Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: DL+BXmMax8vI5DvEbIDigXOO0pkRKQQNQbQQGYjcJeU=
Subject key identifier: 5F:4B:45:1D:31:FD:3F:CF:30:EC:48:17:6F:82:87:12:D4:B4:70:F6
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019D9C99DFB7FBFDD73CB40BBB73DA687CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 18:00:22 +0000
Manifest this update: Fri 17 Apr 2026 18:00:22 +0000
Manifest next update: Sat 18 Apr 2026 18:00:22 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 4DzjKd/UC3/D8gv+m+nJ3zAQw42c8NEEgg3TwYqWEZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:df:b7:fb:fd:d7:3c:b4:0b:bb:73:da:68:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Apr 17 18:00:22 2026 GMT
Not After : Apr 18 18:00:22 2026 GMT
Subject: CN=5f4b451d31fd3fcf30ec48176f828712d4b470f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:c9:d4:f2:28:51:09:0d:1c:b8:a0:b8:8a:
e5:37:2b:b3:18:be:a2:7e:84:e4:08:50:bd:79:39:
8f:ee:84:0a:07:27:68:bf:8f:60:49:81:3d:46:a2:
ac:3d:90:b9:9e:7b:02:14:94:17:73:b7:70:d4:2d:
a9:e7:55:06:fd:c9:14:09:e6:80:75:64:3f:8b:a9:
af:59:84:2f:e3:b1:85:3b:1c:2e:15:a5:7c:93:23:
15:5c:44:69:cd:6b:10:4a:b6:92:5f:d4:64:2b:22:
b0:f3:04:b8:8f:b1:b7:ba:7f:58:62:ea:06:9b:a9:
c4:a7:8d:cb:9b:a9:52:92:aa:dc:fa:bb:30:7a:ac:
61:f4:04:e0:df:df:f6:60:f5:e6:20:59:22:41:09:
a5:aa:4f:ef:d2:3e:a5:5c:92:b3:08:89:75:1a:d5:
6b:d5:34:5e:6c:ef:96:d2:24:ef:f0:25:15:e1:d0:
45:e7:aa:de:10:cb:1e:a4:79:79:1a:20:16:41:53:
59:5e:c7:65:19:04:26:5d:ee:74:f8:e8:af:29:be:
39:93:91:7b:03:07:10:56:50:f5:d6:4b:c5:51:d7:
87:2b:95:74:af:0d:bd:1b:da:d9:87:e5:23:b8:c1:
eb:49:1b:cb:2b:e6:e3:5b:70:db:1c:5a:f8:06:2a:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:45:1D:31:FD:3F:CF:30:EC:48:17:6F:82:87:12:D4:B4:70:F6
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a6:30:49:84:40:f4:8a:9f:28:36:bf:9b:2d:c5:df:16:d5:
64:cb:09:91:59:3d:c4:5f:ac:4b:af:90:ab:46:ea:a6:dc:0b:
2b:a6:5f:89:03:cd:91:d9:60:c3:d7:be:f3:92:a8:4c:81:bb:
36:31:82:06:6d:bb:18:c5:98:4b:35:7f:e0:52:b6:53:8e:3e:
40:2e:c3:76:da:41:7a:7a:ac:8b:c7:9b:c7:be:2b:a6:57:34:
57:06:45:0c:a1:b5:de:60:ab:e8:22:59:00:ad:e8:80:5a:43:
b1:53:d3:b0:89:b4:82:17:b4:29:73:86:95:d8:fa:57:57:6f:
66:4a:6e:88:3b:45:e1:c2:2c:3f:8c:bf:e4:62:b4:d8:7b:d0:
88:fa:ca:9a:f4:b3:15:c8:72:84:65:d0:4e:9c:56:c5:e4:92:
13:fc:b8:93:11:8b:0c:db:bc:ba:0f:18:24:e8:e4:4b:29:66:
6d:60:4d:b9:66:1a:23:e1:5b:7c:69:97:63:63:57:24:8e:62:
ae:4a:1a:0a:04:78:50:81:e9:f9:bf:a4:17:83:7f:72:0e:6d:
53:bc:a4:2a:84:13:09:66:63:e3:57:bb:20:a0:23:0a:2d:4c:
79:d6:1c:43:be:2b:51:a4:e6:24:38:1a:f0:a1:85:df:29:30:
62:66:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:10 2026 by rpki-client