Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: i3s7/4y4vVVFC9H+kfLbqRZBwakzLO14IE2lP9pFy44=
Subject key identifier: 32:9C:21:2E:CC:F2:6C:7C:13:6F:47:1E:19:4F:98:FD:24:50:CC:9A
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 01A0BE0BC25155DD8CD227E76489459C6A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 09:00:36 +0000
Manifest this update: Sun 20 Sep 2026 09:00:36 +0000
Manifest next update: Mon 21 Sep 2026 09:00:36 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: b1suIR5fCzEkdkk0FoRyD5aDyZL5T3gLyTzKdIUsRUM=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:c2:51:55:dd:8c:d2:27:e7:64:89:45:9c:6a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Sep 20 09:00:36 2026 GMT
Not After : Sep 21 09:00:36 2026 GMT
Subject: CN=329c212eccf26c7c136f471e194f98fd2450cc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:8b:bd:5d:f6:f0:92:70:47:cf:b0:be:4d:
31:54:39:55:cb:bb:70:89:38:b0:b4:fc:42:f6:ae:
69:73:f0:fe:f5:4d:f4:19:1b:7d:39:3d:10:48:32:
b3:d0:e4:28:a1:fb:98:fe:b2:58:9f:1e:9f:51:0e:
d7:f1:19:3e:70:f9:00:57:8d:4d:b4:2f:53:9e:16:
6c:34:cf:95:f9:22:08:ad:3e:14:d0:b9:92:55:39:
bf:43:86:f3:fb:88:a2:0f:fc:69:b3:d9:2b:24:fa:
6b:be:ab:d3:78:e8:c5:a0:b7:8d:98:32:28:c3:06:
29:0e:95:06:65:aa:b4:61:46:3c:cf:df:19:b4:e0:
3b:e5:1a:fe:61:c6:5b:8b:e8:87:31:75:a2:d6:9b:
e1:43:86:ed:7c:09:37:91:4b:a0:c7:3d:d0:31:a6:
05:de:ad:d4:cf:30:a0:23:3e:36:f5:78:78:0c:79:
5b:41:99:80:67:c8:37:22:b2:39:7e:56:ae:87:2d:
78:c9:02:d3:ac:07:8c:8a:e1:ca:c6:bc:eb:f5:1d:
83:66:e5:6c:71:da:fe:9a:84:b0:b2:51:7b:b5:11:
4f:05:48:c2:13:27:59:69:c7:7d:f4:73:a3:6c:51:
e1:20:26:76:d0:c7:3c:76:34:a6:91:29:2c:15:33:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:21:2E:CC:F2:6C:7C:13:6F:47:1E:19:4F:98:FD:24:50:CC:9A
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:35:de:b2:4c:83:38:aa:cd:50:2f:5c:ed:a5:31:c1:9b:
1f:2a:29:af:af:5f:9d:6e:59:1b:15:9d:47:b8:b5:b3:73:2c:
64:a2:48:a2:95:38:84:a4:e8:df:b0:bf:13:72:f9:87:f8:31:
33:4b:22:bb:4b:9a:93:ac:f1:30:a6:3c:b5:7d:cf:c7:ce:06:
bb:21:a2:fc:c1:20:40:79:95:9e:f0:ca:fb:c3:34:86:ce:b5:
36:28:38:d5:0f:95:09:bc:ed:bb:5a:78:83:4c:eb:99:57:3d:
5b:e3:d5:59:fa:cc:82:95:6a:6e:76:ed:8e:be:57:81:0c:b1:
37:df:53:3b:ee:d7:ad:5f:48:35:36:08:bc:89:dc:eb:e5:9d:
b0:1b:db:53:d4:7e:b3:67:1b:ba:8b:37:92:41:99:b8:46:82:
06:6d:fa:67:12:c9:cf:f6:96:f4:02:80:6c:32:a9:e9:d9:a8:
56:83:b0:d0:d9:a9:f7:c7:ef:ec:b4:64:e0:d4:46:52:fc:d2:
42:44:95:1b:f3:cc:8a:59:98:a5:4d:0f:9e:ba:e2:c1:dd:85:
22:e3:23:0c:8b:6b:3f:19:87:25:91:db:d3:b2:7c:f8:f2:a7:
16:9c:ef:4d:9d:71:18:81:1a:69:e9:bc:f7:83:1d:af:6c:6f:
81:80:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:13:31 2026 by rpki-client