Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: hhY8CeOMuT/xzj5n6AmRjcdkjcfLG/98631QdZq4awk=
Subject key identifier: 28:BC:7B:E9:89:9E:17:9C:3F:10:8C:59:6E:05:BD:DC:FB:53:3F:2A
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 01A0CDECAF8BE162EF3B3428D796DB797FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 01B0
Signing time: Wed 23 Sep 2026 11:00:35 +0000
Manifest this update: Wed 23 Sep 2026 11:00:35 +0000
Manifest next update: Thu 24 Sep 2026 11:00:35 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: v3x05wtM9xXP6HdUfiumFQjg/2QyEnPk4jo/Sr0ax0I=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:af:8b:e1:62:ef:3b:34:28:d7:96:db:79:7f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: Sep 23 11:00:35 2026 GMT
Not After : Sep 24 11:00:35 2026 GMT
Subject: CN=28bc7be9899e179c3f108c596e05bddcfb533f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:6e:15:65:99:c8:76:60:c0:27:f3:13:64:
d3:97:f4:4e:bb:d1:f7:b8:36:32:74:2d:7e:ec:9a:
7b:ca:fc:a4:ab:6e:6a:9a:a5:40:62:68:b0:c7:21:
8d:9e:bf:42:c7:e8:34:98:e7:ee:e1:94:77:8f:51:
1c:60:c1:89:47:7c:6c:21:a5:af:84:e2:5c:1e:92:
68:53:6e:10:94:fd:19:e6:5d:6b:75:01:ac:5d:84:
2f:7b:0d:e0:60:ce:8c:e4:d7:a9:99:fe:60:d0:35:
36:c1:c2:58:5e:f0:e1:de:87:15:eb:75:29:aa:eb:
bf:31:71:b7:e0:17:b6:69:a4:b1:01:07:2e:87:44:
8d:1b:80:00:34:0f:e4:8b:53:d5:ce:68:2f:5a:63:
fb:11:bf:bd:55:03:58:ac:76:fa:e3:f6:77:b2:ca:
fa:95:53:16:7e:b2:f8:43:f5:fa:f1:c6:fe:0a:50:
64:65:00:db:97:e9:ad:aa:0b:c6:d4:74:01:d2:14:
44:94:33:26:16:17:01:23:dc:66:67:b9:17:75:b4:
6d:7f:0e:ea:12:40:6e:86:2e:64:58:82:d7:82:0b:
7a:ea:2a:a3:b4:5d:4c:ef:95:c8:e9:44:5e:8d:ab:
86:11:0a:52:01:05:e7:48:59:99:5b:0a:f9:35:4b:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:7B:E9:89:9E:17:9C:3F:10:8C:59:6E:05:BD:DC:FB:53:3F:2A
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:48:50:b4:96:e2:c7:a6:da:35:2e:82:2e:87:ec:5d:23:86:
85:74:fb:39:84:66:85:64:5a:f0:d8:e5:c7:0a:52:c9:ea:6a:
37:b4:94:44:ba:48:19:39:33:f9:f4:4d:84:c3:49:06:21:aa:
cf:57:58:82:77:84:41:d5:84:c2:23:8d:2f:14:4a:0c:d0:4b:
52:53:b9:7b:d8:6f:db:2e:e8:ed:33:9c:fe:1a:ac:41:09:da:
83:dc:3c:85:f5:21:b7:07:b7:4e:52:90:3e:6f:b6:98:21:37:
60:95:26:3f:e8:bf:46:34:bf:cb:76:8d:54:30:08:2c:80:dd:
76:95:0b:5d:fd:64:9c:fc:41:8a:7f:e0:e8:a3:54:cc:ba:f2:
ec:6b:9e:70:6a:3a:88:76:15:04:e7:53:b5:72:99:f5:a5:d4:
50:db:db:5e:5c:80:51:02:bd:0d:87:5e:22:e6:f0:a7:79:ec:
72:51:b8:ae:13:1d:c4:6d:1c:90:0e:3d:63:00:aa:1f:74:54:
99:22:0e:9a:63:ec:65:45:5e:42:7b:20:78:dd:2f:63:52:6d:
81:d8:02:79:58:0a:9a:07:26:46:bd:23:eb:e3:5b:51:0e:1c:
02:6c:46:41:79:ad:0e:2c:6f:f7:6a:e7:a4:2e:48:b4:66:0d:
57:e1:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:22:49 2026 by rpki-client