Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File: 28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier: bRXhPj7dlEJ5YLRut6wUFyjzkjwP5MYYRxGZLgMutmY=
Subject key identifier: DE:73:D7:F6:F0:BF:DE:6E:94:D2:FF:12:C8:F0:64:ED:9E:D6:D4:0B
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019FAD1AF2BF5E192B6BD90C13B749156624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number: 01A2
Signing time: Wed 29 Jul 2026 09:00:52 +0000
Manifest this update: Wed 29 Jul 2026 09:00:52 +0000
Manifest next update: Thu 30 Jul 2026 09:00:52 +0000
Files and hashes: 1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: a4OiCDBctZPTqwnfoFw2QCAXx6rlBC9WFFlIywyZXfw=)
2: VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa (hash: PsHxBvZ369SRFDSO+Fj2EJJzFPlfyfCCV/NJdrfL2e4=)
3: rReuKYKAVqr3CoKH5UO-1aSW-mc.roa (hash: fGoH+yub0teNtoDmdJ6CIXMKMtZMJfMpSQSYdG/VkrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f2:bf:5e:19:2b:6b:d9:0c:13:b7:49:15:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Jul 29 09:00:52 2026 GMT
Not After : Jul 30 09:00:52 2026 GMT
Subject: CN=de73d7f6f0bfde6e94d2ff12c8f064ed9ed6d40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:97:5c:0d:0a:b3:3d:54:1a:83:1b:ca:ba:
7a:e5:58:13:12:a0:a6:c3:cd:ea:36:16:1b:2a:e5:
3c:0f:95:96:51:d5:9e:c5:be:b3:57:2e:00:19:51:
fe:b3:a1:34:60:d9:41:64:83:92:f8:f7:9e:a1:32:
29:be:76:44:4c:24:ff:2e:a6:ce:74:90:6d:96:0b:
67:16:26:56:0a:d3:48:76:70:b4:b2:76:55:8f:00:
43:6b:91:5b:2f:22:c5:bf:55:4b:3e:02:32:73:8a:
35:e5:aa:49:18:47:1f:5d:2d:e1:9b:14:41:c6:b2:
49:7a:5b:56:9f:7e:ae:51:b6:2d:02:96:9c:dc:a6:
93:06:4c:a0:a8:35:32:4e:12:49:4b:f8:ad:9d:8e:
c9:1e:17:85:55:dc:0c:08:da:57:d6:37:dd:9d:fb:
0d:ae:06:5a:97:27:0d:75:d8:5e:1e:41:94:df:e9:
e5:c3:b0:70:f1:50:66:b2:40:ef:77:45:3e:58:de:
1e:18:ad:0b:35:38:a5:c3:91:82:ff:75:0b:e0:9d:
92:34:57:a9:f4:9b:62:15:8a:63:c5:e7:62:73:c7:
16:cf:e9:de:d1:4b:d7:87:37:95:ce:08:73:b5:ed:
c3:91:e6:f4:51:06:30:d2:84:38:9d:77:f4:d2:cd:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:73:D7:F6:F0:BF:DE:6E:94:D2:FF:12:C8:F0:64:ED:9E:D6:D4:0B
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:aa:82:ff:71:12:a9:ab:8c:2d:12:3b:18:d8:0c:19:ea:
f4:ed:b7:68:d5:cb:83:02:69:13:f2:17:ad:3a:7d:2a:10:27:
9f:a3:38:23:df:2d:ad:76:82:c4:e1:8e:d1:c2:9e:81:04:bf:
59:28:a5:b4:3d:6f:ad:27:80:d3:20:8b:25:5b:26:98:b8:94:
1c:7d:bd:36:f6:eb:19:be:07:dd:41:82:4c:62:49:90:1b:ab:
d6:75:54:d6:70:51:64:58:9f:a3:20:ac:50:70:9a:5e:06:db:
3a:70:8e:d8:60:96:19:42:79:cf:ff:31:92:5b:ff:51:34:40:
cb:ad:82:81:bb:b4:4e:36:73:e7:fb:20:a2:8f:2d:53:97:88:
ce:5e:d4:c9:6d:dd:41:c9:8c:86:ce:f6:56:bc:6b:c2:be:e5:
d7:8e:ea:9a:a0:6f:56:dd:9c:27:49:23:ce:6c:94:32:a8:f5:
5f:2f:71:05:ae:b8:8f:38:03:c9:f3:a6:5f:75:f9:ec:72:8b:
a1:2a:33:37:bf:50:d8:dc:09:ad:fc:10:0d:4e:60:80:b7:dd:
5a:1c:24:85:bd:ce:e0:3e:c8:e5:6c:63:14:78:7e:bd:e0:3f:
b7:60:0e:eb:cb:0a:8e:26:f8:01:1b:b2:b7:9c:92:d3:11:04:
92:b2:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:45 2026 by rpki-client