Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: iq8bpuhBrhi+U5QHDOUSvIo18vLvJBFvE/Hhiq7IySk=
Subject key identifier: DC:CA:07:2C:1D:83:6F:DF:3C:5B:1C:5F:1A:E7:71:51:D6:54:BC:75
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019CA9EB06CCE7118631A3AE8F0A3963B6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 1719
Signing time: Sun 01 Mar 2026 15:01:18 +0000
Manifest this update: Sun 01 Mar 2026 15:01:18 +0000
Manifest next update: Mon 02 Mar 2026 15:01:18 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: ngQUFXly/PNxkOxbc4Wgcj6wBFjAIGFXBUoY27noIE0=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:06:cc:e7:11:86:31:a3:ae:8f:0a:39:63:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Mar 1 15:01:18 2026 GMT
Not After : Mar 2 15:01:18 2026 GMT
Subject: CN=dcca072c1d836fdf3c5b1c5f1ae77151d654bc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:33:63:e2:16:ee:5a:df:a2:4d:e0:d9:57:
d4:8b:8d:8b:9d:3d:27:56:bf:6d:a0:3f:d8:71:cf:
24:89:8c:78:88:db:55:e5:1a:20:36:9e:5f:60:3c:
c6:03:26:9b:50:5f:ce:c8:ee:44:83:4d:db:2e:a5:
bc:09:44:22:da:6a:41:15:91:ab:d1:49:d3:44:c3:
67:1b:03:0c:e4:87:97:23:68:8d:32:c1:e2:49:fd:
66:e0:d6:14:ca:df:2e:8a:b8:4e:24:9d:42:5c:a6:
b6:30:ef:0d:a3:4c:27:45:f1:27:be:c7:a9:40:e8:
64:15:01:31:5f:04:f0:ee:28:b4:37:9c:51:23:26:
f2:0c:06:18:55:ef:2c:90:86:bb:ec:52:e6:9c:c0:
b1:d0:34:b5:37:25:f0:eb:b1:9b:14:82:34:75:9f:
20:fc:c5:71:52:e6:67:4a:e3:22:ea:b1:ae:2b:da:
00:b4:27:eb:b5:9a:1a:2d:c9:f3:d2:8b:e2:a9:07:
6c:1d:4d:be:ac:6f:e7:8f:22:a6:e3:eb:67:d3:9f:
49:d3:22:cc:9c:02:29:8b:8f:d4:df:a8:8a:d5:65:
19:b9:e6:74:57:dc:64:70:48:4b:46:c7:81:3a:6c:
65:db:5e:20:9d:55:01:bb:c8:b3:67:d8:12:c3:e4:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:07:2C:1D:83:6F:DF:3C:5B:1C:5F:1A:E7:71:51:D6:54:BC:75
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:05:d0:4c:07:97:ff:5b:e5:0a:21:51:1e:94:9d:f4:b2:
44:8f:b4:c9:b4:f8:5e:49:69:1c:b8:6b:ff:d8:a8:53:56:0c:
98:ff:e2:1b:21:bc:43:ed:c6:2b:84:3b:8b:46:b4:f1:d1:97:
0f:2a:5b:5a:1a:1d:ef:b1:c5:6e:0f:70:16:b9:f5:24:e6:96:
e8:c9:f4:27:00:41:f2:c9:31:50:60:d6:f5:ba:1a:88:95:b8:
08:55:47:6f:78:98:8c:3d:77:f6:4d:c3:59:b1:82:64:04:87:
e3:2b:10:c5:79:e9:4d:9b:08:c5:9c:69:57:78:9a:cd:6e:3d:
08:d1:9a:3c:6c:a9:bf:07:95:f4:b0:78:fa:b5:ed:70:ff:e0:
c2:c5:a8:f0:30:16:23:97:47:6d:fb:64:cd:12:96:de:65:ee:
af:17:d1:31:a4:6b:34:f5:61:85:eb:e5:d8:54:20:94:9e:b1:
68:8d:59:ff:61:77:d0:7d:35:a3:ca:f3:b0:ee:55:08:68:0f:
23:05:ae:ba:bf:59:43:16:2e:c3:c1:3e:3e:2d:08:e6:40:d3:
ca:47:8c:7b:4c:db:98:59:0b:77:a8:e8:34:24:47:c0:fb:0f:
9f:2d:46:93:01:d1:ba:39:39:af:86:37:4a:8f:b8:fd:4b:70:
07:46:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:14 2026 by rpki-client