Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: UknULNG77bVfWulWRaPZ85eoYaWgKAomSw4/szH4G/k=
Subject key identifier: 57:01:A4:6F:EC:D7:31:53:32:FD:A8:1A:D6:AD:09:96:96:BC:9F:01
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 01A1569CB7D470AEEE2F86E0B496C6CDED91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1AB2
Signing time: Tue 20 Oct 2026 00:01:13 +0000
Manifest this update: Tue 20 Oct 2026 00:01:13 +0000
Manifest next update: Wed 21 Oct 2026 00:01:13 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: Xo/cYeZlHbOrYtHjJHJ2Xf/ALXtjOeld1yEqV4le9GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:b7:d4:70:ae:ee:2f:86:e0:b4:96:c6:cd:ed:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Oct 20 00:01:13 2026 GMT
Not After : Oct 21 00:01:13 2026 GMT
Subject: CN=5701a46fecd7315332fda81ad6ad099696bc9f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:3b:fa:7f:88:3c:70:16:26:25:e0:11:cb:
80:c1:03:a8:95:6b:03:2c:d8:67:4a:a6:b7:7e:85:
df:9e:62:c9:8e:c6:ec:fa:7b:b7:96:5a:b1:29:f3:
b2:30:2a:16:5b:2b:03:e1:48:9c:31:ec:0f:99:da:
0b:8f:8d:a8:e0:e4:58:11:3d:53:72:9b:b2:45:61:
92:e6:c8:c5:83:46:7f:d4:43:36:87:fb:60:5a:88:
96:46:0a:e0:03:a1:98:88:10:a2:cc:0f:e9:0c:ec:
c0:78:b0:c3:f1:a3:69:d8:39:79:7f:68:0c:25:ce:
b8:69:69:fa:30:fe:2a:2a:05:2e:8a:61:e9:6a:d7:
e7:a4:2d:14:fa:8e:a1:d3:8a:d0:5c:74:13:43:24:
1d:97:c7:3d:c5:ab:f4:87:56:a9:4e:cd:29:e3:03:
5c:d7:9f:06:75:6a:22:44:77:3d:70:f0:54:83:7e:
72:a1:6e:2a:21:e5:88:76:a7:83:98:2c:2b:e9:e7:
03:28:67:75:5f:25:8b:e2:67:d5:44:4a:f3:f7:3f:
e3:7a:ac:51:5b:5f:05:ec:ef:cf:52:b4:af:ab:70:
01:d0:71:b1:74:93:2d:d2:db:a1:2e:4b:88:9b:e2:
d7:7b:1c:bf:f6:78:2c:01:43:37:06:f7:0f:cd:b3:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:A4:6F:EC:D7:31:53:32:FD:A8:1A:D6:AD:09:96:96:BC:9F:01
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c3:b0:40:f7:0f:f7:5c:76:39:6c:4b:43:84:e2:c1:13:30:
9d:10:e3:31:2f:9a:24:88:fa:50:53:1f:72:17:b7:09:30:66:
2f:c6:53:e0:e1:55:9a:dc:1e:4a:7e:07:49:9e:cd:c7:97:76:
21:d5:2f:6e:5b:7a:92:fb:b9:43:eb:11:c1:81:d6:3f:b2:ee:
55:41:8b:25:fe:a6:60:52:ce:06:52:2e:01:35:37:f3:ff:88:
b4:cf:95:18:c3:36:8d:f9:40:3f:95:a1:ce:b0:a3:83:20:62:
70:12:8d:97:69:9f:e1:a4:5f:73:28:cc:c6:27:56:6b:95:fe:
db:84:70:30:7b:a6:b6:e1:1e:1c:44:be:d6:de:7f:6a:50:8a:
c0:45:5b:3c:73:4f:d4:ff:3a:f3:83:e6:6a:e5:98:eb:25:18:
20:fc:c8:27:6f:2b:3e:d8:a8:c3:15:dd:93:1b:15:1e:0e:47:
de:49:c2:1c:88:ea:5f:95:9b:fb:e0:f7:a8:9b:a7:7f:7c:8e:
4a:cb:ea:0e:69:13:8a:7a:3e:a0:e3:29:94:6d:2a:56:cc:f3:
f1:d4:8e:18:aa:98:ad:ff:b9:0a:c0:6c:ab:6b:24:8b:f5:6f:
29:e7:47:35:8e:c4:91:b4:c7:31:84:42:ee:6e:8a:49:6c:5c:
2e:46:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:20:36 2026 by rpki-client