Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: y7Ug9pxXYFzPlg2DH76uejFKxT/PEsIa57LNzWUwdgY=
Subject key identifier: 81:9A:11:FA:F9:99:1C:FD:9A:87:68:D4:79:DF:11:25:CA:27:B9:2E
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019D26CCE82443F7BF61AD5867490E30E48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: dAK0zSbVMJCaJGBABYt53X3UEaKnjl8g/gPSxZ7ewBA=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e8:24:43:f7:bf:61:ad:58:67:49:0e:30:e4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=819a11faf9991cfd9a8768d479df1125ca27b92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:6c:0e:4e:4c:a8:40:6b:a6:89:6c:e3:61:
42:2e:28:31:3d:bc:27:93:d7:5d:f8:66:75:d1:3f:
ae:d5:22:e5:2b:1e:cb:45:22:42:a2:71:e8:1b:f7:
78:e1:b8:10:14:61:1a:99:d4:93:8f:c7:35:da:e3:
59:93:af:d7:c2:d1:55:13:68:9a:af:91:c5:8f:62:
20:46:28:5b:e8:1b:57:36:e1:0a:e7:08:0e:82:ed:
48:e0:fc:3f:2e:b3:11:7a:b1:7c:c8:4b:9b:c2:0a:
52:9d:fe:aa:58:2e:6d:e5:25:e3:56:73:4d:49:ed:
ba:41:ad:06:1c:c7:a7:3e:4a:38:e9:bc:85:ac:0f:
43:df:e3:1b:f7:27:0d:92:0f:8d:05:b4:51:da:61:
4a:31:07:71:b4:e5:99:cb:3e:18:83:fa:16:49:5c:
96:3c:f7:96:c6:f6:26:da:8d:96:e2:43:da:61:50:
21:69:e9:40:cd:90:db:1e:2b:33:40:fe:de:36:8d:
d9:fa:88:05:f7:86:2c:da:84:ae:62:7f:4b:95:32:
81:a4:6a:d2:e4:5c:e6:b8:61:af:b9:72:d5:c5:0c:
38:8b:e4:dd:fc:90:a6:de:eb:f0:be:63:39:73:63:
e4:1f:18:79:c6:b7:30:e7:37:06:66:e1:53:73:77:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:11:FA:F9:99:1C:FD:9A:87:68:D4:79:DF:11:25:CA:27:B9:2E
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3a:90:26:e6:bb:87:14:8e:b1:1f:e4:63:24:83:b6:ec:67:
df:04:08:96:70:e8:b7:b1:91:74:4c:34:a1:b4:4d:6c:fd:fb:
8f:12:98:cc:09:68:a1:06:4a:53:3f:d7:fe:ed:1f:44:61:9b:
ba:6e:8c:69:05:e3:85:43:91:17:58:28:f4:f4:19:14:84:9c:
f7:11:85:7f:bc:bf:ab:ed:2f:21:e8:99:28:6a:41:92:c3:aa:
38:37:bf:8b:36:84:cf:22:88:3c:18:95:c3:e8:46:7e:94:5b:
bb:ad:2e:54:f3:2e:b9:37:82:e0:06:aa:51:95:2b:28:68:14:
4f:de:ee:e5:ee:3c:06:8b:43:52:53:51:9e:bb:77:a7:bd:0b:
15:02:b9:22:0c:4d:dd:9b:24:6d:dd:d3:1d:de:a4:ca:5e:c5:
7b:25:6d:13:e8:d6:a6:67:c6:e1:91:b6:8c:22:53:27:e9:3b:
bc:d8:29:04:51:17:ab:3d:62:c8:18:aa:43:a3:e2:39:3c:0a:
80:7c:51:97:01:eb:b3:38:22:fc:d0:13:fe:45:f2:71:e1:8c:
4b:52:b0:68:9f:56:3f:53:d9:93:0c:c4:f2:5b:b4:78:4b:21:
95:94:62:9e:ac:43:40:b6:bd:fd:50:bd:e7:74:c4:11:e7:da:
d4:f5:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:29 2026 by rpki-client