Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: FH+zz4ts+0IooGibRbPek2A5aHg1dOi5Hm12Ip9h7Ek=
Subject key identifier: 9E:47:27:0A:8D:0C:73:BB:84:98:93:81:99:49:8B:78:C3:AE:17:3E
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019F9248E7D82BFA9DF336D0C78D5DBB94E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 135D
Signing time: Fri 24 Jul 2026 04:01:19 +0000
Manifest this update: Fri 24 Jul 2026 04:01:19 +0000
Manifest next update: Sat 25 Jul 2026 04:01:19 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: pWEImvdRn/z2Ro81eoKDqPde5HWU4TUOUtNCi7n1/yE=)
2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:e7:d8:2b:fa:9d:f3:36:d0:c7:8d:5d:bb:94:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jul 24 04:01:19 2026 GMT
Not After : Jul 25 04:01:19 2026 GMT
Subject: CN=9e47270a8d0c73bb8498938199498b78c3ae173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:6f:4e:d8:8f:b9:d3:1b:d9:37:be:fc:be:
bd:4a:97:6a:59:c7:7c:1a:a4:d3:54:af:26:77:d7:
57:4c:b1:eb:8e:56:5f:43:60:31:2a:ec:a6:a6:f6:
2d:c5:d9:0e:76:93:5d:62:19:4c:07:55:ba:bb:1b:
ee:3a:b1:6a:a3:06:e0:e5:d9:ec:2c:1e:6b:01:15:
6d:f0:06:80:03:6e:ab:a9:8f:5f:ef:16:25:e4:d7:
7e:70:38:ca:3e:84:86:dc:89:9e:41:7b:fc:1a:f5:
d2:8a:da:02:e4:dc:7e:3f:c7:e1:c0:14:ef:e3:a5:
aa:9b:8b:bf:a6:b2:86:c7:5c:b9:8b:83:1d:d6:ca:
1b:ba:31:36:b6:48:4d:88:14:6d:11:9a:33:66:d8:
25:6b:99:fb:2f:a8:86:27:98:75:99:4f:db:f9:b0:
7b:96:9b:41:90:06:03:83:e9:27:ea:e8:0a:c1:fc:
a7:43:2d:d6:44:69:35:84:4b:54:7c:d3:ab:c6:d1:
09:a1:f1:08:c0:3e:1e:7c:cf:06:a0:d7:63:5d:55:
f4:f6:64:1f:59:ba:ac:ca:d0:43:46:ff:79:c5:49:
6a:ca:e9:5d:0f:07:26:5a:77:97:f5:eb:1c:d6:a3:
d2:ca:c2:7c:e1:c4:43:77:66:65:65:c8:7c:1a:4f:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:27:0A:8D:0C:73:BB:84:98:93:81:99:49:8B:78:C3:AE:17:3E
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:af:6a:95:96:e2:b6:de:59:78:a6:53:14:58:5e:f0:26:
91:cb:cb:af:77:59:cb:7e:cf:60:2a:85:96:df:7c:1a:12:b7:
bf:55:2f:59:48:c6:65:b9:c9:2d:7f:51:94:d9:93:83:97:6f:
f0:00:36:a5:ce:14:c2:19:5e:b3:18:f6:88:fd:b1:51:e4:aa:
d2:4f:78:55:b4:a0:d5:85:6f:4b:39:26:be:42:c0:76:5e:eb:
0b:e0:8f:9d:3d:48:3f:18:18:7f:43:d8:a8:6c:94:e7:6a:f7:
2c:63:20:5c:50:a2:a1:a9:0b:ce:95:d4:55:bd:13:e7:6c:67:
7e:16:4f:10:fc:8f:a8:70:ae:7e:79:39:19:e1:b7:44:ac:5c:
98:0f:7a:1c:9c:27:75:9a:e7:21:07:5f:0f:9d:b9:0e:52:e9:
cb:c0:ed:59:90:fc:ed:20:9a:e3:96:42:8d:8b:71:33:ac:c9:
02:b9:a3:83:72:aa:62:aa:c7:8d:4b:72:eb:66:8e:80:23:b5:
b7:26:9b:06:01:48:0f:83:88:c5:e6:8b:05:bb:dd:49:ae:18:
31:90:f7:a9:57:26:8e:ce:e4:02:e5:91:56:0f:d1:05:ad:a9:
33:b4:b3:1b:c0:42:49:bc:f8:03:ce:d8:7e:d3:5f:ef:aa:7e:
08:be:85:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSOfYK/qd8zbQx41du5TiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjYwNzI0MDQwMTE5WhcNMjYwNzI1MDQwMTE5WjAzMTEwLwYDVQQD
Eyg5ZTQ3MjcwYThkMGM3M2JiODQ5ODkzODE5OTQ5OGI3OGMzYWUxNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8lvTtiPudMb2Te+/L69SpdqWcd8
GqTTVK8md9dXTLHrjlZfQ2AxKuympvYtxdkOdpNdYhlMB1W6uxvuOrFqowbg5dns
LB5rARVt8AaAA26rqY9f7xYl5Nd+cDjKPoSG3ImeQXv8GvXSitoC5Nx+P8fhwBTv
46Wqm4u/prKGx1y5i4Md1sobujE2tkhNiBRtEZozZtgla5n7L6iGJ5h1mU/b+bB7
lptBkAYDg+kn6ugKwfynQy3WRGk1hEtUfNOrxtEJofEIwD4efM8GoNdjXVX09mQf
WbqsytBDRv95xUlqyuldDwcmWneX9esc1qPSysJ84cRDd2ZlZch8Gk9srQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5HJwqNDHO7hJiTgZlJi3jDrhc+MB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQKvapWW
4rbeWXimUxRYXvAmkcvLr3dZy37PYCqFlt98GhK3v1UvWUjGZbnJLX9RlNmTg5dv
8AA2pc4Uwhlesxj2iP2xUeSq0k94VbSg1YVvSzkmvkLAdl7rC+CPnT1IPxgYf0PY
qGyU52r3LGMgXFCioakLzpXUVb0T52xnfhZPEPyPqHCufnk5GeG3RKxcmA96HJwn
dZrnIQdfD525DlLpy8DtWZD87SCa45ZCjYtxM6zJArmjg3KqYqrHjUty62aOgCO1
tyabBgFID4OIxeaLBbvdSa4YMZD3qVcmjs7kAuWRVg/RBa2pM7SzG8BCSbz4A87Y
ftNf76p+CL6FJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:09 2026 by rpki-client