Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: j2WY9sbqKB60hFkvwI8/YETm1ZeUC551grYBsGWoNQU=
Subject key identifier: 7F:84:15:36:07:E2:F2:68:2E:C2:39:19:4E:0F:9F:96:36:38:DD:EE
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 01A0DC8510EEC0D5D40532C8A3CE65E2DBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 01B2
Signing time: Sat 26 Sep 2026 07:01:43 +0000
Manifest this update: Sat 26 Sep 2026 07:01:43 +0000
Manifest next update: Sun 27 Sep 2026 07:01:43 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: yW+Qq+Gw5JFP2vH2mZ+ZEKssC0sGaLiqf4ye19IevUo=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:10:ee:c0:d5:d4:05:32:c8:a3:ce:65:e2:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Sep 26 07:01:43 2026 GMT
Not After : Sep 27 07:01:43 2026 GMT
Subject: CN=7f84153607e2f2682ec239194e0f9f963638ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:26:63:45:b0:17:24:98:5a:62:1e:8c:9f:
46:c2:80:59:03:ea:61:c4:eb:2d:92:bd:61:86:4b:
c6:ab:60:a6:81:57:d7:3e:87:6c:af:5a:8b:66:e5:
25:85:52:71:20:5d:ab:6d:bf:8d:1d:38:1e:7a:33:
b3:85:ec:c4:d8:59:89:3c:ef:a5:9c:9c:71:37:63:
f4:aa:66:e3:5c:f5:e1:8d:df:3a:68:19:cd:39:b2:
63:3c:20:9b:27:76:b6:be:19:6f:ac:ad:95:cd:5b:
7a:16:b2:95:e3:73:ef:69:72:d3:eb:d3:8a:22:33:
c9:a1:9f:55:d8:0d:6b:d5:f5:04:03:ef:4b:a7:95:
bd:ee:04:77:2d:29:c2:1c:56:69:7f:04:77:58:38:
47:6e:50:9f:5b:e9:67:23:cb:fd:b8:d6:2e:cc:8b:
12:f8:27:57:b9:d2:e2:7a:2c:59:04:43:19:0a:a7:
fb:26:18:8b:f1:53:4e:eb:7a:10:77:b8:01:cb:7a:
96:13:9a:85:31:d5:bc:00:7d:30:e4:71:d6:c9:12:
84:14:ae:97:2e:b2:5d:d1:35:e2:00:86:31:0d:43:
6d:ff:7c:7f:89:53:3b:5e:8f:a5:ec:43:19:8d:8a:
35:6c:91:7a:e5:eb:48:03:0d:4f:c8:14:32:19:b8:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:15:36:07:E2:F2:68:2E:C2:39:19:4E:0F:9F:96:36:38:DD:EE
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dc:7d:26:96:e3:00:6f:14:07:58:db:be:97:20:57:a6:2d:
11:b6:98:85:e1:8d:7b:e1:20:bb:51:d9:5f:44:1f:0a:8c:24:
42:71:2e:d7:27:f9:f9:59:f4:0c:97:e8:1b:e7:10:cc:b4:32:
73:93:49:22:b4:d2:e1:7e:94:42:c3:dd:1a:2b:26:53:e6:6e:
ae:b5:c1:e1:1f:8a:87:6a:87:4d:35:71:5d:1d:7c:e3:c6:87:
58:f3:b8:1b:94:30:1f:16:33:a2:1c:05:44:34:60:62:c4:06:
87:9f:dc:99:c6:0b:bf:de:bc:38:20:2f:b8:fd:75:34:56:10:
10:25:af:65:55:02:9c:8c:f8:d7:9b:27:65:82:e8:c3:0e:1a:
a2:62:1e:54:cd:4a:ef:9f:fc:c2:17:39:4f:a0:f9:32:2d:44:
fc:2c:ec:cb:27:5c:1a:0e:ff:d3:dc:70:da:47:a3:a1:05:a0:
67:0f:12:3e:83:72:58:f0:af:94:19:23:7d:9e:1f:34:ca:d8:
0a:18:d7:f5:22:a1:22:c8:80:0a:b4:b2:ea:f3:3c:90:7e:99:
2b:c7:55:1c:c5:e5:c8:82:cc:9f:7c:e5:fb:56:0d:f4:42:14:
f2:7b:ff:58:27:15:1c:81:93:83:af:97:c3:5c:cc:e9:0c:65:
c6:59:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:38:36 2026 by rpki-client