Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: E/bnRT9M3cVKe+Sswum2lI1PriH4AQ7O8K3k0Fv3yAM=
Subject key identifier: 67:F1:DC:22:D5:39:D9:B1:56:24:67:96:95:1D:FA:45:46:1E:72:8D
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019FA9753BB16B5823C9A49A7C0FCEFF478C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 1369
Signing time: Tue 28 Jul 2026 16:00:59 +0000
Manifest this update: Tue 28 Jul 2026 16:00:59 +0000
Manifest next update: Wed 29 Jul 2026 16:00:59 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: ovoXMsaPPqYgucRFz1B9YOqgQKot2l/mkxe86h96Piw=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:3b:b1:6b:58:23:c9:a4:9a:7c:0f:ce:ff:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jul 28 16:00:59 2026 GMT
Not After : Jul 29 16:00:59 2026 GMT
Subject: CN=67f1dc22d539d9b156246796951dfa45461e728d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:5a:8e:f7:e3:a2:7b:7e:0e:27:c7:8a:d4:
c8:e8:4b:87:39:f6:a3:dc:ba:c7:02:2f:09:c4:a5:
68:8e:87:46:ab:1f:ab:20:73:ae:d3:b9:db:35:8d:
29:e6:95:42:4f:c2:2f:5d:77:99:59:1c:9c:36:6c:
0d:8c:7c:5f:f5:97:62:6f:de:e3:74:9d:9f:0c:b8:
4d:8f:c6:5c:ec:86:b5:03:03:50:10:c5:ad:06:4e:
26:af:cd:fb:cc:fa:06:89:67:35:58:34:eb:56:5a:
56:d1:0b:7e:b5:7c:1e:b0:43:3f:92:72:1d:98:db:
d0:08:9c:af:49:ee:ad:60:9b:c5:07:af:59:01:c0:
87:f7:cb:7c:e8:74:f3:eb:af:db:1a:a1:d9:92:83:
7e:ad:46:5e:9c:60:57:99:e8:07:f1:48:fe:9e:6a:
4c:2e:c1:7e:2f:af:cc:71:20:d8:5f:c2:2f:3f:3a:
d6:8d:79:84:b8:10:f5:1f:12:58:88:9e:75:d6:d0:
70:74:e6:71:4b:64:c6:07:51:e9:ee:29:08:4a:d4:
38:11:d1:07:3c:6b:d9:42:e4:82:87:5d:b8:8f:ec:
11:54:a4:df:b6:14:d2:dc:b2:6a:fb:64:e5:be:76:
2d:33:52:3d:b3:4b:12:23:85:8e:e5:7f:39:d0:96:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F1:DC:22:D5:39:D9:B1:56:24:67:96:95:1D:FA:45:46:1E:72:8D
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:3d:e6:cc:6c:ce:1d:8e:62:d1:6e:1a:0d:45:44:49:49:
46:32:98:70:02:5d:27:54:17:6e:f3:65:cc:db:35:cc:d3:a2:
b2:df:15:1f:23:f7:c2:32:37:ca:0a:2f:75:be:fe:45:2b:34:
9b:f2:62:98:41:c4:96:21:7d:4d:90:56:8b:84:0b:71:d1:e3:
72:b4:4f:68:cb:e9:97:c7:e2:0b:98:bc:dc:e8:c3:14:ab:23:
65:60:52:fd:a2:d8:22:c0:94:4d:bf:c9:a8:9b:c0:98:82:3d:
dc:62:a3:9c:1d:ea:2b:4a:fa:7c:ba:9d:e9:77:5a:88:82:41:
42:0c:87:69:3c:58:6a:0e:dd:2b:0f:9d:a5:95:3b:d1:8c:94:
62:8e:4e:a9:94:72:a1:0e:ed:db:13:59:9b:c6:b2:8a:df:ff:
99:62:f3:ab:bb:49:e5:74:bc:9c:72:c8:66:c5:e9:4e:14:e8:
38:49:25:03:03:05:42:bd:e0:43:6c:3d:ac:7d:04:e8:4e:b8:
cf:ff:75:2d:97:bd:fa:81:8b:0f:36:f1:36:54:68:a9:46:26:
e9:12:9f:f7:e6:20:d7:fa:86:64:f1:91:c1:d3:0c:87:fa:fa:
12:7a:f0:d2:85:24:f9:fd:fd:4c:0f:e6:b2:ae:a9:65:a6:bf:
f6:5b:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:41 2026 by rpki-client