Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: xH2txU3qQSkKusqsQz7C3a9w9EHycTMJpzEanNI5CDA=
Subject key identifier: CB:57:9E:C4:6A:87:7E:20:75:39:DD:2C:60:38:72:6B:FA:0B:C4:D8
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019F90C7E17CC3BCCB9544C0EC27D20359CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:46 +0000
Manifest this update: Thu 23 Jul 2026 21:00:46 +0000
Manifest next update: Fri 24 Jul 2026 21:00:46 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: aGR4k4bx0UwYyfW0jKUNlGfp+kNFg2jJMmG9P58P/YE=)
2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e1:7c:c3:bc:cb:95:44:c0:ec:27:d2:03:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jul 23 21:00:46 2026 GMT
Not After : Jul 24 21:00:46 2026 GMT
Subject: CN=cb579ec46a877e207539dd2c6038726bfa0bc4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:7f:bd:af:d2:c6:8f:ef:2b:24:7a:db:9b:
fe:a9:79:6b:54:0a:08:ce:34:d9:04:b5:19:16:93:
21:87:2b:dc:6d:36:90:96:54:f2:a5:e5:62:34:fa:
e0:bb:e0:d9:4e:71:72:9f:66:7e:97:c8:c2:e5:1a:
ae:0d:05:09:59:18:25:9c:ef:aa:b5:1a:ca:ac:ae:
2d:7f:5f:c1:75:1e:4a:26:98:09:9a:26:fa:b3:93:
7f:bf:89:b4:fc:98:05:08:cd:84:01:10:56:da:ce:
8f:0f:df:79:13:1d:d4:a4:be:e2:2e:57:53:76:d7:
d4:c7:33:46:2d:4f:35:bd:fd:a2:ef:35:fc:7d:97:
22:15:42:f0:97:dd:13:1d:67:aa:20:e0:fa:74:6e:
1a:8c:bf:41:49:41:44:20:f6:ab:84:f1:cd:7e:a1:
bd:3d:9d:14:6b:35:5f:3b:f3:5e:f2:8c:ec:87:60:
e9:53:b6:6f:05:e4:c7:57:46:9c:7f:c6:c8:e9:a8:
e7:6f:0d:c1:c8:f0:ff:e9:ec:f0:09:06:a5:5a:12:
12:f6:f7:75:69:15:0d:0b:07:01:5c:8b:f8:cf:52:
9f:8b:dd:64:bf:34:46:a5:d9:ac:8f:21:cb:9a:a5:
9c:60:f4:cb:b5:c7:66:66:5d:79:5b:92:2c:59:06:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:9E:C4:6A:87:7E:20:75:39:DD:2C:60:38:72:6B:FA:0B:C4:D8
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:18:c6:89:53:a1:8a:0a:f8:51:eb:bb:d1:fd:2d:c5:09:
55:c3:2d:44:15:8a:0d:09:f5:8d:6d:3a:12:23:79:6f:7c:dd:
b2:c4:ef:74:9d:55:33:d1:6e:30:f4:a5:a7:3a:ae:4d:7f:08:
04:12:62:7f:01:26:62:98:f3:53:e3:96:cf:19:95:a3:3b:94:
0c:cb:ab:50:02:ff:d4:9d:f5:2c:b5:d3:9f:6c:04:99:ff:77:
ff:d4:9e:7e:7c:dc:c1:78:4a:39:67:e1:3f:5f:1a:1d:18:de:
b4:9b:d9:5a:16:08:8c:90:96:95:19:81:1b:84:40:09:a7:2f:
c6:56:5e:df:e7:8e:42:a2:e9:ca:fb:b1:09:ba:fc:ca:90:86:
50:9a:e0:ee:6b:f9:3c:35:43:ac:10:20:cf:bc:29:e5:b7:b8:
e7:d8:0a:0c:07:48:5e:d4:75:a3:62:30:cb:5e:39:19:68:83:
86:17:01:b2:76:eb:c2:ff:8b:65:0f:9a:c4:16:fe:24:f4:cb:
ad:2e:67:02:bf:6f:09:54:41:d3:16:6d:01:2d:e5:6b:85:41:
32:c7:93:62:7d:b7:21:12:58:d4:22:1c:9c:c7:89:a9:55:bd:
9b:ac:05:99:6f:3d:22:ee:09:40:48:18:f5:0b:ee:b9:aa:34:
29:17:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:42 2026 by rpki-client