Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: yhnm0DTTH8rTfm5tmq8jJqubdMBLXy0aOGK66VYIucA=
Subject key identifier: E3:21:82:C1:62:7D:2D:F0:35:BA:01:B2:99:FA:3D:80:FF:37:6D:17
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019FA7867F1FC209380F76DD592B9F4E92C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 0112
Signing time: Tue 28 Jul 2026 07:00:37 +0000
Manifest this update: Tue 28 Jul 2026 07:00:37 +0000
Manifest next update: Wed 29 Jul 2026 07:00:37 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: FCN5k7OuZ3/jfaogguPn8ZvnRJ3Im840KrBAutxkt8I=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:7f:1f:c2:09:38:0f:76:dd:59:2b:9f:4e:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Jul 28 07:00:37 2026 GMT
Not After : Jul 29 07:00:37 2026 GMT
Subject: CN=e32182c1627d2df035ba01b299fa3d80ff376d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:00:57:b2:9e:55:0b:64:64:cf:d7:d2:71:
2f:bc:96:c2:f7:06:8b:a8:ff:2a:d3:2e:34:7e:55:
6f:df:8f:f7:8f:84:38:56:a9:c8:1b:1d:0b:c3:a5:
df:f9:39:06:75:35:0b:85:6b:ab:2c:a5:37:40:49:
6e:bf:d7:37:30:cf:11:eb:31:e4:30:62:cc:bd:27:
ad:51:ca:93:4b:68:cd:cb:1f:d4:fd:1a:cf:12:19:
2c:4b:49:ac:14:0f:29:48:27:bd:ac:dd:73:ee:6b:
89:6d:67:77:28:bc:4f:93:5a:fe:2e:b9:a4:14:c5:
96:b8:80:1d:dc:17:67:b2:18:48:90:ec:66:41:25:
cd:8a:d4:0a:4a:37:4e:8b:f5:fe:2d:d7:03:10:7f:
22:b9:b4:15:36:2b:b4:9b:98:89:09:1b:fb:ca:26:
d3:9a:a4:ad:8a:de:d5:e3:78:56:80:0e:58:99:3c:
89:41:b1:5b:c6:8c:dd:35:6f:b5:a0:e5:68:4a:21:
21:fc:c2:b3:63:96:09:58:4c:d8:45:9b:16:ca:7a:
aa:3f:f7:a9:04:d8:80:fa:d1:6c:e0:c9:04:24:3a:
0f:52:23:80:46:04:99:bc:14:4e:df:f8:bb:66:c7:
df:99:6b:13:48:d4:d4:a9:8b:fe:a9:9c:8b:05:47:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:82:C1:62:7D:2D:F0:35:BA:01:B2:99:FA:3D:80:FF:37:6D:17
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:04:7a:72:a4:76:02:5d:a7:24:82:60:9e:40:9c:63:60:
3b:d2:de:f5:8b:60:e3:8f:0e:c0:d1:dc:b4:25:95:cb:aa:38:
15:8a:ad:e4:73:74:e3:72:38:c6:c7:0e:4b:83:c5:8f:84:f4:
6e:c4:00:dc:1d:99:6e:46:68:bf:ca:bc:4a:77:6c:a8:86:d1:
04:10:36:9f:3d:33:2a:1d:fb:79:73:5d:49:fc:7a:e2:90:a5:
9c:20:d0:7f:4c:31:70:51:71:ec:aa:54:7e:2e:fd:77:0c:0e:
17:a5:a2:2b:c4:1d:fc:d9:b2:e7:c4:00:02:cb:95:5d:98:98:
84:12:1a:18:aa:e2:c5:86:01:66:a0:ed:d9:58:b9:67:ec:65:
aa:92:31:ac:5f:f5:17:ae:e1:2b:5f:07:90:ab:5c:12:eb:1e:
91:6d:aa:e2:d8:55:c3:b5:49:c5:f4:bb:6c:4d:66:ec:4c:93:
aa:17:12:1c:0e:db:4c:d3:4b:f8:f9:27:ca:ab:38:4c:4d:47:
cf:57:f3:3c:04:95:43:7b:20:3a:1c:d8:63:00:7b:66:a0:ca:
91:90:e4:a2:e9:9c:27:35:61:1d:b6:53:61:38:3f:fe:cc:cc:
c6:f8:7b:33:e7:2f:b5:3f:6b:15:d5:35:cc:77:65:c3:d0:e5:
e2:45:dd:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nhn8fwgk4D3bdWSufTpLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNmYyNmQ3YzgyYzY5MDg3N2RjM2MyY2I5MjI2YmE4MzNk
NzFmOTgwHhcNMjYwNzI4MDcwMDM3WhcNMjYwNzI5MDcwMDM3WjAzMTEwLwYDVQQD
EyhlMzIxODJjMTYyN2QyZGYwMzViYTAxYjI5OWZhM2Q4MGZmMzc2ZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfEAV7KeVQtkZM/X0nEvvJbC9waL
qP8q0y40flVv34/3j4Q4VqnIGx0Lw6Xf+TkGdTULhWurLKU3QEluv9c3MM8R6zHk
MGLMvSetUcqTS2jNyx/U/RrPEhksS0msFA8pSCe9rN1z7muJbWd3KLxPk1r+Lrmk
FMWWuIAd3BdnshhIkOxmQSXNitQKSjdOi/X+LdcDEH8iubQVNiu0m5iJCRv7yibT
mqStit7V43hWgA5YmTyJQbFbxozdNW+1oOVoSiEh/MKzY5YJWEzYRZsWynqqP/ep
BNiA+tFs4MkEJDoPUiOARgSZvBRO3/i7ZsffmWsTSNTUqYv+qZyLBUcoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMhgsFifS3wNboBspn6PYD/N20XMB8GA1UdIwQY
MBaAFP9vJtfILGkId9w8LLkia6gz1x+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYTNiNjktYzgxNC00NTY5LWE1NGEt
NmE0NjgyOTQzZGZjLzEvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYTNiNjktYzgxNC00NTY5LWE1NGEtNmE0NjgyOTQzZGZj
LzEvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyAEenKk
dgJdpySCYJ5AnGNgO9Le9Ytg448OwNHctCWVy6o4FYqt5HN043I4xscOS4PFj4T0
bsQA3B2ZbkZov8q8SndsqIbRBBA2nz0zKh37eXNdSfx64pClnCDQf0wxcFFx7KpU
fi79dwwOF6WiK8Qd/Nmy58QAAsuVXZiYhBIaGKrixYYBZqDt2Vi5Z+xlqpIxrF/1
F67hK18HkKtcEusekW2q4thVw7VJxfS7bE1m7EyTqhcSHA7bTNNL+Pknyqs4TE1H
z1fzPASVQ3sgOhzYYwB7ZqDKkZDkoumcJzVhHbZTYTg//szMxvh7M+cvtT9rFdU1
zHdlw9Dl4kXdNQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:05 2026 by rpki-client