Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: bZ7UhzQkCCp5gI4qqzSBrfQq1H4N6qGm1YcIs1PIWiU=
Subject key identifier: 27:21:E5:09:D6:86:29:73:28:91:F1:82:C7:50:BF:51:46:A2:72:73
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019FA8628543C05856DF223122617061CFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1620
Signing time: Tue 28 Jul 2026 11:00:56 +0000
Manifest this update: Tue 28 Jul 2026 11:00:56 +0000
Manifest next update: Wed 29 Jul 2026 11:00:56 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 8M5ldhmU/LcfvtoePunRCJeSYiDdOZUGlanDDxEpuM0=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:85:43:c0:58:56:df:22:31:22:61:70:61:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jul 28 11:00:56 2026 GMT
Not After : Jul 29 11:00:56 2026 GMT
Subject: CN=2721e509d68629732891f182c750bf5146a27273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:46:e2:32:76:ef:79:cd:da:42:0e:77:89:
38:ea:d7:a4:60:88:76:68:46:77:88:fe:29:87:bc:
b7:7a:94:72:c3:9f:9b:13:4e:76:42:e4:3f:ff:12:
68:51:50:a7:b5:62:14:38:7e:bc:5f:2b:2b:8c:a3:
3e:8f:cf:75:93:08:74:7c:40:5f:7d:fe:e2:79:26:
6b:26:10:a5:74:d8:af:91:8c:0d:e6:b5:f1:d6:83:
a2:87:77:89:4b:1d:09:ff:7c:fb:a1:02:47:52:9d:
e8:bd:c3:08:2a:4b:f6:d3:4c:c3:b1:f1:1a:e8:4d:
9f:91:13:86:b2:1a:65:36:e0:97:36:0f:9a:f1:94:
0e:a9:2a:54:cf:76:22:0a:ef:80:ec:63:8e:9f:40:
6a:bf:c8:f1:af:6a:be:7a:43:7a:d3:8d:ea:3b:75:
3f:55:57:51:7f:06:04:f6:cc:45:0e:da:05:01:4b:
f9:82:07:32:e2:39:e9:14:83:99:a3:99:df:77:0f:
15:ed:82:4e:26:85:a9:07:46:2d:40:46:c0:1b:15:
ec:7d:c9:4e:f8:f0:c4:ee:f8:7a:5c:94:8a:8c:38:
5a:da:29:f4:ac:0c:15:fb:7b:bc:d1:88:1f:45:ec:
61:b7:eb:a4:00:28:62:04:70:83:e5:49:60:84:fb:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:E5:09:D6:86:29:73:28:91:F1:82:C7:50:BF:51:46:A2:72:73
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b7:48:f7:fb:a0:44:91:e3:78:bc:8e:e4:fb:9f:ee:7f:5e:
3d:9d:d8:a2:7a:b6:bb:76:df:f2:5d:d2:9f:73:00:f3:65:cb:
e1:f3:be:46:a7:ef:a5:ae:70:61:93:d9:2a:06:52:be:66:de:
7e:c0:5e:19:12:7d:79:a6:09:b3:c4:ac:45:e0:93:f7:c4:81:
3a:8b:a5:ce:14:b1:f0:fc:bd:71:03:80:3a:5c:29:e6:46:73:
05:b5:aa:5d:18:e3:c3:5a:bb:35:21:5b:e7:ab:a2:58:6a:33:
14:e1:b0:4f:2c:8d:18:0e:6b:e2:29:36:88:4a:f0:2e:71:bd:
10:f2:11:6e:39:53:ad:80:86:74:2e:0d:02:c7:30:77:bf:7f:
d2:51:59:be:e0:c5:f1:bc:4f:85:b5:d3:9c:98:fb:6f:d9:09:
92:ff:d6:48:61:38:5e:76:1e:5a:9d:13:81:84:d6:d4:4c:05:
c8:78:11:74:a4:41:e8:1b:0f:55:90:e1:92:94:bc:3f:9c:d3:
b2:05:b1:6d:48:98:5e:5a:2f:55:81:b7:46:47:66:57:3a:70:
ff:d4:68:a3:cf:16:83:1a:01:33:22:b7:c4:6c:f1:86:02:b3:
3f:f6:3e:98:f6:c9:12:3b:fb:20:6f:7a:8d:e1:2f:58:75:bb:
f6:1e:ee:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYoVDwFhW3yIxImFwYc/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjYwNzI4MTEwMDU2WhcNMjYwNzI5MTEwMDU2WjAzMTEwLwYDVQQD
EygyNzIxZTUwOWQ2ODYyOTczMjg5MWYxODJjNzUwYmY1MTQ2YTI3MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4JG4jJ273nN2kIOd4k46tekYIh2
aEZ3iP4ph7y3epRyw5+bE052QuQ//xJoUVCntWIUOH68XysrjKM+j891kwh0fEBf
ff7ieSZrJhCldNivkYwN5rXx1oOih3eJSx0J/3z7oQJHUp3ovcMIKkv200zDsfEa
6E2fkROGshplNuCXNg+a8ZQOqSpUz3YiCu+A7GOOn0Bqv8jxr2q+ekN6043qO3U/
VVdRfwYE9sxFDtoFAUv5ggcy4jnpFIOZo5nfdw8V7YJOJoWpB0YtQEbAGxXsfclO
+PDE7vh6XJSKjDha2in0rAwV+3u80YgfRexht+ukAChiBHCD5UlghPszTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCch5QnWhilzKJHxgsdQv1FGonJzMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrdI9/ug
RJHjeLyO5Puf7n9ePZ3Yonq2u3bf8l3Sn3MA82XL4fO+Rqfvpa5wYZPZKgZSvmbe
fsBeGRJ9eaYJs8SsReCT98SBOoulzhSx8Py9cQOAOlwp5kZzBbWqXRjjw1q7NSFb
56uiWGozFOGwTyyNGA5r4ik2iErwLnG9EPIRbjlTrYCGdC4NAscwd79/0lFZvuDF
8bxPhbXTnJj7b9kJkv/WSGE4XnYeWp0TgYTW1EwFyHgRdKRB6BsPVZDhkpS8P5zT
sgWxbUiYXlovVYG3RkdmVzpw/9Roo88WgxoBMyK3xGzxhgKzP/Y+mPbJEjv7IG96
jeEvWHW79h7umw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:06 2026 by rpki-client