Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
File: 28oIlKm6MkLxFqd8OoU_25jXGSA.mft (raw, json)
Hash identifier: +Lal/25LpLTjyJdjO/WNKGc1rdw8m7GSBaWyCj7b0wA=
Subject key identifier: B3:B6:EF:AD:3E:CF:2A:9B:0E:6A:77:7D:D2:08:A9:96:3C:65:BF:C8
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 01A1DA94A40EFC2D9F2D92D3CA5E4F2CAE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
Manifest number: 016F
Signing time: Sat 14 Nov 2026 15:02:16 +0000
Manifest this update: Sat 14 Nov 2026 15:02:16 +0000
Manifest next update: Sun 15 Nov 2026 15:02:16 +0000
Files and hashes: 1: 28oIlKm6MkLxFqd8OoU_25jXGSA.crl (hash: AqOaQuYfJgUbeFi4Ym8hvl6Xq1C3xnWBC8gGsEg6Brk=)
2: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (hash: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:a4:0e:fc:2d:9f:2d:92:d3:ca:5e:4f:2c:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Nov 14 15:02:16 2026 GMT
Not After : Nov 15 15:02:16 2026 GMT
Subject: CN=b3b6efad3ecf2a9b0e6a777dd208a9963c65bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:b2:b6:16:95:98:27:69:10:27:ac:2b:86:
ee:59:16:a4:f7:07:fd:dd:93:c4:85:0e:8b:19:ba:
0f:49:63:42:2a:9a:a4:d1:38:a7:01:7a:e7:45:e4:
1c:f5:dc:72:ea:1b:f2:85:7d:71:98:58:04:f5:e6:
fa:eb:e4:60:2d:b6:b4:3b:55:88:81:8a:fd:ad:2e:
f3:ea:9a:7c:9e:71:f7:3b:32:97:18:8a:38:4d:1d:
12:0d:b1:1b:79:11:4d:07:b6:02:bb:0c:91:6c:0a:
cb:55:55:46:04:2d:29:7f:9b:f6:20:b0:db:70:81:
57:ab:96:55:02:f0:f3:ed:a0:c8:d7:b8:b3:f5:0f:
d0:fb:10:b1:a5:e4:36:48:18:9a:be:a7:68:36:eb:
1d:1e:9b:12:3d:57:68:ca:92:20:5e:c7:1d:8a:0d:
2e:a1:b7:cd:00:59:a0:ad:19:25:2b:f6:39:9a:50:
f8:e2:7c:e4:de:d5:38:a6:1e:b7:84:e1:24:e3:40:
c1:6e:a5:a9:65:26:eb:b8:b5:cd:0a:06:e1:d3:f0:
91:3d:e7:6f:a3:60:d6:21:ef:97:bf:e0:f9:fd:a8:
56:6f:c0:f1:17:8a:73:0b:b7:a3:9d:3d:ac:2f:d0:
6e:f1:6b:5c:1a:c4:ec:6c:95:98:fc:f1:0a:f8:1d:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:EF:AD:3E:CF:2A:9B:0E:6A:77:7D:D2:08:A9:96:3C:65:BF:C8
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ac:2f:68:03:f6:a6:04:b6:34:8f:03:d2:1e:18:02:e6:97:
7c:d8:74:05:af:94:bf:52:c0:64:8c:9c:83:c2:1c:05:98:ab:
db:42:63:6a:d4:ed:a4:0c:a3:be:8f:03:ce:26:b9:16:33:8e:
ad:3f:11:92:ee:d6:45:1d:08:e9:c4:09:a9:45:5f:8e:fd:64:
1b:6e:2d:14:dc:c8:ce:49:08:09:c7:e0:ab:39:1a:15:43:7c:
29:2e:ed:3e:51:1c:0d:19:1c:a7:0c:cb:f1:77:01:f1:79:c8:
03:16:f3:70:dc:76:1d:31:bc:55:20:db:d9:8a:43:11:fc:57:
db:cf:27:ee:8c:9b:c4:f8:02:6b:c2:09:1c:ae:5b:96:66:3c:
da:3f:e8:ef:ba:b3:34:10:57:4a:1b:fb:0f:d0:2a:ff:eb:5e:
38:69:44:45:8a:3d:70:b5:72:2b:4a:e4:61:66:72:81:63:f0:
8e:d2:5a:8c:54:64:5e:09:24:0e:61:28:54:72:5b:d6:27:80:
27:a3:cf:75:7f:ec:2c:01:57:e2:68:1e:51:47:ff:43:8f:46:
b5:7b:11:02:06:b0:91:7c:c2:89:7d:61:b8:d4:94:a7:0c:4a:
fe:ea:a1:bc:1a:23:ee:0f:8e:b6:c6:ce:b3:cb:c0:aa:04:f9:
a3:10:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:31 2026 by rpki-client