Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: X1XIjX4Nx4IPJna7TE/yArpCT0Yu3fR2yIkFUkJMP9g=
Subject key identifier: 0C:CB:A0:8F:4C:CC:84:6F:81:B5:CD:14:88:96:18:93:0D:31:70:49
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019D27720888112BD16581EEEE83D4DCB1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 175A
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: Og1EsBn0hVVtAz6Nk+EdLGDOVGcASpKmhaiA7r5qcsw=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:08:88:11:2b:d1:65:81:ee:ee:83:d4:dc:b1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=0ccba08f4ccc846f81b5cd14889618930d317049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:47:97:1a:85:6c:dd:fc:70:11:82:d1:c4:
a9:1a:13:99:d9:6e:02:9c:2c:c8:6e:55:91:4b:39:
96:25:02:d3:81:2b:dd:16:ff:04:48:7f:6e:00:13:
f2:75:fe:bd:ab:05:22:6f:e2:5b:02:ce:23:e8:00:
75:b2:9d:0e:8b:f2:46:82:a7:c3:0e:a3:ed:9a:ab:
54:3f:a6:2c:2d:ad:b0:df:55:06:73:57:d2:c5:8a:
83:5c:48:dd:e4:3a:60:49:ac:d8:55:13:2a:d2:78:
b7:c1:19:fe:f8:82:ac:66:46:5c:f8:38:c3:1b:50:
fa:7b:8c:47:ea:40:fb:2e:ac:2d:b0:25:e5:b4:99:
ce:db:a3:7f:b4:9b:e1:4b:7e:57:9e:1e:1f:77:40:
1a:26:43:aa:4f:89:ba:eb:4e:4a:50:2f:c1:bd:8b:
25:6b:2f:f2:63:c9:6f:93:27:5b:73:61:2a:91:c6:
af:3e:4a:62:db:4f:af:b1:f2:14:a1:3a:83:08:2f:
7a:e9:7f:ff:e9:de:6c:7d:03:a8:12:98:06:a3:26:
50:be:d2:04:f5:b9:f3:73:cc:e0:00:3a:4e:8d:0d:
f2:19:3a:bd:5c:48:71:c5:06:a2:76:70:53:1e:3d:
e9:99:3b:71:ae:87:5b:be:05:cf:48:ac:7c:2b:90:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:A0:8F:4C:CC:84:6F:81:B5:CD:14:88:96:18:93:0D:31:70:49
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:d2:1e:89:0d:b7:96:76:4a:e6:fb:80:b1:81:00:bb:fa:
16:10:86:82:bf:13:c0:c7:22:71:69:57:8e:fc:58:83:4a:a5:
5a:e7:95:30:d7:1e:58:d3:d8:c6:ca:a2:d9:ae:d2:2e:15:17:
b6:f9:e2:75:67:20:30:26:22:d1:26:0c:41:20:e8:28:6a:c0:
b0:83:d2:28:54:f2:f0:70:7e:7c:f3:11:71:19:0e:69:18:67:
44:79:4f:44:83:c4:38:c0:ef:9b:6e:e4:22:ed:00:bd:56:42:
3d:40:b0:d5:3a:34:fa:97:af:62:d0:96:12:c6:f5:13:4c:48:
68:af:12:8a:55:96:0c:be:09:18:fa:75:c5:da:73:b0:75:47:
4e:f9:a6:ee:e7:c9:e4:8e:49:b2:b0:e0:86:43:b7:1c:db:17:
32:d4:3b:e0:d0:c2:3c:d0:49:19:1b:0b:5e:03:69:f8:7c:af:
27:d5:6a:e1:3a:07:b1:2f:92:3c:92:0c:58:23:17:13:22:d3:
47:03:98:53:29:8d:71:00:1f:cc:ef:93:78:0f:c6:28:44:31:
62:f8:20:ca:9f:39:b5:2d:21:05:7b:4a:5c:19:7b:3f:51:e6:
d8:70:61:ef:1b:a6:ec:ca:e4:22:02:1c:ba:c6:ef:ab:a7:16:
3f:da:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:38 2026 by rpki-client