Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: 0f9tIl0BStfBtSM9dUKdFExLoq3ZbOyWCgAOQyWIGDk=
Subject key identifier: 2C:FD:67:13:9E:35:07:4C:B8:3A:64:69:00:29:0E:06:0B:46:6B:21
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 019E1C7DB3AD7040863F89C48B8E5327D069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 4B
Signing time: Tue 12 May 2026 14:01:00 +0000
Manifest this update: Tue 12 May 2026 14:01:00 +0000
Manifest next update: Wed 13 May 2026 14:01:00 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: DnXOa6Ok3k2QWmcP7tSkoPEG2IarZ5nrpXjsZ2UrXcI=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b3:ad:70:40:86:3f:89:c4:8b:8e:53:27:d0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: May 12 14:01:00 2026 GMT
Not After : May 13 14:01:00 2026 GMT
Subject: CN=2cfd67139e35074cb83a646900290e060b466b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:45:97:ba:f8:1b:74:6c:bc:9b:f9:2b:58:
f4:1d:cb:66:5a:ae:3a:2d:c9:c8:80:2b:ab:03:60:
6f:f3:5e:e7:48:2d:d2:52:ba:b3:2f:6e:88:ac:7d:
76:b9:75:54:eb:66:b9:8a:86:c6:72:28:c1:80:44:
54:53:0f:f6:04:d3:a9:f3:2e:50:37:f0:1e:50:c5:
66:1a:f9:a0:4d:c5:a9:af:3c:09:d5:8c:35:b4:34:
83:e5:36:e7:e8:91:97:41:a8:80:cc:00:c2:30:00:
9b:10:83:ca:e5:f3:ef:0c:2f:e0:43:79:64:d4:c0:
4a:c8:43:d8:d3:77:04:ab:4b:e2:d0:f3:9b:94:8c:
a3:bc:0f:b7:94:c3:5f:47:d5:6e:59:55:e0:a9:46:
53:ee:ef:13:df:6c:f2:d9:db:49:50:93:82:27:8a:
9f:9d:cd:f5:a9:8d:91:07:bd:00:3f:e0:0d:d4:40:
2b:19:cc:db:ed:06:c7:13:48:73:4c:8e:ad:76:02:
66:03:99:68:0d:93:c2:7c:69:c9:76:f5:f0:1f:f5:
73:36:91:54:92:5a:6e:5c:f0:85:6b:62:a0:c2:5d:
94:cb:7f:6d:31:34:26:df:44:b8:fe:3c:18:95:c7:
10:25:0e:75:fb:9e:eb:5e:a0:63:ec:3f:23:69:1d:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FD:67:13:9E:35:07:4C:B8:3A:64:69:00:29:0E:06:0B:46:6B:21
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d8:bf:69:82:a2:b7:c3:8a:ef:2c:f9:b5:4c:be:57:18:a2:
bb:4d:61:1c:c2:40:36:74:bc:1a:c2:36:92:36:81:53:ce:bf:
73:af:59:c6:38:17:f5:79:db:45:22:1c:79:0e:41:9f:67:c7:
19:8a:46:d4:14:71:41:58:a7:ee:d6:36:b3:b0:5b:71:d5:20:
b3:06:cc:72:45:c7:57:6a:4c:a8:bf:d7:c3:38:3f:ab:b4:2e:
3b:80:cc:a8:72:a3:46:e5:e6:a8:46:89:cb:f6:80:9e:0b:57:
34:06:00:f1:e5:9d:cd:cf:a8:26:8c:54:36:30:be:5c:84:22:
ff:44:fa:45:dc:c0:72:f6:10:bf:9c:e7:6c:bf:f6:0d:b7:29:
3a:f5:dc:c8:2a:66:5c:65:7a:bc:d9:48:c8:06:13:ea:98:b9:
cf:6e:67:b9:85:05:a5:6a:37:f2:c1:20:21:ca:58:ca:ad:b5:
c5:a7:d5:52:c3:67:c4:72:ee:a3:9c:ec:f9:fd:b3:74:e7:9a:
ac:af:0a:28:7b:5e:fa:b1:a1:84:09:c0:e2:51:d7:6f:4c:18:
81:ca:a6:98:0a:d5:6f:40:ac:f0:8f:ab:9f:ca:25:67:bb:40:
f3:81:f4:d1:2a:da:d5:d0:9e:80:01:f1:64:e7:b9:bf:d3:8e:
8b:b0:07:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfbOtcECGP4nEi45TJ9BpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM1MTEwMWFhZTkxZTNiMmZjZmIyNWZlYjAzNjU5YmE4
NWVjYTEwHhcNMjYwNTEyMTQwMTAwWhcNMjYwNTEzMTQwMTAwWjAzMTEwLwYDVQQD
EygyY2ZkNjcxMzllMzUwNzRjYjgzYTY0NjkwMDI5MGUwNjBiNDY2YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKlFl7r4G3RsvJv5K1j0HctmWq46
LcnIgCurA2Bv817nSC3SUrqzL26IrH12uXVU62a5iobGcijBgERUUw/2BNOp8y5Q
N/AeUMVmGvmgTcWprzwJ1Yw1tDSD5Tbn6JGXQaiAzADCMACbEIPK5fPvDC/gQ3lk
1MBKyEPY03cEq0vi0POblIyjvA+3lMNfR9VuWVXgqUZT7u8T32zy2dtJUJOCJ4qf
nc31qY2RB70AP+AN1EArGczb7QbHE0hzTI6tdgJmA5loDZPCfGnJdvXwH/VzNpFU
klpuXPCFa2Kgwl2Uy39tMTQm30S4/jwYlccQJQ51+57rXqBj7D8jaR0ruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz9ZxOeNQdMuDpkaQApDgYLRmshMB8GA1UdIwQY
MBaAFNuzURAarpHjsvz7Jf6wNlm6heyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYt
ZWE1YmI0YTViYjM5LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYtZWE1YmI0YTViYjM5
LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNi/aYKi
t8OK7yz5tUy+Vxiiu01hHMJANnS8GsI2kjaBU86/c69ZxjgX9XnbRSIceQ5Bn2fH
GYpG1BRxQVin7tY2s7BbcdUgswbMckXHV2pMqL/Xwzg/q7QuO4DMqHKjRuXmqEaJ
y/aAngtXNAYA8eWdzc+oJoxUNjC+XIQi/0T6RdzAcvYQv5znbL/2DbcpOvXcyCpm
XGV6vNlIyAYT6pi5z25nuYUFpWo38sEgIcpYyq21xafVUsNnxHLuo5zs+f2zdOea
rK8KKHte+rGhhAnA4lHXb0wYgcqmmArVb0Cs8I+rn8olZ7tA84H00Sra1dCegAHx
ZOe5v9OOi7AHdw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:18 2026 by rpki-client