Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: /fZrZJMOAxW7LprT6H8tAQBsP9st9l7fBOAPH7MFd5o=
Subject key identifier: 54:3B:AC:BB:F1:9C:35:9D:86:33:EA:B5:FF:39:4C:35:17:B1:67:BE
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019E1CB530026B9B218ED61EF724F5531633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 17D9
Signing time: Tue 12 May 2026 15:01:36 +0000
Manifest this update: Tue 12 May 2026 15:01:36 +0000
Manifest next update: Wed 13 May 2026 15:01:36 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: EtX9aXyPerY3J06SXFspcrZOVUZAwN3rGVao0LwUfJk=)
2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:30:02:6b:9b:21:8e:d6:1e:f7:24:f5:53:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: May 12 15:01:36 2026 GMT
Not After : May 13 15:01:36 2026 GMT
Subject: CN=543bacbbf19c359d8633eab5ff394c3517b167be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:31:31:3b:c3:43:7f:ea:99:59:d1:bd:41:
2b:51:00:c2:cb:e9:d4:58:4c:e4:7b:6f:b3:69:1d:
c7:7c:74:fa:39:f7:b4:5b:8d:59:df:fb:2b:8d:70:
26:d5:db:70:a5:ea:bd:3d:ed:fa:ca:61:73:e2:48:
3f:4d:ca:28:44:a6:3e:0a:c8:06:c3:ef:b8:38:10:
8c:f6:e3:31:ce:24:68:6e:bc:cc:69:d5:87:30:d6:
5b:ac:c6:5c:48:56:3a:a7:6f:ab:16:8e:7c:45:8e:
79:e3:b8:a7:a5:1f:b8:79:0e:21:a9:d5:c6:f5:a5:
69:ef:f7:c5:d9:41:b8:38:84:cc:eb:ee:0e:49:d4:
a8:70:79:60:03:a9:c8:66:6c:43:62:66:67:50:a7:
ff:33:fc:01:71:f7:51:13:6f:4f:14:db:39:7c:13:
35:5d:33:3e:a7:8d:1e:0e:12:9e:17:6c:ef:87:b5:
48:d1:2b:ea:cd:2d:d3:1e:00:44:6a:21:18:28:ac:
38:1a:02:41:d7:2a:f0:ee:41:b8:da:b8:38:c5:c6:
8f:af:2e:8a:98:7b:3d:4f:34:5c:8e:43:04:98:bc:
57:bd:76:5e:72:1b:0f:ca:f4:f1:de:f7:23:ce:2d:
dc:06:5a:ec:02:56:fc:61:a0:11:58:39:22:9c:d8:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:AC:BB:F1:9C:35:9D:86:33:EA:B5:FF:39:4C:35:17:B1:67:BE
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:3a:c3:78:64:c4:ff:72:73:72:b8:10:47:ed:9e:78:16:
cb:de:c3:0e:f8:3c:15:11:bd:91:14:bb:9e:83:9f:5e:81:13:
7b:fe:60:2c:3c:39:94:8e:fd:6f:ff:47:e2:e6:89:24:25:d7:
89:0a:3d:ec:20:86:cc:2b:e0:48:57:82:c6:fa:79:02:d8:49:
a6:d3:80:0e:c4:9f:95:2f:6c:8c:4c:82:d9:97:56:7d:e7:e2:
32:66:50:fe:67:1a:49:f6:0d:4d:07:fb:28:7f:3a:4c:b3:40:
dd:d1:a1:cb:97:d4:5a:f4:1b:75:35:33:db:0c:d5:00:c4:65:
ab:60:1f:ea:a1:e6:76:e4:9d:d0:0a:0e:63:7a:43:ee:c6:ea:
be:0b:86:ff:66:37:80:dd:8a:b4:9d:90:82:25:26:ba:b7:26:
12:de:5c:dd:e0:93:ce:a2:07:27:ec:96:26:91:49:34:bf:5f:
19:dc:b9:8e:69:87:82:fa:a5:e6:6b:70:69:cd:e1:a7:05:9c:
97:95:76:1e:93:05:47:3e:c9:d6:c7:36:7d:51:3c:4c:ba:90:
c5:7b:a2:4c:ac:e0:45:73:51:9a:a2:20:2a:db:0a:08:06:41:
91:d9:d6:69:48:62:58:7e:1f:84:af:16:d9:58:15:eb:36:8b:
7f:c3:f1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctTACa5shjtYe9yT1UxYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk
NmNkMGUwHhcNMjYwNTEyMTUwMTM2WhcNMjYwNTEzMTUwMTM2WjAzMTEwLwYDVQQD
Eyg1NDNiYWNiYmYxOWMzNTlkODYzM2VhYjVmZjM5NGMzNTE3YjE2N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy8xMTvDQ3/qmVnRvUErUQDCy+nU
WEzke2+zaR3HfHT6Ofe0W41Z3/srjXAm1dtwpeq9Pe36ymFz4kg/TcooRKY+CsgG
w++4OBCM9uMxziRobrzMadWHMNZbrMZcSFY6p2+rFo58RY5547inpR+4eQ4hqdXG
9aVp7/fF2UG4OITM6+4OSdSocHlgA6nIZmxDYmZnUKf/M/wBcfdRE29PFNs5fBM1
XTM+p40eDhKeF2zvh7VI0SvqzS3THgBEaiEYKKw4GgJB1yrw7kG42rg4xcaPry6K
mHs9TzRcjkMEmLxXvXZechsPyvTx3vcjzi3cBlrsAlb8YaARWDkinNj8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ7rLvxnDWdhjPqtf85TDUXsWe+MB8GA1UdIwQY
MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt
OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi
LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAQ6w3hk
xP9yc3K4EEftnngWy97DDvg8FRG9kRS7noOfXoETe/5gLDw5lI79b/9H4uaJJCXX
iQo97CCGzCvgSFeCxvp5AthJptOADsSflS9sjEyC2ZdWfefiMmZQ/mcaSfYNTQf7
KH86TLNA3dGhy5fUWvQbdTUz2wzVAMRlq2Af6qHmduSd0AoOY3pD7sbqvguG/2Y3
gN2KtJ2QgiUmurcmEt5c3eCTzqIHJ+yWJpFJNL9fGdy5jmmHgvql5mtwac3hpwWc
l5V2HpMFRz7J1sc2fVE8TLqQxXuiTKzgRXNRmqIgKtsKCAZBkdnWaUhiWH4fhK8W
2VgV6zaLf8PxBQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:09:29 2026 by rpki-client