Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: f+ArtpOTA6jsFaQmgA0ma39erIc7tVzljQgh8gXFQoE=
Subject key identifier: A3:54:E7:3B:61:52:9B:7E:7F:7C:4E:E1:FA:36:E5:8A:CA:12:97:45
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019D2B17771CBB45EA3A8C7DB1D8E649A81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 14D6
Signing time: Thu 26 Mar 2026 17:00:51 +0000
Manifest this update: Thu 26 Mar 2026 17:00:51 +0000
Manifest next update: Fri 27 Mar 2026 17:00:51 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: ru4mMk/UIH60cUg68ZVyjMiAuZWTSn0VOxSFAaGDE4s=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:77:1c:bb:45:ea:3a:8c:7d:b1:d8:e6:49:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Mar 26 17:00:51 2026 GMT
Not After : Mar 27 17:00:51 2026 GMT
Subject: CN=a354e73b61529b7e7f7c4ee1fa36e58aca129745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:c6:fd:41:ca:fc:c9:aa:06:c8:82:3d:75:
c4:17:22:0e:87:e0:4c:42:85:f5:d0:ca:17:d6:85:
97:d1:80:7a:a4:5e:56:72:60:5e:91:c0:8d:1d:14:
93:3a:74:28:c4:22:7f:8e:9f:88:53:10:cf:c6:84:
2b:10:27:8c:b9:51:b1:c3:b8:49:94:3c:4a:fb:ce:
af:45:c0:58:eb:c4:a9:2b:fa:0c:f0:71:7f:00:b2:
f4:4b:47:aa:8a:a8:f8:e1:f3:71:89:36:35:9d:f5:
37:13:90:06:ad:77:aa:4d:bb:11:20:66:27:37:7a:
7f:bc:6c:2b:a0:f3:ab:e3:b4:17:de:11:e9:93:72:
0b:68:29:6c:42:4c:01:ae:ae:36:2a:aa:28:e8:6d:
b3:87:4a:ed:bf:d1:80:05:ec:13:53:25:b6:88:71:
0a:39:32:28:b2:f3:a0:d4:af:ce:19:76:04:41:0f:
14:b5:f0:a9:1d:5e:01:8d:75:77:75:b2:eb:1f:d3:
2c:c6:c5:0f:96:07:81:85:ef:00:b1:ad:df:a4:eb:
04:dd:b3:c9:88:ad:e0:20:18:ca:4f:33:63:90:69:
a4:70:ac:ff:19:21:b0:63:e7:09:c3:0b:52:cf:2a:
0f:ca:9f:2a:25:88:91:dc:43:a7:b8:00:f8:f5:d1:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:E7:3B:61:52:9B:7E:7F:7C:4E:E1:FA:36:E5:8A:CA:12:97:45
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:2d:18:c7:6c:4f:a3:61:bf:56:ca:c6:b5:73:98:0b:63:
b4:d0:cf:3b:87:a0:e3:ee:b4:3b:ab:a1:ee:76:07:c0:14:2e:
a6:ad:8d:52:ae:94:9a:30:d6:4a:6a:06:53:ac:6a:4c:11:04:
13:c6:c9:88:9d:97:46:77:c7:9b:34:26:eb:33:73:10:3b:3e:
24:5b:0c:a3:af:87:10:21:69:1e:3a:0e:4b:35:fa:dc:ad:86:
02:4f:86:7d:c4:99:e0:de:de:7a:e7:a4:52:eb:8c:b1:21:53:
3d:88:05:6a:1d:97:ab:1f:98:6b:8d:78:c5:b5:84:48:99:4d:
fa:21:32:e0:55:ed:c6:47:e9:1b:43:f9:c1:d9:26:6b:b9:3a:
83:58:d3:8d:bc:fc:25:4b:07:32:36:fb:93:1c:88:0d:50:32:
d2:04:7f:64:ca:a6:29:65:72:12:34:b6:08:65:95:08:0d:73:
b1:26:aa:77:0c:06:55:2f:32:e3:9b:15:96:2b:15:b4:87:5a:
2e:c0:5f:63:92:50:5b:e5:5f:02:f1:90:8a:99:10:93:b8:86:
06:12:13:93:32:d7:19:d7:28:51:29:06:bf:e1:b0:3e:16:f2:
d2:53:0e:89:c3:d1:b5:c8:c2:52:16:c2:57:29:bd:49:a9:69:
52:aa:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:51 2026 by rpki-client