Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: pHaHQbdlGZLrNMh+u9ktdPHZ6G3RSNyhBHrn7pNMCas=
Subject key identifier: D6:6E:78:8E:00:AE:93:BD:3A:ED:4E:CD:56:4D:89:0A:4B:7D:57:DF
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019E1E6C74FC725573D58EFCAF092B0DBE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1554
Signing time: Tue 12 May 2026 23:01:24 +0000
Manifest this update: Tue 12 May 2026 23:01:24 +0000
Manifest next update: Wed 13 May 2026 23:01:24 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: W29yt3qqhwJNB3SWWPpBdIGKJ94b4X1sMThtQ962MnY=)
2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=)
3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:74:fc:72:55:73:d5:8e:fc:af:09:2b:0d:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: May 12 23:01:24 2026 GMT
Not After : May 13 23:01:24 2026 GMT
Subject: CN=d66e788e00ae93bd3aed4ecd564d890a4b7d57df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:52:4b:ae:82:10:dd:a6:10:3a:91:6c:6e:
15:e7:2f:f6:63:f2:35:d7:46:96:0c:2e:45:fa:7d:
1f:bd:3c:a5:05:33:f8:7e:c4:ca:d8:ff:2a:d8:80:
08:18:6d:20:28:53:50:f8:43:d3:d0:da:2b:bc:34:
fa:1c:d5:ad:0c:8b:a5:a3:65:50:33:6f:fb:90:12:
5c:3c:02:b2:cd:c2:e9:b7:20:60:10:ec:1b:b5:0e:
fe:14:a0:fc:b5:fe:15:a3:d8:7a:3b:41:93:8c:78:
2a:c2:46:34:4b:eb:0b:ac:6e:7d:c0:18:8a:fa:8a:
e0:22:e0:d8:d5:24:88:1a:7e:26:84:dd:05:98:ec:
b6:5f:f0:61:99:7f:ee:f8:82:3a:e4:1a:63:92:71:
dd:41:7c:3e:e6:3a:98:15:41:4c:e4:89:56:02:9b:
1d:10:3f:de:cb:5f:6f:3c:48:16:2b:6c:59:b2:73:
b9:83:05:26:ca:fb:4c:fe:aa:59:70:9b:92:01:d0:
a6:6d:12:0a:25:22:4b:32:02:e6:c7:35:7a:cc:fa:
ca:5e:57:1d:c3:77:62:67:52:2a:11:27:73:5a:52:
e7:28:c5:1f:79:dc:1b:81:c8:3f:fa:40:13:5f:56:
9e:f1:0f:ba:dc:ea:6c:ce:41:65:44:38:c2:35:38:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:78:8E:00:AE:93:BD:3A:ED:4E:CD:56:4D:89:0A:4B:7D:57:DF
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7f:54:e3:cb:da:ff:11:e4:a1:8b:46:36:db:4c:42:67:00:
dd:b3:54:ec:26:1c:90:90:43:39:e9:ae:35:24:af:53:5d:bd:
40:e9:0f:8e:04:51:a9:7b:5f:62:c2:3e:86:97:97:a0:00:37:
56:21:f2:46:85:ae:b9:cf:f3:16:cb:2b:c9:ad:fd:9c:55:00:
13:5c:d8:f5:4c:4c:9d:cb:4a:e7:91:db:02:c5:33:97:ef:50:
9f:14:39:de:bb:79:76:39:5d:f8:2a:09:83:a5:40:b3:15:18:
91:86:41:8f:b3:4f:21:33:2a:9e:9b:92:79:86:c4:f5:93:93:
d8:00:11:3e:4e:0b:92:ee:6f:23:97:f2:e0:1f:a7:bc:a1:f2:
9b:a0:8c:f3:7b:be:e7:60:bd:a6:d5:2a:e2:e7:28:3a:45:f6:
22:f2:89:b7:86:4e:0c:a4:54:c6:9f:74:c3:a2:9a:f0:1c:63:
d1:81:e0:36:bb:f5:2e:c6:97:ca:37:d7:d9:22:32:0c:a1:8c:
24:02:fc:ff:4b:90:ea:6f:0e:b2:e5:4f:2a:ed:ec:8a:da:af:
18:a3:b9:00:bc:ac:49:5d:e8:66:1b:d1:d9:fd:e7:5e:be:75:
38:4a:92:6b:a7:01:4b:34:4a:05:c6:ae:25:47:b9:a5:06:ed:
b4:d7:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:02 2026 by rpki-client