Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: 9RlZhFLgKOQLX9wPYXYryd+77N2eM3U/WPR66YfzY84=
Subject key identifier: AA:28:C1:C9:01:28:41:CD:CB:E8:91:31:44:8A:89:11:99:1A:49:E7
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01A0C17B8AC03420AE602A1D38B47452EE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 13FA
Signing time: Mon 21 Sep 2026 01:01:33 +0000
Manifest this update: Mon 21 Sep 2026 01:01:33 +0000
Manifest next update: Tue 22 Sep 2026 01:01:33 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: AwlTD+PMpMaarurFoZiw23SIRcpjStYU1b/n+x0UXfI=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:8a:c0:34:20:ae:60:2a:1d:38:b4:74:52:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Sep 21 01:01:33 2026 GMT
Not After : Sep 22 01:01:33 2026 GMT
Subject: CN=aa28c1c9012841cdcbe89131448a8911991a49e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:2c:74:65:7d:9b:f7:d8:4d:25:50:a2:a4:
8e:9d:c0:55:c5:48:a0:43:f7:e3:6a:2b:86:49:9b:
0f:32:08:a5:9d:5c:a9:a7:5b:cd:d0:e8:48:70:cb:
e3:ef:e8:c6:47:2a:03:ee:f1:9b:30:7f:d4:f8:42:
27:9e:a9:db:25:a9:b7:1c:d0:ee:6d:a4:75:3d:81:
f9:dd:d0:78:73:28:f8:83:2f:59:2c:88:a9:78:9d:
49:2a:63:29:d3:79:b4:65:67:8b:1f:c6:5e:ad:a6:
95:0c:b5:57:da:da:d4:a9:51:82:b0:15:88:6f:fb:
f1:5a:5c:eb:97:cc:f4:9e:ad:b4:95:2f:59:68:6d:
d7:fc:ba:65:8c:18:73:6b:e8:2f:ea:20:9c:34:ea:
bb:9a:16:77:11:dd:5d:6e:bd:bb:28:f8:27:d2:b1:
46:a5:3c:39:74:35:ac:6f:79:5b:6e:9d:d2:5f:fc:
ce:fa:29:c5:5a:17:ea:bf:f6:e9:a1:c1:2c:af:58:
49:de:54:39:94:2a:96:ca:3b:7d:7b:c3:b6:7b:6a:
77:cb:9f:19:6e:78:f5:e7:f0:f4:d0:22:60:94:62:
89:a6:6e:6f:3c:ba:6c:91:65:63:ae:71:81:48:7d:
5e:44:e9:b7:c9:70:54:0e:7f:68:88:ea:e2:77:6a:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:C1:C9:01:28:41:CD:CB:E8:91:31:44:8A:89:11:99:1A:49:E7
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c6:bc:9d:0a:60:50:63:ad:9b:2a:8d:09:af:74:76:4c:69:
d5:f5:0b:ee:60:c0:3e:44:98:51:6f:80:56:ea:76:8f:31:1e:
97:de:c3:5f:22:48:a5:4e:75:df:d5:6b:46:b0:41:8f:3e:e4:
4a:06:7b:f4:b3:46:40:21:79:9c:62:72:9d:68:a7:e2:f1:fd:
ec:65:0f:d9:bd:6c:05:2f:1d:f0:5a:b7:89:75:f7:f5:70:9b:
5b:0c:61:9c:2d:eb:6c:51:b7:68:ac:d4:d7:06:1b:8e:4d:54:
c1:fa:7f:b3:c6:1a:dc:f0:24:4e:f2:4b:20:6c:43:b4:31:52:
77:1d:32:0e:9f:61:88:ec:f2:ce:46:17:8f:c5:b7:c1:bc:e4:
cd:3a:b9:83:25:87:c4:03:57:bb:80:95:d4:6e:db:1a:0a:b6:
00:29:05:f5:10:cd:bb:ba:b8:39:1b:61:15:4f:bc:d4:ea:fb:
26:b9:f0:38:b9:a2:8c:18:3a:af:5e:f0:5d:05:6d:97:d8:43:
24:8d:b1:04:fb:81:91:c1:7f:76:1f:1d:ac:5a:49:a0:69:b5:
21:37:a7:27:25:50:8d:fb:8e:0f:cf:54:4a:84:e5:f7:fe:2b:
19:f2:63:7a:d6:ad:36:4b:fa:08:25:21:ac:fd:4f:1e:4b:c1:
c3:cc:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:15 2026 by rpki-client