
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: ywx78l+0Mx8Uuz9bRdz9qN8sUVsYDxhgMtj7THgWQ1o=
Subject key identifier: 24:26:D5:D1:55:8A:E6:FE:2B:D6:F2:33:EE:7F:62:5B:95:E8:99:03
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 019F927EDFC1BF02D8F5204D7A654E710AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 144C
Signing time: Fri 24 Jul 2026 05:00:16 +0000
Manifest this update: Fri 24 Jul 2026 05:00:16 +0000
Manifest next update: Sat 25 Jul 2026 05:00:16 +0000
Files and hashes: 1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: kx+dC2gN5i/CnB7KbtnB61pkh0+7tIPuegNU8dE3IWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:df:c1:bf:02:d8:f5:20:4d:7a:65:4e:71:0a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Jul 24 05:00:16 2026 GMT
Not After : Jul 25 05:00:16 2026 GMT
Subject: CN=2426d5d1558ae6fe2bd6f233ee7f625b95e89903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:94:fc:71:02:28:e5:ea:ff:25:54:2b:9b:
83:e2:3a:4b:3c:c0:3c:b6:99:f5:b4:4c:66:48:eb:
c9:52:02:56:6f:04:12:ef:e1:39:73:31:85:97:66:
81:dc:aa:28:1e:fa:0b:50:05:4d:8d:9f:79:49:89:
0c:e3:13:ad:aa:5e:30:53:96:3e:c8:b9:45:f4:7f:
aa:46:d9:b5:c7:32:b9:77:ee:ef:26:be:3d:39:cb:
84:86:9b:10:5b:2f:90:3f:2b:c9:c4:d1:9e:b4:5e:
30:a2:45:2e:3b:3e:f8:11:c4:c7:ac:ab:f3:3a:bb:
06:cd:92:a0:82:68:9e:1f:f6:15:8e:10:7e:00:df:
fe:8a:44:cf:4c:80:9b:f4:ab:63:38:69:1f:df:12:
55:50:c5:28:2a:ae:de:ee:37:95:17:da:8b:e5:63:
14:2c:6f:09:b5:76:cb:26:1d:2c:51:f5:68:cc:d6:
5c:ce:8d:aa:cd:4c:75:53:72:13:45:19:0b:51:6e:
cd:10:ac:f1:bc:c6:28:46:f5:d5:93:2e:fa:98:a2:
5e:d5:02:88:7e:22:2f:73:1c:65:d6:73:cc:0a:79:
d1:4e:95:39:b2:11:75:04:b8:fc:a4:de:14:e1:82:
ca:bc:be:5f:a1:0d:08:a9:1d:5c:f2:8f:23:9c:ac:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:26:D5:D1:55:8A:E6:FE:2B:D6:F2:33:EE:7F:62:5B:95:E8:99:03
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:78:f9:6b:8d:46:9e:85:c1:b9:03:35:0c:05:2f:a8:cb:9c:
de:74:de:3c:c8:c5:6f:03:2c:70:c7:7d:65:f6:2d:5d:0f:9a:
2a:e1:99:01:74:f2:10:8b:14:2e:05:f1:e1:a0:6b:1e:02:0c:
3e:b0:db:84:a6:6f:36:68:d2:a3:2a:89:af:97:7f:de:ef:3d:
12:19:0f:85:ed:d3:eb:10:f2:cd:fd:b9:d7:70:67:26:57:f2:
db:35:86:e9:38:ce:ef:db:df:5b:8e:e4:d0:83:6b:59:d6:60:
b7:59:97:9b:29:1f:d5:08:4c:2a:a5:dc:d9:89:05:46:a3:3a:
fa:41:fa:fa:8c:43:4a:d7:8a:b2:87:7d:6d:66:6d:91:98:3c:
be:cd:59:d2:2d:4f:94:05:c7:e1:42:bf:26:3f:41:ef:e7:d3:
2c:28:ad:d3:d2:cf:27:8d:fd:11:b9:c1:4d:6e:48:08:a4:ac:
93:70:16:59:13:c9:b4:b2:5b:e8:6b:d3:1b:d8:cb:77:2a:34:
ec:0f:55:0d:c8:2b:57:29:7f:d9:80:79:04:78:5d:43:d1:5f:
ba:8d:5f:16:ca:e1:1c:98:b1:38:b8:4a:9e:29:d4:71:58:85:
40:f0:ee:4d:ec:aa:6a:82:a2:13:14:23:98:d5:65:40:79:8b:
8a:04:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:30 2026 by rpki-client