:01:00 +0000
Manifest this update: Sat 13 Jun 2026 02:01:00 +0000
Manifest next update: Sun 14 Jun 2026 02:01:00 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 5ZC4DV2bqL60ml/BGyFpYaGolih91TfwSgr8p1/2sWg=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:04:58:0d:b3:83:4f:9c:9b:2f:8d:97:8f:2b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jun 13 02:01:00 2026 GMT
Not After : Jun 14 02:01:00 2026 GMT
Subject: CN=b98949fa9e0515170d38f003cf90a7012cdb1c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:11:8d:f9:3b:e5:c0:68:3b:bd:44:16:c4:
a1:a7:8b:7f:60:f3:f9:10:3f:4f:b8:15:69:b7:65:
1a:82:de:a2:6f:80:8b:23:d9:d1:b5:99:1e:d9:6b:
42:e2:1f:49:33:13:22:7b:fe:9e:14:fe:12:fe:1c:
5c:4d:87:f8:86:de:26:d3:b2:89:77:3e:fc:f3:5d:
b1:54:b4:8c:e6:78:38:96:09:08:f2:96:a8:e4:cc:
83:71:9a:0b:5c:5d:08:13:dc:08:b4:14:d7:a9:03:
b3:fc:9e:f2:ea:a7:32:ce:8a:4b:3b:d6:e8:19:14:
fd:8f:36:58:b3:34:b0:57:d0:94:2a:4e:63:d0:b6:
cf:77:6e:57:bb:ad:72:57:24:d4:a7:f5:67:77:c7:
b5:4d:90:23:6e:8e:d3:b0:45:c8:5c:b6:85:88:8d:
38:bd:50:7b:27:3c:d0:1c:75:82:85:1e:d7:c3:0e:
43:5d:df:b7:bd:d2:49:f1:d6:1b:10:1b:f2:a7:03:
2f:cf:56:10:4e:84:ad:6f:38:b1:2c:26:96:2e:3e:
dc:d5:6c:14:4f:cf:68:5e:d4:03:58:23:85:e7:6b:
13:fc:8c:5e:6c:26:c3:3f:44:dc:66:95:fc:dc:1e:
15:4a:7b:16:f9:a7:f6:ec:70:e1:97:b6:44:69:04:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:89:49:FA:9E:05:15:17:0D:38:F0:03:CF:90:A7:01:2C:DB:1C:37
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:0d:7e:ad:0d:22:fe:75:bc:aa:5f:26:72:44:66:f0:2d:
a6:ba:9e:5a:bd:f9:e0:97:13:78:90:1f:94:ee:19:07:27:33:
ba:e7:74:14:1c:6c:f4:cb:f5:5f:fe:9b:30:50:b6:2b:f3:44:
36:c8:84:9a:bc:df:03:79:5a:37:e7:fa:05:b9:8d:2a:4a:cb:
a6:b5:a0:bb:42:6d:cb:57:08:0f:f6:b7:f6:a9:bf:f3:3d:4c:
05:ed:ba:99:a3:ef:a7:a0:3f:58:32:77:5e:c5:75:a9:b5:3e:
86:2a:62:d1:05:c5:fc:e0:34:2f:96:a8:71:e4:cc:73:78:ad:
08:b8:f0:79:01:bc:49:c2:e4:a3:66:ed:93:28:0d:e1:1e:c0:
53:c8:0c:dd:96:d9:07:f0:ea:8f:30:e5:2d:a5:36:a3:46:e0:
1c:6c:02:1c:3f:43:4b:c9:9f:bf:7c:3f:7c:5c:26:34:fc:57:
fd:f5:a3:e9:41:6e:e6:cf:9f:bf:4f:5d:77:df:eb:e0:eb:0b:
1c:f3:2c:67:8e:05:49:50:59:7b:30:04:3c:43:80:94:25:d0:
4f:c0:56:06:30:1d:4b:7c:19:14:d8:cc:82:8d:ae:86:67:14:
81:cb:42:74:6b:44:4e:45:90:05:80:e0:cd:68:43:5c:ee:e3:
09:62:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:32 2026 by rpki-client