Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: NqI8yTl1p88gI/2qJWsMgxBnC3+JncwThUYQfZlKj2s=
Subject key identifier: 7E:F6:0B:66:9F:2E:0E:B6:57:06:F3:DB:71:0B:20:BB:4A:30:45:84
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019F8F471D77DF363E5E11D3D89D75E98249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1613
Signing time: Thu 23 Jul 2026 14:00:30 +0000
Manifest this update: Thu 23 Jul 2026 14:00:30 +0000
Manifest next update: Fri 24 Jul 2026 14:00:30 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: sk5fUJaEaMKH/gTOKjwC30u9XMhJedS/D27cHuFyu+8=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:1d:77:df:36:3e:5e:11:d3:d8:9d:75:e9:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jul 23 14:00:30 2026 GMT
Not After : Jul 24 14:00:30 2026 GMT
Subject: CN=7ef60b669f2e0eb65706f3db710b20bb4a304584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:af:4c:46:e7:6c:9f:17:cc:9f:89:69:2d:
01:06:e2:ac:4d:fd:b2:e4:d5:d8:5a:f7:0b:f1:00:
7c:34:4c:54:c0:6e:f2:d3:6a:ba:58:5d:b9:c6:ec:
bd:b6:8d:5c:4a:08:d3:02:21:ca:2e:04:07:d6:83:
4d:1e:73:46:a8:1b:1d:11:dd:49:f0:d3:c6:08:f7:
8d:c5:01:a6:fa:fc:dd:e9:41:82:c7:9f:84:c2:05:
f4:dc:0b:81:ca:60:f6:9f:20:f2:4e:63:2e:26:b3:
59:1c:ed:2e:7f:6c:5d:2a:ef:21:3c:62:66:cc:1f:
ad:7a:ac:df:2d:c3:b3:01:bb:9a:e2:f5:bb:3a:e7:
2b:e2:66:01:de:bd:af:61:ab:0c:ad:79:da:b3:24:
c3:ad:8c:55:35:ba:e8:7f:54:0e:98:de:68:ba:60:
28:4a:af:b2:55:2a:e0:ef:0a:70:5a:17:36:e5:57:
e2:8c:66:aa:70:7f:e5:fe:5a:09:f9:32:da:5f:d1:
66:3d:7a:f4:ce:b9:4b:16:e4:87:5b:cc:8f:40:1f:
1d:d9:12:46:3d:4b:b9:b2:09:eb:19:97:99:d3:ef:
af:3c:3e:75:c5:fb:e8:9e:6a:b8:e0:04:eb:eb:7a:
15:0c:c2:ee:2d:ac:5b:e3:3a:d4:2d:72:77:fd:cb:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:0B:66:9F:2E:0E:B6:57:06:F3:DB:71:0B:20:BB:4A:30:45:84
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:ea:16:20:be:96:ae:15:73:28:14:b2:10:25:c9:63:d2:
88:9e:fa:e2:a0:f3:44:90:41:06:29:bc:50:f4:cc:f5:2a:81:
08:60:16:25:77:56:00:ac:67:45:5a:d0:35:e8:a8:fa:8c:f7:
57:de:99:90:d7:be:65:ae:27:18:4d:6a:2b:d0:c1:34:3e:51:
2e:a8:98:66:e4:89:3d:49:a4:e2:99:29:ea:a6:f7:a5:cd:77:
05:78:c6:b9:86:5b:ad:3d:7e:ce:ce:3c:48:ca:d4:09:65:ed:
cb:5d:9d:a4:b2:4c:a9:9b:63:6b:d0:aa:88:d7:fd:c8:cd:50:
89:df:b5:de:70:bf:d9:54:5a:2a:68:92:85:ed:d3:c1:ae:45:
2d:ec:35:6b:c8:81:b1:be:9c:49:c1:0f:9b:14:81:cf:cf:39:
56:b8:e2:78:20:1a:3e:d3:b8:51:ae:9b:3e:e2:30:5b:b7:ee:
48:65:85:b3:0e:fd:3f:52:3c:7e:d5:61:7d:3c:98:83:44:91:
03:00:ed:d3:de:c1:fa:d4:35:96:f8:4c:ce:4a:9b:15:8e:80:
39:a9:fc:4d:06:39:2c:d6:c6:40:59:3f:74:ce:eb:95:e7:7f:
93:29:4c:5c:54:7a:a2:68:93:11:1e:7e:ec:77:df:94:f3:f8:
e3:af:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:32 2026 by rpki-client