Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: L2k7QYer2kWG8m2Vrurs73PxtFNYR8E4PwfCzLv30ts=
Subject key identifier: 56:56:5B:D9:6A:D3:1C:73:CC:67:9E:D7:FB:0C:4E:92:F4:D7:C2:73
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019FA9E3471A79221BC25E557E001CCFD79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:01:12 +0000
Manifest this update: Tue 28 Jul 2026 18:01:12 +0000
Manifest next update: Wed 29 Jul 2026 18:01:12 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: OMDzBdSGKi0vZ+5f7G2pr3ckb9PGDaICkg4SdI9jWDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:47:1a:79:22:1b:c2:5e:55:7e:00:1c:cf:d7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Jul 28 18:01:12 2026 GMT
Not After : Jul 29 18:01:12 2026 GMT
Subject: CN=56565bd96ad31c73cc679ed7fb0c4e92f4d7c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:b1:c4:24:e7:94:ab:43:05:bd:ec:e0:62:
13:c9:d8:6d:94:5d:0d:c6:62:0e:ca:41:ee:7e:b2:
39:a4:4f:f3:d1:d2:5a:14:3f:f5:8b:d2:c4:b1:0e:
a4:cd:b8:73:ec:7e:e2:59:1f:72:d7:fc:f3:48:9f:
e2:2e:e9:77:86:75:fe:b4:28:9b:04:a5:b4:4b:74:
e3:67:95:b2:c1:53:e8:4e:15:24:a6:db:35:4a:f0:
48:04:a2:6b:01:6f:c4:e9:81:46:5b:86:22:60:a7:
9a:9f:0f:57:15:20:fa:cb:40:f1:91:78:e5:0f:11:
6e:bd:e5:db:3a:e1:48:cd:4e:ff:1b:95:35:b4:4c:
d6:0e:e4:27:e3:8c:0e:81:87:4f:ad:ac:ed:c7:42:
83:7f:0f:ef:fc:4d:36:72:d2:5a:b0:42:2a:9b:1a:
40:02:fc:74:08:6d:69:4c:3a:5b:b9:6d:a5:b3:3e:
75:6c:86:70:e0:17:5d:aa:1b:b1:25:f5:c3:4e:25:
16:49:ec:a9:5f:9b:50:42:75:07:90:7c:f8:02:8e:
13:2c:2a:88:cd:2b:68:9d:37:29:49:a2:a0:e2:cf:
9e:65:0d:0d:95:43:08:8e:eb:85:b3:84:db:d1:44:
8b:53:ed:dc:21:81:a5:9b:0b:2d:2e:c9:08:72:ac:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:56:5B:D9:6A:D3:1C:73:CC:67:9E:D7:FB:0C:4E:92:F4:D7:C2:73
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:2c:e8:6c:48:93:e0:a4:84:52:de:e7:05:22:9b:d2:d0:
be:2d:f7:46:48:65:3b:be:1a:73:5d:a1:9b:ee:5b:bc:02:0b:
3e:e1:16:29:b1:b8:f2:e2:8b:7c:91:95:65:8d:fd:78:e8:20:
5f:bd:bc:5b:ba:2f:ff:4d:56:c0:22:ed:32:61:0e:b2:55:f4:
7a:22:ce:2f:0b:3e:63:7a:9e:67:61:56:f2:1a:fc:fe:bd:e5:
eb:b1:77:0d:57:d9:e9:59:5d:85:47:ec:b5:fc:f3:bf:36:01:
41:9a:50:52:32:ac:f1:4d:e0:61:56:68:a5:28:37:fc:5f:9b:
8b:db:cd:28:33:c0:3c:5c:e6:40:59:30:36:cf:ad:de:30:e6:
ef:db:7c:3d:aa:a9:01:14:de:71:8d:6e:d0:9a:00:59:c7:ee:
21:46:19:d9:20:2a:49:b4:a3:d8:b3:d1:25:00:7a:e2:47:c7:
51:65:1d:eb:8c:b1:8c:4f:8a:d7:6a:68:65:2f:bb:c2:6f:e4:
e2:41:a2:64:29:98:74:3f:a2:9f:1d:6a:11:57:cd:66:27:a2:
9a:4d:da:4a:31:e4:c2:c8:fa:ed:b8:c6:b8:df:ed:66:15:55:
fa:58:ff:3d:1a:fe:b7:38:de:4d:6c:eb:fd:01:c5:99:f3:59:
c8:0e:88:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:04:20 2026 by rpki-client