Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
File: 28oIlKm6MkLxFqd8OoU_25jXGSA.mft (raw, json)
Hash identifier: k51ImxInX5Z5LUh4eyUIcKjQEKwsMruoERC9tQeOdsk=
Subject key identifier: 7C:A9:A5:DA:4C:7D:FE:88:8A:E5:88:74:5E:8F:EB:46:DA:43:12:5C
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 019F8F7EFC533CDA917810BA3F2832C9D5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:31 +0000
Manifest this update: Thu 23 Jul 2026 15:01:31 +0000
Manifest next update: Fri 24 Jul 2026 15:01:31 +0000
Files and hashes: 1: 28oIlKm6MkLxFqd8OoU_25jXGSA.crl (hash: E7QuPyUwxLtkePIdw41QMqiDJDOHTUjFn5i0JnAfdKA=)
2: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (hash: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:fc:53:3c:da:91:78:10:ba:3f:28:32:c9:d5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Jul 23 15:01:31 2026 GMT
Not After : Jul 24 15:01:31 2026 GMT
Subject: CN=7ca9a5da4c7dfe888ae588745e8feb46da43125c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:33:78:95:53:86:43:e7:e0:4d:ab:48:21:
b5:7d:ef:99:1c:1b:4c:48:f0:8d:2c:88:06:70:32:
70:45:bc:c7:99:1e:5d:4b:43:8b:e4:ff:3f:e3:4a:
36:1f:90:9d:0d:4f:d2:40:9a:83:9e:43:d0:f3:8b:
ae:3c:39:d2:e4:cf:05:59:1f:8a:7b:03:ec:3c:9d:
5c:69:76:7c:10:b2:eb:94:68:6d:1a:6b:16:94:2e:
5e:bb:e5:4e:e4:f7:4c:b1:43:aa:e3:74:c8:71:e8:
61:a0:b0:18:1c:55:b4:aa:84:29:b7:a9:af:98:72:
85:cb:44:cd:41:98:22:61:ad:0a:8a:90:ca:64:d2:
df:a5:4e:b2:05:77:c5:1a:22:88:d5:cd:04:6e:95:
a1:85:01:71:f6:9b:84:eb:e4:3b:06:d2:e0:50:1c:
91:57:44:6b:b9:01:bb:b0:27:b0:e2:5f:19:bc:9c:
4a:46:a1:8c:9c:58:bd:1d:12:2a:05:9b:77:c2:07:
65:80:c8:4b:60:f8:3f:1b:f3:4c:48:0a:b9:54:d0:
76:57:20:7b:f3:c5:be:2e:87:4e:a8:77:e6:0f:91:
a7:47:ea:8c:2e:d5:fe:ed:41:ca:c7:45:58:05:65:
c1:9a:0f:a6:67:d7:26:5f:19:83:34:1f:fe:1b:a8:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:A5:DA:4C:7D:FE:88:8A:E5:88:74:5E:8F:EB:46:DA:43:12:5C
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:74:9a:e1:45:43:ca:53:0d:55:3d:b6:e1:6c:ca:7a:c8:9a:
39:98:18:bf:f6:81:a7:76:81:00:ad:a3:71:b4:41:a9:a9:36:
d4:bc:d9:65:c9:2f:04:af:51:34:10:6a:6b:3a:77:72:e4:6a:
bf:79:c6:a5:47:ba:3f:23:94:d1:67:2d:2a:73:be:96:44:40:
ec:92:ee:ba:79:b6:88:71:02:e0:f8:52:70:67:94:fa:d8:c4:
20:2a:c8:db:71:95:e6:03:ac:ac:a5:f9:0c:3d:2d:59:ca:f0:
31:9e:a3:97:39:11:3d:f1:bd:5e:57:32:d1:de:bd:d0:5e:c2:
55:69:da:7f:ca:35:72:b1:e9:ec:cc:5e:7e:f4:9a:d4:87:e1:
ed:6c:10:1d:2e:72:29:9c:ca:14:ab:fb:bf:98:ef:0d:6f:5c:
3d:2e:d7:7a:d8:37:03:e9:e0:0b:38:c8:30:21:e3:2e:ec:4b:
39:36:0f:1b:10:8e:a2:8b:65:2e:a5:5d:c7:f2:f6:d8:04:c9:
8d:6f:c2:3d:9d:cc:ca:3d:3a:9f:86:26:f8:3d:c1:b7:88:6f:
98:b4:81:b5:eb:3e:ce:5b:fa:cc:3b:eb:0e:7a:00:eb:ea:0c:
87:61:42:37:5b:b6:5f:78:b5:3f:36:35:74:74:5f:dc:f8:b9:
0d:c3:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:59 2026 by rpki-client