Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: YtqbGfQ8VhlJSeFapKNiqt0x1GRldsHM0jsJk7qE304=
Subject key identifier: 60:B0:57:41:8D:B5:6A:C5:2C:39:51:A0:C4:BD:D1:0D:BF:07:16:4A
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 019F8F472ADB7F5D66A5811DEE5E974787B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 010B
Signing time: Thu 23 Jul 2026 14:00:33 +0000
Manifest this update: Thu 23 Jul 2026 14:00:33 +0000
Manifest next update: Fri 24 Jul 2026 14:00:33 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: 5qhGAqBgHpJzKswStLGw+8I04RK9jq6zHJgGuVChvTw=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:2a:db:7f:5d:66:a5:81:1d:ee:5e:97:47:87:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: Jul 23 14:00:33 2026 GMT
Not After : Jul 24 14:00:33 2026 GMT
Subject: CN=60b057418db56ac52c3951a0c4bdd10dbf07164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:10:5e:af:70:f6:e5:a7:d8:47:8d:19:b2:
f2:25:1c:1e:f5:a4:a5:d0:15:39:98:5e:d4:ee:63:
14:10:48:85:05:ad:26:ea:e8:03:7d:1a:42:7c:a5:
85:4a:25:d2:a1:14:b1:0c:1d:9b:62:cf:cd:ec:54:
c0:43:cb:21:50:64:d2:51:0d:c9:01:cf:60:f6:bd:
aa:3d:15:55:51:1e:16:7a:20:dd:96:61:f4:4d:5e:
2b:b7:28:ad:54:0b:2f:fc:4f:07:8b:24:12:db:a1:
73:e2:56:c2:13:b1:9b:a0:df:56:93:1f:76:08:50:
4b:e6:6e:80:41:42:28:ac:a6:bd:a9:4e:b7:64:f2:
e7:23:9a:a9:ce:16:96:d9:47:9f:d5:cc:21:95:15:
cf:a2:27:31:ad:a0:9d:2a:c5:97:73:73:a7:cd:fa:
c7:c6:be:7d:46:62:30:25:d3:eb:c7:cc:da:38:26:
04:82:9e:0f:78:eb:63:1a:ff:72:2c:5d:64:14:4d:
b3:0c:5e:9c:49:54:75:75:bc:3d:3f:34:43:9a:2c:
e0:bf:f3:40:a4:3c:71:61:27:8a:df:19:31:c0:34:
3c:10:0e:a9:07:64:e3:29:43:92:10:93:77:7e:5c:
50:50:e2:8e:c0:c7:e1:a7:c3:88:ef:31:43:77:cc:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:57:41:8D:B5:6A:C5:2C:39:51:A0:C4:BD:D1:0D:BF:07:16:4A
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:ed:ee:cf:10:e2:02:6c:d1:fb:7d:c0:e9:19:a7:20:89:
d9:47:ea:30:84:d3:0e:3d:16:a8:5f:ca:dc:8b:67:66:aa:02:
5c:a7:27:d7:e7:4d:6b:7f:6b:ab:2f:37:ee:3b:ef:61:87:ba:
b1:03:0d:21:89:0b:98:b5:a5:2e:3b:0d:9d:6a:09:cd:16:2b:
79:57:fa:49:d6:93:08:01:90:21:4e:ed:fa:5e:10:a3:a0:14:
1c:cf:70:92:c3:d3:98:34:87:f3:dd:32:fb:53:ff:bd:a5:5b:
4c:cf:88:61:f4:3c:ed:d4:d4:7c:a9:fb:c0:8e:c1:8b:65:bd:
70:09:b9:39:a1:b5:86:bb:f5:3d:c0:88:cb:b9:8c:f5:c3:6d:
b3:66:19:b0:58:e4:0b:5e:8a:6c:1e:02:7f:54:26:59:28:54:
5c:a7:c7:fa:65:aa:d9:1b:9b:d6:9b:95:3f:1a:7d:13:e4:86:
cb:6e:7e:65:c5:0e:11:8a:b0:a7:62:f2:0c:bf:dd:16:ff:1b:
72:82:66:74:ba:c8:27:7d:67:ed:2f:dc:f9:16:bd:49:b8:a1:
f1:f0:fc:92:1d:ed:71:7c:eb:64:2a:75:53:62:4d:36:86:dd:
33:85:c0:1c:a7:64:67:29:aa:fd:b6:ac:99:00:ab:87:13:33:
67:ef:e0:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRyrbf11mpYEd7l6XR4e2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM1MTEwMWFhZTkxZTNiMmZjZmIyNWZlYjAzNjU5YmE4
NWVjYTEwHhcNMjYwNzIzMTQwMDMzWhcNMjYwNzI0MTQwMDMzWjAzMTEwLwYDVQQD
Eyg2MGIwNTc0MThkYjU2YWM1MmMzOTUxYTBjNGJkZDEwZGJmMDcxNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSEQXq9w9uWn2EeNGbLyJRwe9aSl
0BU5mF7U7mMUEEiFBa0m6ugDfRpCfKWFSiXSoRSxDB2bYs/N7FTAQ8shUGTSUQ3J
Ac9g9r2qPRVVUR4WeiDdlmH0TV4rtyitVAsv/E8HiyQS26Fz4lbCE7GboN9Wkx92
CFBL5m6AQUIorKa9qU63ZPLnI5qpzhaW2Uef1cwhlRXPoicxraCdKsWXc3OnzfrH
xr59RmIwJdPrx8zaOCYEgp4PeOtjGv9yLF1kFE2zDF6cSVR1dbw9PzRDmizgv/NA
pDxxYSeK3xkxwDQ8EA6pB2TjKUOSEJN3flxQUOKOwMfhp8OI7zFDd8z/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCwV0GNtWrFLDlRoMS90Q2/BxZKMB8GA1UdIwQY
MBaAFNuzURAarpHjsvz7Jf6wNlm6heyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYt
ZWE1YmI0YTViYjM5LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYtZWE1YmI0YTViYjM5
LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3jt7s8Q
4gJs0ft9wOkZpyCJ2UfqMITTDj0WqF/K3ItnZqoCXKcn1+dNa39rqy837jvvYYe6
sQMNIYkLmLWlLjsNnWoJzRYreVf6SdaTCAGQIU7t+l4Qo6AUHM9wksPTmDSH890y
+1P/vaVbTM+IYfQ87dTUfKn7wI7Bi2W9cAm5OaG1hrv1PcCIy7mM9cNts2YZsFjk
C16KbB4Cf1QmWShUXKfH+mWq2Rub1puVPxp9E+SGy25+ZcUOEYqwp2LyDL/dFv8b
coJmdLrIJ31n7S/c+Ra9Sbih8fD8kh3tcXzrZCp1U2JNNobdM4XAHKdkZymq/bas
mQCrhxMzZ+/gHw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:37 2026 by rpki-client