Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: 2f4Bl1U0BUferBVya3i6Sfqaj3ML3C+5lt/HpJRK9Z4=
Subject key identifier: C8:66:35:6C:C0:72:1E:F3:5A:15:BD:94:C5:25:D7:CA:1E:8F:DD:D2
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019EBFC913CBBEFE4D8CBBB8BD5CBB7D2CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 12F0
Signing time: Sat 13 Jun 2026 07:01:26 +0000
Manifest this update: Sat 13 Jun 2026 07:01:26 +0000
Manifest next update: Sun 14 Jun 2026 07:01:26 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: 8e09h/a8oimmxKi4F9KlwF4r+G3Zp7Gey/LRkPL5OYY=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:13:cb:be:fe:4d:8c:bb:b8:bd:5c:bb:7d:2c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jun 13 07:01:26 2026 GMT
Not After : Jun 14 07:01:26 2026 GMT
Subject: CN=c866356cc0721ef35a15bd94c525d7ca1e8fddd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:a3:1f:52:fa:5c:2f:45:1c:85:a3:12:82:
0f:e0:91:3b:e8:a0:99:e2:e0:49:94:ed:f0:6b:59:
c1:c6:a1:eb:31:8c:5e:63:b8:87:93:1e:77:e9:84:
a0:5f:b6:ba:84:c5:51:ea:70:de:d7:a0:d2:4f:18:
f0:f2:68:93:5c:04:63:1f:2e:05:c2:fa:55:5f:4f:
5a:e4:eb:c5:82:a4:4b:2e:ba:62:e5:b2:da:7b:48:
29:93:61:c4:0b:6e:c0:22:74:0d:e0:b7:3c:9a:74:
64:30:6a:21:22:af:d7:c8:67:1b:ee:f9:82:3b:3a:
d4:32:cb:93:95:39:05:3c:89:41:30:c1:1b:3e:c6:
6d:2a:3e:56:0c:0c:6b:3d:98:67:35:bc:97:65:b5:
71:b7:40:4f:3d:49:c9:3a:46:03:02:cf:c9:ac:2d:
07:09:ac:69:28:e1:bb:9d:74:ce:ce:20:20:76:5f:
24:46:7b:93:83:43:48:6e:52:a3:eb:51:dc:de:ef:
21:63:c0:aa:28:f0:55:2a:46:40:d0:aa:a3:23:ce:
b2:51:83:98:b2:3b:7f:cf:05:7a:ae:b6:17:9a:b5:
eb:1b:57:87:a0:f0:44:b3:e0:5d:01:29:5f:a6:95:
13:a2:a1:c9:cb:08:76:cc:7e:e2:ee:ad:63:5e:72:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:35:6C:C0:72:1E:F3:5A:15:BD:94:C5:25:D7:CA:1E:8F:DD:D2
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0c:32:26:b9:78:57:19:0c:15:bd:a7:d6:5c:fb:f0:06:cf:
6c:75:51:85:ae:a7:06:c5:81:28:d2:ec:9e:31:e5:a5:5e:9f:
a9:78:d4:2a:42:6b:3e:48:e3:22:e1:7d:d7:d8:43:52:69:57:
35:0e:0d:a5:1b:4d:8b:85:e3:1b:aa:db:8d:76:a9:89:5d:fd:
3f:27:ab:3b:19:cf:59:59:33:39:01:93:09:74:91:9d:bd:70:
9a:e9:a3:72:a1:2f:c8:6d:64:6d:c1:08:43:37:6a:81:4f:a1:
08:02:ca:d4:76:c9:b8:e7:9d:f6:88:b7:41:49:ef:10:46:1a:
36:ca:f6:6b:30:a3:f3:20:a5:ec:5c:aa:76:d1:56:c2:c5:f7:
0c:16:cd:ef:44:6c:de:40:26:10:33:f5:41:7f:4f:fc:4a:1b:
0d:06:c9:86:99:8f:d7:72:ae:6c:2d:f8:56:ef:2e:26:22:0d:
5d:85:9e:ee:74:3a:3f:d6:ce:e4:53:a7:81:3a:a1:03:ef:1a:
14:c9:aa:01:98:2f:0a:4b:2c:8a:ca:18:07:70:6b:0f:3a:60:
2e:f5:6d:08:bd:69:72:52:fe:7a:66:ac:11:78:f3:67:db:6e:
7b:0c:4d:15:50:7d:c1:6b:91:79:14:e8:98:d9:a3:68:96:14:
94:6c:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:37 2026 by rpki-client