Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: MxxwdAd+xiU0Atppno8mi5FhQ0b37oG0KopMigvOiOo=
Subject key identifier: 2F:E8:11:04:CA:9D:49:18:7F:C3:F7:38:0F:F5:6F:58:35:BE:90:87
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 01A118CF7ED6F36B2DEAE631FCCFBC1068A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1A92
Signing time: Thu 08 Oct 2026 00:00:13 +0000
Manifest this update: Thu 08 Oct 2026 00:00:13 +0000
Manifest next update: Fri 09 Oct 2026 00:00:13 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: DDWOuzj7xgeI+uy39so8oRw68nStACbp50kz216RDY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:7e:d6:f3:6b:2d:ea:e6:31:fc:cf:bc:10:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Oct 8 00:00:13 2026 GMT
Not After : Oct 9 00:00:13 2026 GMT
Subject: CN=2fe81104ca9d49187fc3f7380ff56f5835be9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:bc:61:86:aa:e0:db:29:2f:c3:36:c4:27:
cb:01:af:77:74:4d:f5:2a:ec:d6:7e:a2:fd:34:98:
29:e9:31:fa:47:df:fe:fc:44:ab:fb:a0:08:41:e9:
a4:6a:40:bf:44:7a:5e:7f:38:50:cc:7d:4f:ff:61:
e9:db:49:ac:13:bb:cc:1c:0a:d2:85:d1:55:5b:ae:
71:d6:7c:aa:f3:2f:20:9d:1d:e1:f5:22:79:72:1c:
73:ff:18:f9:74:bc:01:f5:c2:9f:39:67:3b:05:ef:
3e:c3:c1:b1:30:8f:bb:08:13:3c:76:59:06:2e:16:
c6:ce:21:5b:4a:b7:7d:da:02:b0:3f:ac:6e:cc:37:
c1:db:e5:e6:50:8d:e1:50:9d:56:ba:7c:9d:bb:a2:
66:d9:56:6f:1c:5b:07:7c:cf:bf:69:4b:2d:22:58:
c0:82:00:c4:20:ef:0e:e5:0a:b5:8b:0f:04:4a:ad:
9c:f0:3b:94:6b:2f:53:06:53:ab:1e:3a:03:b6:e3:
e2:1e:a6:eb:83:b8:e6:fe:6f:39:48:71:ba:a7:f7:
25:aa:69:87:33:96:2e:40:8b:bf:cd:f2:cb:14:67:
18:dd:d7:93:c8:4e:62:d6:0b:a7:d6:0a:7f:91:66:
65:ed:1d:d3:63:c5:40:15:3e:bc:66:fc:1f:9f:61:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:11:04:CA:9D:49:18:7F:C3:F7:38:0F:F5:6F:58:35:BE:90:87
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:ea:6c:ef:a9:2b:c4:42:81:e2:85:cb:6a:6d:b3:48:60:
b6:eb:f1:fc:84:63:c2:26:3a:86:63:0b:8c:4c:ca:b4:83:79:
92:ff:61:ab:8d:bc:98:ac:b5:79:78:15:6f:d5:9c:48:d4:ac:
df:d4:04:72:11:b9:37:21:c4:42:2e:38:3b:86:a6:95:e0:32:
bf:ff:89:33:34:38:7c:5f:f8:3d:30:6b:57:7a:9b:d8:0c:b5:
58:9d:49:61:df:b8:c9:17:11:f9:b5:bf:09:7a:3e:d3:7b:87:
7d:01:6b:cd:37:12:10:6c:96:9f:82:8a:4c:6e:8d:65:39:5f:
69:ae:fe:8d:fb:a2:d2:24:0e:cb:00:8a:3e:3a:ea:36:c4:22:
85:88:51:37:a6:36:09:f7:85:04:fe:4f:30:4a:d1:55:85:01:
c2:53:9d:dc:43:39:c9:78:14:c4:69:1c:e4:61:41:e7:88:8b:
d8:e6:ce:57:1f:fa:4e:60:e7:5a:a9:a8:d6:24:d3:3b:02:18:
2a:73:7e:0e:44:65:96:fd:87:75:6b:f9:99:e9:50:c6:b4:c3:
0d:39:56:70:6b:d0:9f:00:a6:30:00:23:e0:45:1d:1d:dd:d2:
8b:6f:e9:df:f4:30:93:af:5e:19:db:37:27:64:ab:72:dd:ac:
ef:85:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:47:55 2026 by rpki-client