Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: 21VFcdfyk3XjaHMbmsnOCrzwrIFMCADlLWdacZCpneA=
Subject key identifier: C2:A4:35:DD:83:68:18:BF:1B:92:6B:E8:30:44:06:C7:23:C9:D1:A5
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019F8E6BA51337D4F29B6326FB5E47F6F1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 0105
Signing time: Thu 23 Jul 2026 10:00:47 +0000
Manifest this update: Thu 23 Jul 2026 10:00:47 +0000
Manifest next update: Fri 24 Jul 2026 10:00:47 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: HDSPfNCq7KHiDEnRsxi/kOb5wjHevk5qTN2MxAyBiDE=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:a5:13:37:d4:f2:9b:63:26:fb:5e:47:f6:f1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Jul 23 10:00:47 2026 GMT
Not After : Jul 24 10:00:47 2026 GMT
Subject: CN=c2a435dd836818bf1b926be8304406c723c9d1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:12:9c:4a:63:3b:ef:5f:9a:a5:ed:77:7e:
de:9d:82:b3:6c:ff:16:24:0c:20:f7:91:2c:78:e8:
7e:35:a0:bf:19:5d:e7:f8:db:cb:97:c7:78:ca:44:
58:0c:d6:dc:98:b2:5d:53:f5:94:19:d2:29:cf:92:
e4:ca:36:d2:d4:8b:30:d4:82:4d:e9:f2:ef:68:fb:
91:2e:c9:fe:35:dd:b1:9c:ea:bb:89:31:6e:87:38:
3a:bc:64:40:95:0e:25:d6:18:50:10:81:43:7b:29:
f4:bb:a0:56:f1:de:e1:03:e5:77:22:50:ed:26:65:
b6:d4:bd:62:de:77:19:e0:8d:45:37:95:75:a9:71:
d8:80:a8:54:33:f0:f2:ef:14:87:ca:b6:e8:1c:bb:
6d:8d:22:bd:2b:ca:b5:27:4c:fe:15:d3:fe:1d:b6:
65:59:69:88:4a:a7:98:87:b0:47:8e:ef:21:3e:8d:
0f:7f:76:b7:72:be:0f:07:af:7e:66:bf:0d:f8:6c:
9b:85:42:d0:50:28:5b:ee:5f:34:0e:74:70:fe:1b:
6b:0b:34:ce:50:70:f0:3d:a8:fd:4d:97:b9:c5:8f:
c2:a2:e5:7c:cb:dd:9f:1e:07:81:b0:c5:5e:19:cc:
90:c8:16:6d:16:66:42:a6:34:e4:90:f9:79:dd:7b:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:35:DD:83:68:18:BF:1B:92:6B:E8:30:44:06:C7:23:C9:D1:A5
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2d:c4:6d:99:5c:71:6b:18:5a:34:5e:9a:aa:ed:53:6c:99:
3b:a1:6f:75:02:04:da:c7:94:43:e5:aa:f7:fa:dc:ea:72:0f:
1c:c2:52:bf:0c:d1:3b:76:6c:e5:9d:c1:7d:75:8d:2e:de:71:
5f:ee:6b:73:1f:aa:9d:44:0a:73:4a:58:8f:14:9a:a2:24:98:
70:ef:ef:11:e8:e5:75:6c:b5:38:a2:a3:1b:75:a5:f9:10:9c:
c1:15:69:b9:7e:a5:11:a0:4f:ed:74:5e:cd:e3:b2:b1:11:35:
f9:90:3a:cb:9d:0c:46:01:f5:58:34:65:30:45:1b:3e:2d:67:
7c:6e:a7:e6:4d:fc:ab:ce:cd:10:2a:34:8c:0b:50:61:ee:45:
5a:18:9e:53:78:46:35:9d:4e:68:99:d8:b2:86:b2:0b:11:48:
69:c2:47:1a:07:b9:75:e5:8d:24:82:cc:08:6e:98:65:86:7c:
c7:9e:86:8b:b0:8f:5f:5c:5b:65:27:3c:12:86:33:05:ce:00:
8b:4a:2d:4c:71:27:f6:f4:af:4e:d1:83:a8:54:25:0e:24:76:
55:9e:a4:ad:9e:0a:85:f1:1a:21:83:aa:65:f9:f4:0a:e1:68:
06:d4:3b:ca:f9:e5:60:b0:8b:7a:d0:16:07:8b:1c:74:9d:d6:
05:7e:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:56 2026 by rpki-client