Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: GxNboEjf2RqT8OieOOT+wgT/nXhbvy8X/AZg1YGze0o=
Subject key identifier: EF:C2:16:EB:43:FD:C2:97:F5:B3:6E:5A:EF:25:6D:CF:E6:CB:46:71
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019F9059F0A01C2CD8423663CC72CDC12EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 0106
Signing time: Thu 23 Jul 2026 19:00:41 +0000
Manifest this update: Thu 23 Jul 2026 19:00:41 +0000
Manifest next update: Fri 24 Jul 2026 19:00:41 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: X/7+uV+HFXcm2kV2cri00FsNLV9dm55Xn2n5BoWInZc=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f0:a0:1c:2c:d8:42:36:63:cc:72:cd:c1:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Jul 23 19:00:41 2026 GMT
Not After : Jul 24 19:00:41 2026 GMT
Subject: CN=efc216eb43fdc297f5b36e5aef256dcfe6cb4671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:88:4b:db:1e:c3:49:bb:64:a5:0c:b4:00:
a5:9a:96:0a:e5:59:3f:e6:e5:34:2d:d1:89:ac:bb:
2b:d4:77:ce:8d:3a:41:90:ad:2c:9e:c1:4c:70:05:
5f:ec:2e:41:df:f8:69:6f:56:31:25:a7:2e:cd:68:
75:4d:bc:ef:2d:9c:c3:8b:71:ea:63:f4:2b:9b:9a:
43:37:5c:a4:7c:e9:d1:8c:2d:a3:ce:39:d7:48:5e:
b8:12:e2:e3:10:ff:3d:4b:ff:77:39:c5:97:0d:8b:
18:76:d9:36:29:c0:0d:6d:83:10:2c:ef:b8:b4:4f:
1b:68:a0:bc:48:e5:c9:ba:51:a0:09:86:79:cf:00:
81:a5:78:a6:65:b5:2d:b7:ea:ba:c3:4b:be:db:32:
b3:c2:60:c7:78:ca:96:85:a1:7e:33:a7:a8:bd:3e:
03:13:a4:bc:b3:54:9d:21:58:31:b9:43:0c:57:fe:
7c:74:be:72:d9:ce:bb:b7:fa:99:6b:55:48:e4:cf:
dd:0f:02:79:49:03:47:f5:0a:fa:6d:2e:f5:11:55:
05:b6:d2:78:f3:9b:7f:79:7f:40:78:a4:68:5f:d1:
19:24:fb:e0:6f:53:d5:2f:93:c6:c0:68:7a:b0:00:
cb:56:5e:1e:00:60:3a:b9:4a:68:e6:55:9b:fb:ae:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:16:EB:43:FD:C2:97:F5:B3:6E:5A:EF:25:6D:CF:E6:CB:46:71
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5d:d6:e7:6a:b5:6d:1c:e7:fd:fd:91:50:d8:23:15:7c:a5:
4b:70:f7:c3:ac:67:ce:50:28:c0:c5:55:a5:24:7e:1d:f6:9f:
b9:75:00:02:d5:c3:d2:a8:34:e9:93:e1:02:fe:3e:41:3a:88:
fa:a3:ab:ec:1b:a9:e8:3f:d5:3a:b7:a2:f8:5b:44:8a:02:82:
bb:9a:58:cc:de:2c:4e:8f:00:6b:9c:15:41:df:a1:19:53:31:
4e:e6:9d:b8:88:e9:08:a8:e0:e4:13:00:6b:84:f9:97:b4:04:
e7:90:f8:f2:1d:9d:58:10:d1:c1:20:b1:57:22:bf:e0:3b:d7:
15:89:d8:33:d3:0e:85:59:3a:9f:f8:39:23:7e:b0:1b:a3:89:
99:23:a2:96:cf:78:ac:21:ae:04:76:d7:2d:bc:f3:c2:97:42:
7f:7a:f2:ea:ba:0a:dd:25:08:e0:3f:a0:68:66:57:5f:b6:c4:
d4:3a:64:ef:4d:7f:ad:9c:d2:80:4b:06:2b:36:d4:ab:ea:45:
36:cb:52:4f:40:c4:56:9f:c0:73:e2:72:a2:ab:69:b4:cf:55:
b2:bc:b4:0b:dd:a5:b6:4c:c8:ac:f3:39:12:5a:e5:e2:dd:f1:
f8:c7:4f:a6:b9:34:04:60:0e:2b:42:1d:af:8b:a6:fa:4e:81:
43:6f:ed:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:05 2026 by rpki-client