Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: CHivCtFTMTzCFSCfek4B3tae5XHGQKAF/YsLswS++pA=
Subject key identifier: BF:00:A4:A5:F1:DA:83:0B:3E:20:7B:6E:C8:B5:08:6B:4D:8A:F9:76
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 01A0D011E40F632D87B2A45AF375461C7575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 1A57
Signing time: Wed 23 Sep 2026 21:00:28 +0000
Manifest this update: Wed 23 Sep 2026 21:00:28 +0000
Manifest next update: Thu 24 Sep 2026 21:00:28 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: E4xEA1h1jcg9/y0OYzFwaNxHilvwExhTQKq7TlpbNVI=)
2: DP7T_q2dH40UAoEeaOyilRTarIc.roa (hash: eI6A0wd8tTUmEmNVJN3J+AgyOo9pOZ6DcargfGd5ggE=)
3: sxE81xLDEQT0P-TPsy-WofGvQHg.roa (hash: DGA+4dzkewtJxSyfNRDqxt+xT7jcUam8PPEoRnh0nXE=)
4: zkEx11XO93N85vwrTCOs3PDbZd0.roa (hash: Qdd6ijsBLwMFkDU5X4d6hXWxnnXx+SCnTnhqOiOzcAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:e4:0f:63:2d:87:b2:a4:5a:f3:75:46:1c:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Sep 23 21:00:28 2026 GMT
Not After : Sep 24 21:00:28 2026 GMT
Subject: CN=bf00a4a5f1da830b3e207b6ec8b5086b4d8af976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:f0:44:d1:54:e8:47:8f:a3:10:4c:12:4a:
b8:20:66:65:86:0b:42:9a:d0:d5:96:6f:86:9f:4c:
82:db:76:a3:41:5f:f9:24:ae:93:15:e2:74:3b:3b:
68:bb:96:e6:e6:73:98:a1:f6:0b:14:7e:ae:d2:d7:
76:20:10:2d:fc:3f:c4:59:aa:4d:91:99:61:5d:d8:
4f:7a:ea:72:f1:43:29:22:e9:05:36:df:23:df:e0:
db:7d:fc:e3:02:3a:2c:0e:9e:93:ae:b8:7f:b4:55:
d3:0d:c6:56:73:5b:ff:b3:e6:30:d7:bf:7d:48:b8:
01:54:0a:1c:68:9f:d6:a8:25:f3:4b:01:b5:f3:62:
48:03:60:45:88:37:57:84:1c:1b:c8:1e:16:be:1f:
7b:da:d1:77:04:e6:19:38:05:fc:f9:ae:f1:6c:32:
54:f8:82:9f:c8:8b:8e:94:d4:85:7e:27:7a:37:f0:
50:05:8b:22:3e:17:51:17:7b:90:b4:f1:16:33:94:
42:1e:91:ef:fd:f4:97:44:b4:4b:d4:07:17:96:9f:
9b:41:a3:14:15:fb:8d:2e:dc:f3:3a:b3:70:6f:82:
ae:a1:97:1a:ec:cd:a7:1d:52:7e:11:26:65:89:fc:
08:91:3d:8b:48:8a:0d:75:0f:23:37:f5:2d:19:80:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:A4:A5:F1:DA:83:0B:3E:20:7B:6E:C8:B5:08:6B:4D:8A:F9:76
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:6b:8d:25:fe:0d:d4:1f:9c:e8:c8:e9:97:09:c1:a0:55:
89:38:e2:b7:87:5e:13:dc:a1:ed:27:c2:64:f5:2a:45:cd:59:
ad:68:99:86:9e:38:63:0e:8d:c2:9b:8f:65:67:27:fd:2e:f5:
ef:65:f0:7a:14:e0:2b:44:4d:a1:37:53:fc:7c:90:31:30:c7:
84:be:b9:a5:c1:b3:e9:a5:99:89:30:dc:16:35:2d:e8:19:25:
41:ec:e1:93:7c:03:d2:fa:bc:a0:ef:79:0c:c5:eb:06:be:97:
d1:6e:ec:8c:f6:97:7e:cf:89:ce:ef:9b:14:da:9a:8d:68:18:
dc:54:f7:d5:48:7b:55:37:84:da:c8:b4:8e:a8:cc:35:03:66:
77:5e:64:a1:63:5f:95:bf:2e:fd:04:03:76:67:55:48:c7:fe:
34:c1:3f:f0:c6:88:5e:c6:37:fa:ad:77:c2:c9:2f:fd:40:f9:
06:d5:c9:45:e3:5d:11:6d:94:19:b9:49:82:cb:10:63:d1:e7:
eb:6f:2f:08:8f:00:a0:40:9f:53:52:56:dd:b7:f5:71:70:e7:
4d:78:92:8c:fb:3c:a4:f7:b5:eb:01:59:67:60:7a:5d:13:32:
6d:97:53:97:9a:42:ce:1e:e0:cb:1d:66:f3:79:7d:63:56:af:
a8:58:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:38:56 2026 by rpki-client