Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: a7+pe62A16mROdSEzLPCIx+n2f2lCC6oHw3eynJ9+5A=
Subject key identifier: D9:A8:B1:6D:82:A4:BE:9A:F8:84:9D:91:8A:38:1A:15:9B:13:F7:0F
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019D2AA954D65B7174DE45FFA81FC6114792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 15:00:33 +0000
Manifest this update: Thu 26 Mar 2026 15:00:33 +0000
Manifest next update: Fri 27 Mar 2026 15:00:33 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 8K09n2f9jFUTxsvu7a8MMw+tcwHQaXDE0Zo9XBN3hxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:54:d6:5b:71:74:de:45:ff:a8:1f:c6:11:47:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Mar 26 15:00:33 2026 GMT
Not After : Mar 27 15:00:33 2026 GMT
Subject: CN=d9a8b16d82a4be9af8849d918a381a159b13f70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:5a:17:3f:8d:0c:b9:bb:ae:8f:9f:cf:99:
1b:7c:69:af:24:f3:56:97:2e:67:0f:bc:60:f1:0f:
16:5a:3d:ef:c5:39:54:a5:58:7c:14:da:5d:ef:17:
49:53:ac:bf:6e:48:ab:84:b2:2d:ca:d7:e4:41:99:
97:93:e7:c6:30:0f:94:1e:f1:0e:46:64:e4:bf:8e:
bc:6b:ea:cf:a9:ad:fe:57:67:63:46:ef:8d:e6:66:
f9:4c:b3:14:e6:47:f3:65:28:49:74:6b:dd:41:d4:
99:b1:d2:8e:bb:47:7e:a6:91:7a:62:ca:31:a1:9d:
4a:08:77:12:9d:1d:9d:a1:23:38:27:fe:e6:cc:95:
a4:d2:da:c6:5e:42:2e:ce:57:25:f4:c9:9f:72:71:
47:8a:c6:91:af:97:a3:56:03:f5:2e:c5:26:df:e3:
69:46:8a:6b:1f:e4:52:2a:ef:a1:ba:de:4f:89:dd:
a6:cc:0f:95:e6:ff:e3:ac:2a:6e:73:9e:b9:e4:8d:
e5:f9:54:35:fc:75:bc:55:87:82:d8:7d:5f:67:53:
a2:1d:d6:f2:5e:58:f3:19:95:bc:b6:fe:96:98:73:
19:2c:be:78:ad:40:bb:a8:b9:38:84:af:4e:1f:34:
09:21:a2:a1:61:a7:de:9d:bf:d5:7f:a9:5d:39:a7:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A8:B1:6D:82:A4:BE:9A:F8:84:9D:91:8A:38:1A:15:9B:13:F7:0F
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8f:6e:d7:c2:d1:7d:c3:62:39:9f:44:57:f9:35:16:90:73:
fb:9f:48:8a:2a:d5:f2:b1:22:7d:76:a1:0f:c2:d7:db:fe:6f:
7f:f5:58:47:18:cc:8d:e9:e5:1d:ad:d4:aa:08:7e:c6:29:83:
c7:9b:dd:70:8f:8e:29:f2:1b:03:58:8a:95:f8:28:93:95:e9:
ed:0d:08:18:56:46:c3:c5:b5:cb:bd:99:77:b7:8f:ae:e6:18:
c0:b6:04:bb:1e:ba:98:14:87:cc:59:cb:70:51:56:3e:83:6b:
7f:94:4c:16:25:7f:99:32:04:ac:74:8a:85:d7:61:1b:6c:03:
27:bf:25:51:7e:fc:14:6f:24:71:bf:0a:d0:54:38:a7:52:78:
b6:d1:00:8f:e4:22:e3:b1:57:06:d9:dd:38:15:7f:0e:16:b8:
3d:a0:d3:fe:70:69:25:7e:88:aa:f1:c8:7e:48:f0:30:70:c8:
28:37:fd:d9:90:84:73:3c:dc:89:dd:d8:e0:b2:00:3a:1d:17:
2f:2f:f3:c1:db:c6:f0:1b:4e:ff:33:88:7b:9f:dc:de:44:dc:
5d:9c:46:fe:d4:b9:cc:e1:4b:8f:7c:8f:b7:40:e0:5a:c3:5f:
73:45:fb:96:52:92:ef:f4:71:b2:d9:dc:10:35:42:56:63:d5:
28:e3:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:43 2026 by rpki-client