Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: gjrM0Y7iIXbVcowYFS1Z6FWM7LyW1DsXO+y66jiv+QA=
Subject key identifier: BC:E0:07:64:FA:D9:B7:A8:66:F5:24:B3:7F:B1:12:C9:E3:56:88:19
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019D98BDE30B57B7F0DCF08C2B92E46C6FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:14 +0000
Manifest next update: Sat 18 Apr 2026 00:01:14 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: a3RKuvVHloMqf/VeI7YyXd6htBr7ayTAh/LF4F7tF6c=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e3:0b:57:b7:f0:dc:f0:8c:2b:92:e4:6c:6f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Apr 17 00:01:14 2026 GMT
Not After : Apr 18 00:01:14 2026 GMT
Subject: CN=bce00764fad9b7a866f524b37fb112c9e3568819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:e2:94:4b:b4:1e:81:bc:54:90:d4:3b:23:
c4:2f:4c:ee:a3:86:4b:d4:f2:54:23:90:48:3d:73:
4d:68:e0:e5:20:1a:f9:4b:f6:ea:71:fc:9f:86:3c:
d9:65:1f:51:f7:0f:14:f0:e9:49:d3:93:3a:37:34:
fc:9f:11:58:92:be:a1:2f:1a:6a:54:32:d0:1d:c0:
89:71:74:cf:0e:9f:a4:28:c6:e3:ca:71:77:46:8a:
94:c5:9f:32:f5:37:6a:07:10:38:c4:26:ac:2d:dc:
55:d6:83:1a:65:3d:8e:18:7c:39:dc:43:86:65:d6:
5e:3d:02:55:75:71:8a:21:b2:70:d6:db:6a:f2:64:
2d:31:60:66:73:48:4a:5f:47:e0:60:f4:6b:17:e5:
57:b2:a8:27:b4:c3:f1:92:12:a4:7a:a8:12:2f:8d:
89:ea:d3:10:b9:a8:09:0a:20:66:7c:b9:5f:a1:7a:
1b:06:ba:37:6b:84:f5:3c:98:0c:3c:06:df:9f:d4:
44:42:09:33:e9:6b:c8:7d:2e:43:bb:f1:4c:40:69:
32:c2:d4:22:0e:40:da:28:84:f4:ce:8d:ad:38:59:
27:ee:77:52:17:af:db:f0:b9:91:6e:89:41:4c:d8:
7c:ad:cb:ee:e3:8c:5a:5f:0a:fa:38:15:b4:f0:b1:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:07:64:FA:D9:B7:A8:66:F5:24:B3:7F:B1:12:C9:E3:56:88:19
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:90:cc:86:e7:8c:f1:cd:59:a7:78:18:9f:f3:b9:bc:d2:0c:
0d:b5:7e:8d:82:fa:aa:04:5a:87:a1:da:b1:77:19:4a:ad:53:
07:dd:0b:52:21:8d:cb:4f:d8:cf:72:62:30:9f:9f:5f:c3:cc:
7f:96:74:53:d3:16:80:19:c4:b3:2d:5a:28:25:17:82:dd:0e:
6c:c7:40:d2:d0:ae:88:75:c8:48:ff:75:14:bb:ba:87:2c:53:
24:e4:b6:8e:d2:73:b2:b9:3b:45:e3:90:4a:73:f0:57:56:b5:
f9:53:e6:d6:30:53:e4:5e:90:5f:c0:74:a4:43:e3:17:25:a1:
51:c7:e8:0c:87:cb:80:2d:f0:a2:32:e5:ca:c9:51:d5:29:fd:
97:9a:34:f3:a7:cf:16:18:0e:50:63:91:55:cf:fb:6c:31:e4:
d3:9b:3c:5d:82:f1:1c:44:fa:24:86:01:f8:8b:26:4c:22:27:
40:67:12:4d:96:2a:79:31:e9:cf:5b:bc:24:58:db:5d:8c:7f:
a5:58:bd:b3:dc:d9:82:f8:d6:23:9a:f6:89:0f:d2:84:7d:23:
02:1c:67:da:8b:e6:f1:14:bd:b5:5f:6b:ad:c7:7d:59:79:e2:
3e:48:40:85:a6:31:e8:0e:f9:a8:ae:31:26:b8:69:84:b1:6c:
90:53:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:09 2026 by rpki-client