Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File: 28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier: Kve6TOojv2UTPq6BhERi+seP3LVXiUco6yvhxK9Sb1Q=
Subject key identifier: A0:40:70:AE:44:13:7C:AD:78:9A:52:F0:95:60:E4:C9:B7:4A:C2:5A
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019F9054F669D500A42372C53506CE9965FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number: 0193
Signing time: Thu 23 Jul 2026 18:55:14 +0000
Manifest this update: Thu 23 Jul 2026 18:55:14 +0000
Manifest next update: Fri 24 Jul 2026 18:55:14 +0000
Files and hashes: 1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: vJtCD120MspJ9K4qGr1UddrOA9fdiTJQgjJiLR+LREA=)
2: VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa (hash: PsHxBvZ369SRFDSO+Fj2EJJzFPlfyfCCV/NJdrfL2e4=)
3: rReuKYKAVqr3CoKH5UO-1aSW-mc.roa (hash: fGoH+yub0teNtoDmdJ6CIXMKMtZMJfMpSQSYdG/VkrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:54:f6:69:d5:00:a4:23:72:c5:35:06:ce:99:65:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Jul 23 18:55:14 2026 GMT
Not After : Jul 24 18:55:14 2026 GMT
Subject: CN=a04070ae44137cad789a52f09560e4c9b74ac25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:16:ae:05:a6:43:b3:5e:3c:a0:78:59:ad:
8c:1b:dd:97:1a:77:1c:2d:d2:f9:71:b5:4c:6c:74:
c6:2b:6f:aa:4d:44:b0:5c:c6:50:65:a0:76:74:e0:
aa:1a:55:6c:24:ac:5c:e6:3e:1f:6e:aa:2d:e7:6d:
94:7a:0f:e4:b5:e5:56:b8:60:e7:15:00:e7:4c:11:
ed:7f:d4:3e:3d:be:c2:dc:83:4b:38:02:68:40:00:
dc:21:5d:96:a1:b6:04:a9:e5:6d:17:6f:84:78:fa:
3b:f1:f7:ed:5e:21:2b:c5:ef:a1:bb:e0:29:93:1c:
95:03:ae:dc:ab:66:46:5c:6c:5b:ec:2f:3d:2b:c2:
a1:7a:d0:e2:2d:e0:e4:03:a3:5a:f1:d3:78:4f:1c:
cb:6f:cd:c4:58:71:71:32:82:b6:71:6d:a0:53:83:
cb:18:61:11:26:b0:ed:b1:5d:ec:a1:51:a7:c0:25:
44:08:87:5e:8d:e8:5d:9d:db:af:af:d2:bd:b2:0c:
89:f5:e1:ec:04:07:27:34:2a:68:d9:46:0a:22:34:
bb:c2:fa:2b:ad:88:88:b4:5c:4e:2b:e8:16:54:0a:
ec:6d:6a:8f:6b:07:ac:81:87:e1:76:03:cd:03:09:
2d:74:54:14:c7:e4:6a:2e:af:36:fd:45:e5:d6:66:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:70:AE:44:13:7C:AD:78:9A:52:F0:95:60:E4:C9:B7:4A:C2:5A
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:b4:43:af:3f:8b:bb:35:0d:4a:39:b3:83:59:55:cd:cb:
3d:99:72:ea:da:f6:77:2e:95:b4:f0:e3:e0:db:58:0e:99:bc:
5a:fe:bf:c5:19:53:b0:75:6f:d5:62:80:24:3e:61:5b:61:d6:
d0:d9:27:e1:fb:4f:dc:ae:8a:21:18:16:bf:12:da:90:ee:dc:
d0:a5:ba:0f:77:a2:e0:a7:c7:4c:b5:17:71:bb:97:6c:6b:c7:
b1:7f:9c:62:c0:f4:f4:6b:9c:8e:6f:82:3e:fc:7a:5d:03:c0:
28:6d:57:c0:4d:13:ae:54:bf:2a:2e:a4:4b:d1:72:80:ba:f5:
6e:d2:4c:cd:17:88:50:43:7d:c7:a6:b6:6e:f3:ee:99:c7:4c:
46:24:2f:6b:9a:c4:66:c5:04:ec:2a:cf:cc:da:a3:66:76:1a:
fd:f7:bf:0a:21:6b:3f:4c:e8:3d:69:b1:a9:07:41:b1:4f:2e:
71:9c:6e:c6:19:74:39:21:81:c2:ca:61:fc:f3:a9:74:8b:e9:
24:4d:b3:d0:34:9b:26:fb:ec:56:f2:a7:89:35:2b:11:cd:47:
42:93:52:76:fe:a7:5c:ab:b7:f2:16:ab:86:0c:2f:c0:d8:48:
bb:93:e5:d1:fe:40:de:57:7e:4e:79:18:f0:68:c9:bb:1d:89:
f3:26:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:20 2026 by rpki-client