Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: 4tKPZ7l9u0i27+N3Bod3H9cFzv1o8ry2RFNNUO/W2Lk=
Subject key identifier: 37:BE:5E:F1:39:6D:ED:A3:05:AB:5D:5A:6C:CD:59:A5:97:42:A2:08
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019E1C0FF0E8346CA315D2BFF4B84A70172D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:01:07 +0000
Manifest this update: Tue 12 May 2026 12:01:07 +0000
Manifest next update: Wed 13 May 2026 12:01:07 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: /sMReenQ3LjVdbm5XwVxpwr+pzJehI93XUHnI1sB9ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f0:e8:34:6c:a3:15:d2:bf:f4:b8:4a:70:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: May 12 12:01:07 2026 GMT
Not After : May 13 12:01:07 2026 GMT
Subject: CN=37be5ef1396deda305ab5d5a6ccd59a59742a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:01:14:96:b1:c0:04:73:b8:8b:24:e4:b2:
46:ee:e9:2f:84:79:b1:32:97:63:f8:33:0b:13:ee:
b4:4c:56:0d:85:b6:59:d1:23:9c:7d:83:b2:1f:45:
09:1e:61:6c:2c:bd:f2:60:eb:ea:b2:b6:e9:42:9b:
e3:00:46:62:0b:a0:5a:c2:1e:29:f5:42:dc:c5:f7:
a7:ac:15:51:fe:5a:50:b0:18:75:0b:04:ac:8d:24:
3e:77:98:ef:ef:20:eb:4b:46:85:f5:fc:a1:ee:ca:
11:f8:27:cd:a9:22:24:53:e2:1a:d4:70:ad:5a:df:
c3:2e:ed:02:0c:4f:5e:b9:b0:f5:75:d0:3c:a9:78:
62:e8:a9:4e:d6:e0:5b:13:eb:a6:55:68:bb:46:de:
e3:24:97:41:51:27:31:aa:9b:b2:7c:1b:0d:46:35:
9e:2b:75:f6:6d:f7:c4:f9:df:7e:e5:db:c3:fd:83:
2b:b7:c0:1b:ae:d5:a1:f2:ac:8c:2a:35:2a:c6:24:
6b:b5:05:0d:f5:d5:9d:fe:fc:f6:c3:d3:69:e4:d8:
62:f6:92:11:9c:0b:34:b4:b9:c2:d3:1e:97:b4:ce:
ad:16:df:cc:9f:49:9b:27:dd:61:00:76:04:5f:44:
fd:39:de:b5:40:0e:e0:1a:58:2e:dc:4d:6f:01:e2:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:5E:F1:39:6D:ED:A3:05:AB:5D:5A:6C:CD:59:A5:97:42:A2:08
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0e:af:c7:6c:dd:6a:90:1b:09:fe:49:01:b7:c5:87:ce:b0:
3d:01:18:8d:aa:0b:b2:5e:22:d5:15:fd:f1:e2:2a:c2:65:99:
b4:c6:ae:64:7d:30:b5:40:26:b5:a9:86:57:90:01:26:07:43:
82:94:11:61:b0:38:3e:10:ac:79:b6:01:14:dd:94:7b:24:9c:
19:49:8b:66:96:2f:d9:e7:17:24:be:b5:df:4c:f8:e1:db:56:
00:65:4c:0f:1b:82:4d:a3:14:7d:b1:58:3c:0f:c4:f5:d5:a7:
e5:f4:4d:6e:61:7b:25:96:b8:93:1a:66:3f:5f:c4:bf:a8:57:
cc:7b:e5:f1:44:23:45:5c:2a:05:bd:0d:bf:5e:98:24:22:53:
34:28:24:45:8f:19:47:d9:6b:b1:74:87:b2:13:b8:d9:41:b2:
c2:b1:04:33:b0:f7:25:e8:92:9e:6f:5f:da:82:4b:13:fa:c5:
a1:f5:0f:b0:7e:54:2c:18:d8:f7:fe:71:7b:0e:4a:9a:63:18:
63:8e:bd:48:7f:74:01:a3:95:0b:cb:d2:1a:57:e7:6b:65:29:
d7:4e:05:d7:c3:43:85:15:45:4d:d4:db:7f:0c:9b:3d:7e:b6:
dd:05:45:1f:56:b2:01:6e:f0:ba:f7:cb:d3:be:b9:1e:ac:ae:
6d:a3:3b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD/DoNGyjFdK/9LhKcBctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh
OGNhYzUwHhcNMjYwNTEyMTIwMTA3WhcNMjYwNTEzMTIwMTA3WjAzMTEwLwYDVQQD
EygzN2JlNWVmMTM5NmRlZGEzMDVhYjVkNWE2Y2NkNTlhNTk3NDJhMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhwBFJaxwARzuIsk5LJG7ukvhHmx
Mpdj+DMLE+60TFYNhbZZ0SOcfYOyH0UJHmFsLL3yYOvqsrbpQpvjAEZiC6Bawh4p
9ULcxfenrBVR/lpQsBh1CwSsjSQ+d5jv7yDrS0aF9fyh7soR+CfNqSIkU+Ia1HCt
Wt/DLu0CDE9eubD1ddA8qXhi6KlO1uBbE+umVWi7Rt7jJJdBUScxqpuyfBsNRjWe
K3X2bffE+d9+5dvD/YMrt8AbrtWh8qyMKjUqxiRrtQUN9dWd/vz2w9Np5Nhi9pIR
nAs0tLnC0x6XtM6tFt/Mn0mbJ91hAHYEX0T9Od61QA7gGlgu3E1vAeKTMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe+XvE5be2jBatdWmzNWaWXQqIIMB8GA1UdIwQY
MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt
ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk
LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZg6vx2zd
apAbCf5JAbfFh86wPQEYjaoLsl4i1RX98eIqwmWZtMauZH0wtUAmtamGV5ABJgdD
gpQRYbA4PhCsebYBFN2UeyScGUmLZpYv2ecXJL6130z44dtWAGVMDxuCTaMUfbFY
PA/E9dWn5fRNbmF7JZa4kxpmP1/Ev6hXzHvl8UQjRVwqBb0Nv16YJCJTNCgkRY8Z
R9lrsXSHshO42UGywrEEM7D3JeiSnm9f2oJLE/rFofUPsH5ULBjY9/5xew5KmmMY
Y469SH90AaOVC8vSGlfna2Up104F18NDhRVFTdTbfwybPX623QVFH1ayAW7wuvfL
0765HqyubaM7AQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:33:42 2026 by rpki-client