Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: +6GB2GFjw6ECpzaavUVnm6cK/wvA/uwNMRZJMD4HkyY=
Subject key identifier: 14:3B:CD:4F:1A:26:20:FA:93:92:5E:9D:8C:B4:56:63:96:46:E6:B6
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019D2960E9B2CF413D7F88BDF86CD9D79564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 175B
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: 1vv/XEOIbB+ys1EkuuZ6G/mOJbKzGszzDE7dLlHVsew=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e9:b2:cf:41:3d:7f:88:bd:f8:6c:d9:d7:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=143bcd4f1a2620fa93925e9d8cb456639646e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:f0:0e:6c:f8:dc:98:b7:e1:14:b1:5c:b3:
50:1d:42:f0:b7:f9:2a:ba:8d:fd:2f:c5:27:34:5e:
ef:45:dc:bd:ee:34:6e:2b:39:3c:24:e4:d9:52:e6:
65:a7:63:a1:04:e3:c0:b7:f2:4a:b0:f4:ba:70:40:
66:34:40:b6:47:5e:34:c7:21:3f:00:0a:00:3f:83:
87:56:56:65:24:40:96:b6:1a:ae:a3:f2:64:79:ed:
cf:85:b3:12:54:1f:cc:bb:42:13:b2:db:a8:28:19:
b3:ff:20:72:20:9e:3e:59:d5:28:22:c4:99:69:42:
7c:30:b7:04:c1:11:4d:0e:6c:88:89:54:a1:f5:1d:
d7:8b:aa:a1:b2:2b:f3:35:88:a8:90:09:e0:13:db:
8c:d3:50:df:64:0c:87:6e:13:59:5d:ab:b2:71:5c:
c7:bc:f9:81:ad:09:e1:be:63:9a:dd:f5:2e:9f:98:
a1:95:89:d7:c6:0a:d6:a6:07:54:19:91:35:80:fc:
c8:d6:8f:fe:76:8d:c4:3e:1e:c3:10:72:64:81:f8:
71:97:26:55:75:7d:23:d1:2c:87:9f:4c:75:ce:08:
e6:09:44:ae:0f:e2:41:be:05:da:aa:b6:d9:3c:32:
a2:27:1b:36:b4:eb:de:5a:2d:5e:19:dd:77:52:f8:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:CD:4F:1A:26:20:FA:93:92:5E:9D:8C:B4:56:63:96:46:E6:B6
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:04:cb:90:f9:f9:20:73:1c:83:c1:fd:ea:cc:6e:87:c0:a2:
ec:f8:69:27:b5:8f:8d:c6:21:44:77:f3:b4:4d:43:a3:ad:cb:
5b:82:58:75:d0:ee:1b:f1:c4:d9:57:3f:bc:ca:bb:cd:1b:00:
72:e8:f0:8c:2d:7c:1d:cc:78:ba:43:e1:6c:49:07:09:88:85:
70:9d:7f:b9:b0:2b:f0:7e:91:92:a9:d2:73:4c:f4:4c:bf:81:
51:39:d4:98:29:9d:96:4d:81:f5:85:a6:65:7d:f5:2d:07:e9:
06:a6:ed:84:ef:28:98:5e:a1:34:4b:1f:14:eb:9e:fa:67:b1:
bc:16:8a:0f:f3:07:59:ff:3c:c5:e2:5b:79:a8:cf:0b:9a:f0:
17:3b:f0:87:1e:8b:16:f7:d0:15:e4:dc:da:44:c1:e4:07:bb:
11:46:ed:56:ec:70:f9:38:a5:ec:85:b5:04:86:eb:80:25:52:
5c:d6:e2:44:61:b5:63:ca:e2:27:6f:2c:41:94:21:34:3e:88:
52:f7:00:4d:a5:48:ac:fd:ff:c7:60:87:26:a5:52:dc:55:5b:
10:f0:03:1c:2c:09:7a:7e:19:5e:4d:68:99:e7:ae:49:79:8d:
04:32:38:59:a9:3b:ef:2b:98:bb:29:8d:85:2b:04:af:29:80:
1a:bf:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:46:33 2026 by rpki-client