Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: EVdzR6RN2O3w1DW6UqhgRFksbASh/1DFOLTYJez/Ikg=
Subject key identifier: 9F:E4:27:FF:72:89:09:8D:3E:7B:5C:6B:DB:D0:87:AB:A2:14:58:10
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019CAAC6D41FCEA188BCCE906B446F631D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 11DC
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: ImvTEioI2ghXHF74y5MMyEy9Mllkuw+XaJOinwgPOzc=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d4:1f:ce:a1:88:bc:ce:90:6b:44:6f:63:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=9fe427ff7289098d3e7b5c6bdbd087aba2145810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:fb:fa:33:e4:2f:b0:9e:84:3c:9a:27:9c:
3e:8b:15:59:30:76:73:b2:3a:26:a1:09:a9:3a:96:
f3:00:8e:21:fa:2b:45:41:e6:7b:2c:95:07:bb:07:
46:7b:cf:3e:2f:65:33:c1:c7:bd:09:16:76:71:3a:
c3:89:5c:91:db:87:58:a0:1a:f3:d4:f0:a0:92:c5:
52:e4:e5:5b:2f:42:d1:dd:15:2d:c8:50:bf:a9:64:
0a:6f:64:d3:f9:f3:96:38:7d:fc:37:5c:13:eb:4d:
b9:ae:fa:d4:d2:4f:eb:9e:7e:d4:9c:8a:86:74:dc:
1e:13:9e:47:0d:35:1b:80:98:09:46:18:2f:4d:3a:
98:e2:21:7d:ba:ab:bd:ab:54:58:2e:58:c9:e2:45:
9c:65:90:bf:5b:a4:d1:cf:d7:2e:36:81:90:85:32:
32:18:86:8d:0c:6f:00:f6:d0:47:2d:77:03:ee:44:
29:d9:eb:2d:35:dc:7d:a6:2b:fb:bb:39:e0:10:25:
36:8b:6c:63:4a:fe:17:a6:d0:f7:9e:19:ed:b7:0f:
8b:5d:38:a5:d8:a1:8c:a1:d5:57:09:ea:93:05:68:
83:17:0a:b9:92:ca:21:2c:e0:18:90:ee:2a:b8:b1:
0c:75:94:41:a8:df:69:39:24:76:0a:21:c3:c4:db:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E4:27:FF:72:89:09:8D:3E:7B:5C:6B:DB:D0:87:AB:A2:14:58:10
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f7:da:25:8a:ea:cd:57:37:78:04:55:b2:2e:f5:43:8f:93:
ff:0a:0b:8a:23:e9:20:32:7e:37:a4:0f:e6:27:af:fc:68:ac:
b0:43:ea:49:8b:07:b9:26:0f:4b:fd:bc:55:d9:60:55:75:66:
9c:d6:57:e2:ae:5f:5c:9a:37:9e:97:8d:a8:90:42:e1:b1:1e:
d4:59:17:2a:85:8e:5e:89:df:82:52:fe:83:45:62:49:4a:cd:
55:a9:62:43:48:3c:03:00:d1:a3:14:c1:3d:ac:72:c7:d6:73:
d3:bb:d6:c0:4f:06:ca:63:80:0b:54:3c:37:67:58:5c:84:07:
1d:5e:4a:b3:ce:2b:0d:b3:df:c2:e2:38:1a:38:7d:44:8a:3e:
43:f8:05:38:2a:e9:f8:e4:6e:5b:1a:93:26:a3:7e:75:8a:22:
10:d7:95:54:fb:f0:e2:68:a4:68:f1:0c:ce:38:23:cb:ba:ab:
b0:dd:86:49:6f:a1:d5:80:71:12:6d:19:6a:2d:a3:52:84:89:
c6:13:9b:14:4d:6b:bf:08:5e:08:c2:ed:b5:ae:62:22:b9:5a:
f8:94:cf:a4:b7:da:be:e8:16:cf:91:0e:5e:15:b5:9f:23:31:
d2:03:85:0d:12:0a:88:69:55:d5:a4:2a:02:37:59:4d:2a:61:
a1:57:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:45 2026 by rpki-client