Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: Gff/G/rncNQ3lW1AQsW/y9vR+QtK+mBdJZmPdhAX05U=
Subject key identifier: 7B:BE:FD:D2:E9:E0:B1:89:F9:DB:D2:CD:13:07:62:AB:47:D6:29:DE
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01A1DD5DEFB83ABD49659B289B65ED28E0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 148D
Signing time: Sun 15 Nov 2026 04:01:23 +0000
Manifest this update: Sun 15 Nov 2026 04:01:23 +0000
Manifest next update: Mon 16 Nov 2026 04:01:23 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: 7x+eUq9aBBgBrctLa2KTdZyJioGYpsF4KpRX0FJVnHU=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:ef:b8:3a:bd:49:65:9b:28:9b:65:ed:28:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Nov 15 04:01:23 2026 GMT
Not After : Nov 16 04:01:23 2026 GMT
Subject: CN=7bbefdd2e9e0b189f9dbd2cd130762ab47d629de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:c7:c0:6f:d2:3f:aa:0d:2e:97:09:9b:4d:
e2:18:9e:fc:58:31:77:50:dd:70:78:5b:a6:5d:f3:
88:47:11:66:d3:0e:39:66:dc:87:81:49:2b:5e:1a:
aa:7a:10:65:f4:8b:28:85:31:e6:89:4d:30:0e:9d:
d9:17:89:c6:cc:3a:6a:b5:9d:32:01:5f:9b:b3:26:
a6:95:c9:81:6f:81:7c:fe:39:3c:cc:db:d3:ed:4d:
33:5e:57:40:88:2f:84:c1:3c:6b:c1:2c:56:62:03:
31:d8:c5:b5:ca:e5:85:1e:d1:32:63:1e:fe:b7:b6:
f3:58:54:97:ae:0e:96:73:21:fb:fb:87:d5:48:94:
73:3d:c0:68:4b:ff:b0:25:a2:b6:28:9c:33:3a:b0:
67:20:9b:c3:d8:12:17:e1:10:1c:a8:44:4e:c8:88:
df:51:eb:91:0b:09:64:32:bc:f4:7c:0f:9b:2a:8d:
c5:e9:89:82:81:1f:85:93:01:de:ff:66:ca:26:98:
31:2d:f6:c4:5e:d6:9a:d6:ac:a4:de:a9:bf:eb:75:
c3:d6:95:f0:f6:94:99:7a:a3:01:3a:20:59:05:4d:
74:fe:e9:6e:a3:0d:77:de:71:b0:81:f0:8f:cb:a6:
25:70:c5:2a:b7:3d:14:eb:55:5d:82:d4:2a:58:c8:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:FD:D2:E9:E0:B1:89:F9:DB:D2:CD:13:07:62:AB:47:D6:29:DE
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:8b:f8:f3:aa:ea:10:c3:38:62:86:17:5a:3d:14:14:d2:
a0:c7:2d:48:cb:f4:cb:c0:67:4d:3b:02:d2:43:8b:8e:0d:dc:
69:e2:2f:63:a7:78:ca:55:47:6c:c1:64:06:c4:48:69:1b:93:
eb:3b:ba:25:7c:bc:93:e1:b3:e3:93:6f:d6:97:4e:f4:34:e4:
14:b2:93:27:08:c7:53:3d:d1:4b:c6:57:f4:54:80:41:fd:00:
e3:46:52:ec:31:05:5f:b3:35:d8:43:c2:1d:be:92:ab:4f:a9:
80:09:53:8f:e4:7b:15:7f:f9:34:77:ca:64:d6:81:e1:f8:03:
df:eb:62:67:ed:15:c7:19:9c:3c:10:a1:aa:eb:eb:e9:b3:a2:
eb:c1:e5:ab:3e:e3:7f:89:d0:92:11:a6:76:9f:eb:ca:60:81:
78:cf:b3:ce:31:81:e5:19:2e:fb:cc:4e:a2:6b:50:9f:1b:59:
25:51:47:a9:2a:b1:07:45:95:49:71:0a:2a:5c:f7:3c:94:c7:
3d:91:c8:6e:86:9b:2c:9d:bd:a5:69:c6:a7:91:cb:f3:e6:83:
c9:fb:f5:f5:31:8d:d1:c4:19:ab:1a:3a:95:85:8c:33:af:8a:
8a:8c:96:5d:17:3f:8e:d4:19:5a:3e:79:5b:4b:f2:f1:cd:71:
95:77:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:25:05 2026 by rpki-client