Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: q9SQ3Txt11UaZyPfWevzhUxzaWShWGjGMfI6d7mVF0c=
Subject key identifier: 34:AB:E7:12:3C:96:8A:7C:94:08:0E:E1:79:0B:2A:67:CC:12:C1:6B
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019D9A3EADC04F3DCD1201A424C295327DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 1258
Signing time: Fri 17 Apr 2026 07:01:32 +0000
Manifest this update: Fri 17 Apr 2026 07:01:32 +0000
Manifest next update: Sat 18 Apr 2026 07:01:32 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: DQZh9Ksyl2+H5XwWV1Hy3oBMU21ytimx+sRfto74v90=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ad:c0:4f:3d:cd:12:01:a4:24:c2:95:32:7d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Apr 17 07:01:32 2026 GMT
Not After : Apr 18 07:01:32 2026 GMT
Subject: CN=34abe7123c968a7c94080ee1790b2a67cc12c16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:8b:aa:16:35:e7:21:94:19:da:46:9e:3a:
e1:11:41:31:a4:b1:a9:9f:ef:24:45:0d:35:f2:df:
99:02:ac:7f:07:a3:8e:4f:cc:9c:0c:ab:b5:aa:50:
d7:24:3a:01:cb:2e:c1:a2:9d:86:ae:d4:c9:fe:a3:
75:37:99:66:46:ef:74:34:55:3e:2e:e0:f5:97:d8:
41:cc:79:69:1d:b7:ec:12:16:47:8c:48:56:fe:e5:
66:5f:3c:a1:fd:de:73:23:18:ee:f6:bc:14:d9:d0:
1f:8e:e4:f5:38:18:b1:3d:fd:99:de:44:46:32:6f:
dd:e0:0b:ed:26:67:66:48:1e:d8:1f:d2:af:06:cc:
11:27:0d:6f:24:52:6c:38:62:a4:13:33:f5:1b:de:
69:15:26:cd:35:ec:a3:61:9e:e0:0b:f9:43:96:4a:
37:aa:23:15:7e:ae:c2:56:ef:63:97:83:67:7e:af:
0e:ef:f3:8d:fa:d5:9d:73:22:85:93:c3:80:51:08:
d1:96:2e:7f:1c:ad:01:57:16:a9:08:16:03:45:cd:
96:8e:1a:f6:d5:67:e5:0a:98:ce:43:7d:1d:55:06:
c7:2c:69:11:95:9d:a9:d5:e4:fb:d7:de:45:4f:be:
9c:5b:76:b4:67:2e:b2:ab:03:b8:3b:1c:b9:e7:ce:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:E7:12:3C:96:8A:7C:94:08:0E:E1:79:0B:2A:67:CC:12:C1:6B
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:43:be:3d:89:e5:64:c2:ab:14:98:56:23:62:b1:38:b2:e3:
d8:59:ac:27:35:fc:fe:79:d2:50:aa:e4:4c:c6:1f:51:77:75:
29:b7:9a:10:18:7d:aa:b6:22:9a:26:df:81:ad:24:ef:eb:f4:
b0:10:89:a5:db:43:c5:99:cb:86:3e:ae:a9:ae:cb:23:be:b5:
e5:3b:07:55:1f:9a:32:72:2e:2f:e9:6b:dd:ac:5e:88:e0:ea:
85:3c:63:92:2e:b8:82:bf:47:96:21:ff:c5:42:b6:6b:b7:62:
cd:91:a6:44:7f:8f:56:34:8f:00:53:9e:dd:48:d4:10:25:a6:
1e:7a:d9:19:08:e0:ac:6b:7b:fd:42:71:68:3e:9b:1c:86:24:
1b:cb:df:e5:01:ab:0c:10:24:e0:06:cd:cb:b9:4f:56:21:aa:
09:a3:b4:25:e3:79:dd:31:33:8b:b2:be:98:f2:80:db:e5:54:
e0:e2:30:ce:0f:11:ba:85:d9:ea:15:5c:b5:ca:cc:c2:01:a1:
8d:a4:fb:a8:56:68:3d:52:bc:1e:33:ca:bb:10:2b:6c:d6:00:
89:0a:f3:83:b3:80:40:41:65:9c:a4:62:55:53:25:95:63:49:
2c:69:41:71:79:07:4e:70:25:22:84:1d:b6:e5:41:2a:57:a8:
5e:60:37:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPq3ATz3NEgGkJMKVMn3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjYwNDE3MDcwMTMyWhcNMjYwNDE4MDcwMTMyWjAzMTEwLwYDVQQD
EygzNGFiZTcxMjNjOTY4YTdjOTQwODBlZTE3OTBiMmE2N2NjMTJjMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuGLqhY15yGUGdpGnjrhEUExpLGp
n+8kRQ018t+ZAqx/B6OOT8ycDKu1qlDXJDoByy7Bop2GrtTJ/qN1N5lmRu90NFU+
LuD1l9hBzHlpHbfsEhZHjEhW/uVmXzyh/d5zIxju9rwU2dAfjuT1OBixPf2Z3kRG
Mm/d4AvtJmdmSB7YH9KvBswRJw1vJFJsOGKkEzP1G95pFSbNNeyjYZ7gC/lDlko3
qiMVfq7CVu9jl4Nnfq8O7/ON+tWdcyKFk8OAUQjRli5/HK0BVxapCBYDRc2Wjhr2
1WflCpjOQ30dVQbHLGkRlZ2p1eT7195FT76cW3a0Zy6yqwO4Oxy5587+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSr5xI8lop8lAgO4XkLKmfMEsFrMB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0O+PYnl
ZMKrFJhWI2KxOLLj2FmsJzX8/nnSUKrkTMYfUXd1KbeaEBh9qrYimibfga0k7+v0
sBCJpdtDxZnLhj6uqa7LI7615TsHVR+aMnIuL+lr3axeiODqhTxjki64gr9HliH/
xUK2a7dizZGmRH+PVjSPAFOe3UjUECWmHnrZGQjgrGt7/UJxaD6bHIYkG8vf5QGr
DBAk4AbNy7lPViGqCaO0JeN53TEzi7K+mPKA2+VU4OIwzg8RuoXZ6hVctcrMwgGh
jaT7qFZoPVK8HjPKuxArbNYAiQrzg7OAQEFlnKRiVVMllWNJLGlBcXkHTnAlIoQd
tuVBKleoXmA3FA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:27 2026 by rpki-client