Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: D0lLElvU2IuVln2jkja43LV0YCVsUdSJ1zUMdQswDpI=
Subject key identifier: 32:93:7F:28:32:AF:80:3A:2A:30:7F:24:CB:90:6E:6C:D1:2E:25:BF
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 019D2B4DE4BC43E820BFB6743EA931051B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 1874
Signing time: Thu 26 Mar 2026 18:00:18 +0000
Manifest this update: Thu 26 Mar 2026 18:00:18 +0000
Manifest next update: Fri 27 Mar 2026 18:00:18 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: QAI7gZDYu10wCuHy3BBxJQSEp9jXPB0OezKcXHukQtg=)
2: DP7T_q2dH40UAoEeaOyilRTarIc.roa (hash: eI6A0wd8tTUmEmNVJN3J+AgyOo9pOZ6DcargfGd5ggE=)
3: sxE81xLDEQT0P-TPsy-WofGvQHg.roa (hash: DGA+4dzkewtJxSyfNRDqxt+xT7jcUam8PPEoRnh0nXE=)
4: zkEx11XO93N85vwrTCOs3PDbZd0.roa (hash: Qdd6ijsBLwMFkDU5X4d6hXWxnnXx+SCnTnhqOiOzcAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:e4:bc:43:e8:20:bf:b6:74:3e:a9:31:05:1b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Mar 26 18:00:18 2026 GMT
Not After : Mar 27 18:00:18 2026 GMT
Subject: CN=32937f2832af803a2a307f24cb906e6cd12e25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:da:7e:95:47:b2:58:f5:e3:d5:98:3a:f9:
9c:ba:ab:c9:6a:0c:ff:84:36:96:ae:7e:07:ae:32:
58:66:29:f8:a6:20:fd:80:4b:29:b6:d3:63:a6:77:
25:38:dc:3f:66:4f:02:4b:f0:99:58:40:71:1c:12:
a8:5b:d2:ee:ac:59:84:ed:5d:b5:ae:e7:e7:6e:2f:
10:66:46:c4:92:08:4c:fe:d4:34:23:d2:67:f8:61:
aa:a0:94:ec:ac:30:46:f9:e1:e0:18:b7:c5:c9:09:
32:a9:d5:52:4d:9b:16:cc:26:24:1c:a1:c6:bb:f6:
9e:e9:aa:ac:4b:5a:62:a0:82:6b:41:bc:c7:5c:c9:
26:9d:e2:55:e4:86:26:c0:bb:62:78:1d:67:dc:d8:
15:e5:86:ff:e0:ee:e3:32:a0:c7:17:43:e7:ea:23:
9f:26:4c:08:0d:5f:93:1f:cf:a3:72:15:0e:84:46:
17:0a:f2:78:b5:58:bd:bc:ff:e1:dd:a3:a1:d5:29:
97:f3:2a:e3:37:73:9e:4f:e5:53:d1:e9:ae:dd:4f:
8e:90:00:f3:ef:aa:7a:c5:e1:b8:eb:93:ad:f0:f6:
9e:d0:36:4b:c3:12:c6:2b:69:bf:73:71:f6:77:d6:
d4:37:2d:a1:e0:e7:5b:4e:9b:bd:27:44:1c:77:8d:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:93:7F:28:32:AF:80:3A:2A:30:7F:24:CB:90:6E:6C:D1:2E:25:BF
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:91:24:86:51:dd:2d:08:f3:27:36:22:f6:05:be:b5:14:
4f:f6:6d:ba:6e:98:8f:89:d5:1d:7a:65:58:6a:3f:8a:f0:2b:
f0:7c:24:ac:f0:d1:69:dc:4d:60:02:6d:14:2c:d4:5a:ba:72:
ae:e5:ef:53:0d:f5:15:3a:00:2f:fa:8e:64:07:ec:40:3d:ad:
4e:bc:83:df:53:dc:d1:3e:c6:f5:cc:80:d2:4d:39:a1:65:46:
6d:12:18:42:a8:4f:a1:cf:ea:59:3f:19:88:33:e1:3b:df:fc:
12:74:c9:24:8b:f8:c3:46:cc:f8:2c:54:7b:a5:54:60:68:82:
19:a1:2d:5e:11:6e:db:29:b8:4c:00:79:5c:52:e6:63:08:86:
5f:95:42:d0:14:1f:0f:64:60:da:2d:e4:6a:a8:d8:68:f5:18:
e3:05:93:e3:24:0b:f2:73:cb:25:3e:55:c9:e6:c5:d9:d1:4b:
fb:63:9b:c9:23:6e:87:3c:a0:3b:90:a8:2e:6d:0c:a3:44:8a:
f0:e0:20:1d:20:d8:f0:3f:b5:65:26:c4:af:57:c9:e7:f7:86:
0b:30:71:a7:70:2a:e2:cd:7e:ec:34:e4:47:d4:18:b9:06:0e:
90:40:98:05:07:94:f0:14:da:ed:e4:82:6a:56:ef:46:2a:b7:
a7:db:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:36 2026 by rpki-client