Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: XV9a+l79NfJJWTXrgLQtKJGDRXX7l4VgPhL3lke7lFU=
Subject key identifier: 23:D7:4E:32:D2:67:4B:78:28:B4:00:33:7B:9D:C0:8A:F7:4B:9C:09
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 01A1DDCBDC3F0DF90413242D23AE6B530540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 06:01:27 +0000
Manifest this update: Sun 15 Nov 2026 06:01:27 +0000
Manifest next update: Mon 16 Nov 2026 06:01:27 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: PDoAJuQaU8kuyRMUFCn2sCq5wftWxb7J7w4eLg5UTDk=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:dc:3f:0d:f9:04:13:24:2d:23:ae:6b:53:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Nov 15 06:01:27 2026 GMT
Not After : Nov 16 06:01:27 2026 GMT
Subject: CN=23d74e32d2674b7828b400337b9dc08af74b9c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:11:f0:b5:f7:90:4c:dd:d7:1d:5c:16:bf:
b1:58:23:7b:26:f5:e3:0f:e0:f7:8b:32:c9:76:40:
3c:53:3c:cd:cd:dc:63:82:67:2f:66:05:c0:56:8f:
b0:0d:9d:fb:e0:0c:aa:48:f1:c5:0c:9c:22:26:05:
15:5b:95:40:d6:da:f6:63:0b:0d:3c:da:cd:b0:32:
08:82:c4:ed:81:10:45:32:2e:73:bc:82:ac:ff:c0:
2b:8c:f0:d6:88:42:88:ec:af:37:73:69:5c:5e:c6:
67:12:19:18:73:13:63:7b:cb:2f:ae:a0:9a:f0:ac:
3c:24:2c:9d:1f:93:9e:2c:6c:1e:72:73:f0:36:02:
23:58:a4:5a:55:b5:8a:1c:bb:36:53:9b:fc:dc:88:
27:3c:29:3a:9e:b7:07:38:a0:c1:72:40:1d:07:3e:
75:3d:52:bf:cb:66:3c:15:2b:26:b3:3d:2d:f2:d5:
fd:f3:93:a2:4c:14:ae:63:a5:28:bb:18:7a:96:f1:
fb:10:ac:c6:68:1d:69:2c:88:f0:48:6c:01:44:bb:
16:be:4b:53:a3:1d:ce:40:29:ab:97:64:09:98:fa:
89:c3:06:c4:e6:85:59:a6:20:2c:3b:05:33:40:3b:
fd:be:82:60:52:50:e7:c4:78:e8:2e:39:22:51:9e:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:4E:32:D2:67:4B:78:28:B4:00:33:7B:9D:C0:8A:F7:4B:9C:09
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:48:8c:12:1d:99:f7:26:73:66:24:92:89:2e:b5:5d:c4:07:
ca:26:91:c5:b2:c0:2e:b0:76:56:3f:bb:46:95:f4:58:d1:58:
c0:c4:ba:ab:b8:0a:37:9d:a4:c2:df:e0:d9:c5:e2:51:19:2d:
75:a6:3a:ea:6d:12:b4:39:22:66:bc:c9:cf:a9:6c:2d:79:0c:
d6:a2:b1:a9:26:df:2d:5b:b5:9b:ed:3a:af:fa:8d:2c:ea:eb:
40:d8:13:3d:af:91:bf:99:84:32:ec:9e:b3:a8:61:04:c0:35:
a7:4d:8b:aa:4e:0c:57:22:43:fe:bd:69:3c:d0:d0:fe:94:7c:
80:63:68:c3:10:c4:26:fd:90:a8:db:b2:34:eb:b6:1d:39:2f:
5a:bb:eb:45:e8:66:89:7f:0f:13:ac:67:b8:2f:bc:81:68:ab:
d7:aa:d0:f6:74:81:47:41:28:dc:8d:97:b9:69:30:d1:2b:c9:
45:68:6c:66:20:e5:c1:6e:ee:4f:74:ad:20:df:75:50:9b:70:
15:b6:f0:56:2a:c5:7a:20:2d:70:05:bd:4f:7e:e3:47:b4:d4:
c9:06:49:00:02:b0:07:82:13:40:d3:a4:82:2c:07:55:3a:97:
c7:fd:6b:f4:c4:0f:f1:02:17:42:7f:ff:8a:48:31:b6:96:3e:
da:40:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:53:55 2026 by rpki-client