Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: dBdrW1Fa1pRWC8JMMDz3mWoI3l5EdkQOnW4NVNj3eIE=
Subject key identifier: 2B:96:03:16:31:AF:06:90:EA:0C:73:56:5A:0D:5A:9D:88:A9:64:61
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019CAB3419BD2B28633AA4D6FB01BB0D5F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: Kn4s6liDwNsbbKVO4TdCh0r19b8osThctnPnpKlbl4w=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:19:bd:2b:28:63:3a:a4:d6:fb:01:bb:0d:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=2b96031631af0690ea0c73565a0d5a9d88a96461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:01:c9:85:41:9f:45:ae:27:af:8e:c0:ce:
46:e7:77:af:75:97:ef:75:10:2e:34:d9:54:60:55:
57:e4:be:9e:7a:da:e3:e2:70:93:1a:21:95:0f:bb:
fd:1f:39:e7:4a:76:1b:76:a3:d2:32:b5:f2:76:82:
03:df:f7:7e:38:22:ce:93:c4:6f:9d:27:8c:69:76:
50:f0:af:14:e7:d6:aa:8c:cf:58:00:2d:df:66:5a:
fb:49:93:f4:4f:ed:e7:87:ee:8a:39:1b:ba:c1:4a:
60:ab:c6:41:74:50:a7:64:fc:93:80:27:5c:92:0b:
30:21:03:d6:5d:15:e1:82:89:d6:56:0f:95:19:e1:
57:06:ad:e3:e5:2f:e6:7f:06:06:70:50:21:d4:af:
ce:16:dd:91:aa:61:75:44:53:c8:42:45:a7:27:e4:
79:3c:26:4f:2c:ef:8f:c0:98:f5:9b:ec:77:e7:9a:
f3:07:44:6c:27:0f:3f:fa:77:6b:19:e5:60:4d:3a:
12:ad:e0:ec:e6:5f:83:96:aa:31:be:c8:08:95:6a:
d5:6e:e3:33:bb:d0:c4:4a:2a:10:3b:40:24:dd:d0:
0e:f4:93:e8:2d:a4:3a:7a:c7:ed:7e:ad:cc:6f:a5:
5b:7c:52:c0:7d:24:6c:b7:e9:bc:2b:c3:95:42:ba:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:03:16:31:AF:06:90:EA:0C:73:56:5A:0D:5A:9D:88:A9:64:61
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:51:72:a2:78:1a:a2:58:49:14:17:4f:b0:49:ce:a4:5e:
88:a7:35:b1:d1:4b:cd:93:d0:ee:6e:51:87:2c:99:fc:8d:84:
05:8f:b1:24:24:a1:78:eb:a4:e9:5b:a3:4c:e1:05:72:48:ed:
d0:0e:ce:0c:4d:43:0a:05:d5:7b:ae:40:c3:c4:9f:2e:c0:1a:
d7:8c:bd:68:ea:53:68:76:d5:27:81:1e:26:d2:bd:9f:40:f7:
da:35:9d:a0:4e:72:5a:ea:69:a0:0d:c3:11:69:ba:fd:cb:e9:
87:99:94:b5:bd:bf:5c:03:23:1f:c8:33:b5:da:77:29:6b:df:
a5:68:60:52:28:3d:9b:fc:16:41:fb:2a:f4:d2:f0:2c:80:d8:
62:91:59:3e:98:4c:7b:dd:59:c3:96:d5:bb:3b:92:ae:33:57:
62:fd:c2:9b:21:33:91:d3:fd:8a:11:ff:60:e6:d7:05:d7:ba:
54:92:ca:34:b9:d0:e8:d1:2c:b4:cf:57:5d:f8:8b:9e:1b:02:
00:a5:84:76:bf:93:a2:4e:86:01:23:a5:d3:7e:b2:2d:31:21:
60:80:ee:a9:d6:ac:a7:3e:fa:2f:c0:ed:58:10:cf:38:28:ea:
10:b3:3d:e7:05:ae:ed:12:8f:ca:d0:e9:73:78:8e:d1:77:d9:
2f:83:1b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBm9KyhjOqTW+wG7DV8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj
OTNiODAwHhcNMjYwMzAxMjEwMDQ0WhcNMjYwMzAyMjEwMDQ0WjAzMTEwLwYDVQQD
EygyYjk2MDMxNjMxYWYwNjkwZWEwYzczNTY1YTBkNWE5ZDg4YTk2NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp04ByYVBn0WuJ6+OwM5G53evdZfv
dRAuNNlUYFVX5L6eetrj4nCTGiGVD7v9HznnSnYbdqPSMrXydoID3/d+OCLOk8Rv
nSeMaXZQ8K8U59aqjM9YAC3fZlr7SZP0T+3nh+6KORu6wUpgq8ZBdFCnZPyTgCdc
kgswIQPWXRXhgonWVg+VGeFXBq3j5S/mfwYGcFAh1K/OFt2RqmF1RFPIQkWnJ+R5
PCZPLO+PwJj1m+x355rzB0RsJw8/+ndrGeVgTToSreDs5l+DlqoxvsgIlWrVbuMz
u9DESioQO0Ak3dAO9JPoLaQ6esftfq3Mb6VbfFLAfSRst+m8K8OVQrrnRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuWAxYxrwaQ6gxzVloNWp2IqWRhMB8GA1UdIwQY
MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt
NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll
LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG65RcqJ4
GqJYSRQXT7BJzqReiKc1sdFLzZPQ7m5RhyyZ/I2EBY+xJCSheOuk6VujTOEFckjt
0A7ODE1DCgXVe65Aw8SfLsAa14y9aOpTaHbVJ4EeJtK9n0D32jWdoE5yWuppoA3D
EWm6/cvph5mUtb2/XAMjH8gztdp3KWvfpWhgUig9m/wWQfsq9NLwLIDYYpFZPphM
e91Zw5bVuzuSrjNXYv3CmyEzkdP9ihH/YObXBde6VJLKNLnQ6NEstM9XXfiLnhsC
AKWEdr+Tok6GASOl036yLTEhYIDuqdaspz76L8DtWBDPOCjqELM95wWu7RKPytDp
c3iO0XfZL4MbiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:52 2026 by rpki-client