Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: CGoW1SoI8/tV9vrVB44fveSuKJTUtQd0qDnEKNHF2rA=
Subject key identifier: CA:37:9A:03:A2:58:43:70:03:43:3C:03:61:C2:E1:E7:98:A3:F8:71
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019FA7F4E3BBE44C4671C11A09132E2A0789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 09:01:11 +0000
Manifest this update: Tue 28 Jul 2026 09:01:11 +0000
Manifest next update: Wed 29 Jul 2026 09:01:11 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: CDULujO1xfRe3mTSvB2XdBe5I8fiZQP6GdNRiMzKsOU=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:e3:bb:e4:4c:46:71:c1:1a:09:13:2e:2a:07:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jul 28 09:01:11 2026 GMT
Not After : Jul 29 09:01:11 2026 GMT
Subject: CN=ca379a03a258437003433c0361c2e1e798a3f871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:ef:b3:f5:1c:64:33:5f:77:66:bc:4d:58:
82:b0:68:dd:bd:0c:f3:f6:46:1a:db:c0:a9:a5:08:
ef:db:66:c1:e9:d0:90:e0:14:f1:16:d7:20:9e:50:
c4:54:7c:ff:d3:a0:b6:31:04:1a:e3:58:6a:a1:5a:
3c:0c:c8:97:57:81:64:5b:ae:00:13:f4:e9:9f:cd:
cb:12:6e:93:28:04:e9:70:bd:66:24:ef:5a:90:a1:
ca:9f:3a:bb:7c:45:d1:1c:7e:6b:d3:9c:18:ba:12:
93:40:cd:e3:18:20:79:ec:ff:97:28:ae:71:41:96:
a9:3a:8a:0c:3b:b5:9d:06:fe:73:51:97:69:bb:1a:
0f:88:6d:79:e4:d2:71:97:66:62:f0:98:15:13:9b:
ce:2a:6a:c2:0d:a0:d7:79:15:da:c1:d1:90:f8:f2:
b5:15:5a:b5:3a:4f:36:62:53:bf:4f:56:b0:63:75:
44:cb:8b:db:c7:9c:e9:6a:49:ed:d8:90:d8:67:39:
a0:c0:69:33:f7:8c:a2:29:47:47:98:ea:1e:69:60:
37:8a:6b:68:cf:41:ce:68:f7:fe:0d:c4:33:27:1f:
84:31:93:45:df:40:cc:2e:1e:f3:9b:17:ed:f5:52:
8d:0a:36:14:6d:15:5d:77:da:d6:ed:67:2c:e0:cc:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:9A:03:A2:58:43:70:03:43:3C:03:61:C2:E1:E7:98:A3:F8:71
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:07:b0:9b:06:ef:03:e7:65:f2:df:68:89:9b:2d:a0:ba:46:
9e:d0:73:af:7f:91:56:27:ad:f5:21:4f:cc:ad:f0:08:80:14:
2a:7d:e9:d7:9d:16:1e:2c:78:11:c0:46:6b:79:52:2d:d9:2c:
b0:21:30:40:1c:52:5f:52:f1:04:18:e2:50:45:7a:bd:86:8f:
4f:21:5e:21:84:61:86:04:86:22:ce:b4:58:15:41:f9:71:d2:
69:7f:86:c9:57:4d:67:d1:91:13:21:e1:22:1c:01:fc:d1:84:
f4:05:26:53:a6:e9:95:45:a5:be:d7:40:32:3f:7d:7f:dc:15:
6f:df:39:b7:ae:b8:78:9b:c2:47:f8:5f:7d:8f:c3:d0:52:14:
3e:60:ae:35:72:1f:00:c0:82:4f:eb:37:c9:76:34:56:3c:23:
7f:47:f1:f3:d3:69:d2:63:92:4f:97:4a:f4:2f:3d:47:37:d2:
90:c6:a6:e7:56:bb:67:63:47:62:ed:f9:91:ec:69:5e:8f:c3:
ea:96:f3:06:34:82:a9:64:3a:f7:22:f8:8d:fe:98:f3:6d:df:
15:54:71:ed:3c:5e:6c:fc:cf:41:c1:3c:a7:b0:32:81:ac:ee:
ac:43:2b:42:5e:48:22:52:39:2e:39:94:b0:57:d3:d7:d3:b5:
2b:33:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:22 2026 by rpki-client