Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: KrEbp4EJTIei09mXHvl/WuM6K/CF5AbdZdecQU7qOjo=
Subject key identifier: 24:E1:AA:94:97:CB:FB:8E:A1:32:00:83:AF:0D:BA:4A:37:F1:7E:78
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019E1ED9BA978FD62668BCE9B7FFC7990CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:45 +0000
Manifest this update: Wed 13 May 2026 01:00:45 +0000
Manifest next update: Thu 14 May 2026 01:00:45 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: W8oELMMBNtRMYmdavpenj/V8QjO4gxIUbdCc47//X6A=)
2: YKIZEXPg8oheZp7WpP7OU246ru8.roa (hash: Q2zcLyXdsWeX4PkdcMwGBRDhiV4NlfFDZoV6YyWN27s=)
3: ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa (hash: GE/9jCmc5lF87tDmPaGk9SCOllCN178iR70DGke83Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ba:97:8f:d6:26:68:bc:e9:b7:ff:c7:99:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: May 13 01:00:45 2026 GMT
Not After : May 14 01:00:45 2026 GMT
Subject: CN=24e1aa9497cbfb8ea1320083af0dba4a37f17e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:69:b4:3c:fa:d0:d2:4c:00:34:5a:bc:4e:
5b:6f:53:86:de:be:a2:3c:5e:77:4e:85:4c:db:4b:
b3:ed:c3:e2:bd:fb:87:00:c6:5d:16:45:ed:a0:d5:
51:b3:82:df:fe:3f:3d:d3:7f:56:93:5c:09:0b:29:
29:18:2a:18:ba:b7:02:c6:88:56:96:d0:22:47:e5:
e8:28:46:a1:f5:51:83:66:e4:8f:32:43:49:31:3a:
74:57:8a:a5:a7:26:6f:de:95:5a:12:ef:2d:c7:ef:
ea:c4:0a:d9:b7:f0:f4:7d:39:85:5c:a7:4f:18:e5:
2b:24:03:01:05:5d:cc:c2:a3:e8:e6:93:fc:8b:be:
de:60:51:68:02:7f:9f:09:88:11:9a:76:e0:b1:2b:
6d:ba:a2:07:11:fa:5e:11:4e:8c:46:10:bc:be:e0:
d6:e0:f5:4d:85:ef:4a:86:92:d1:63:83:8b:bc:ac:
d4:41:82:d7:a4:34:97:9b:7e:b8:c4:2d:1f:bc:54:
65:3f:51:db:c6:b2:7c:1c:01:62:bc:15:35:74:9f:
77:4a:ed:08:9e:22:f9:aa:9c:d3:93:f7:66:c4:7a:
55:9c:90:45:3c:3a:04:08:29:4a:2c:d4:f6:8a:24:
ac:f9:3c:94:bc:cd:00:39:f7:36:b2:a2:4f:83:dc:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E1:AA:94:97:CB:FB:8E:A1:32:00:83:AF:0D:BA:4A:37:F1:7E:78
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f4:61:2d:5d:ef:ab:61:72:ac:cc:42:2a:e0:06:fd:ca:a4:
df:ed:69:c5:11:f6:2a:55:ce:38:30:82:14:f1:b2:0e:94:04:
1b:7d:b5:06:75:db:67:ef:ab:b5:ef:9b:bc:a3:a8:ca:d8:08:
35:ca:fe:ac:27:02:0c:1d:5b:ee:5b:53:b1:f8:e3:07:a6:e1:
5e:43:5f:82:ec:22:3a:88:98:fc:5c:98:90:79:fa:f8:cf:97:
60:62:dc:52:e6:be:56:f5:d8:90:f1:d8:07:4f:a3:f7:eb:53:
b9:53:51:bf:a1:15:ec:4a:11:55:53:98:2c:a3:d0:0c:b9:0b:
1b:07:9f:b5:28:8e:86:59:da:f6:2e:6d:d7:4a:60:82:43:4f:
95:27:0f:32:20:f4:54:f2:49:4e:5b:e8:c1:df:ba:e4:bf:b1:
14:13:91:95:60:57:7f:e2:63:74:5b:43:ab:ea:f1:f5:09:a9:
2a:96:b5:60:f9:bf:a0:63:0c:40:9e:ae:00:1b:de:6f:95:40:
21:09:f9:25:25:49:18:5c:f4:4f:a2:c4:54:e9:b5:b7:8b:fc:
63:71:0f:24:7d:5d:cc:29:ea:dd:47:72:06:55:e9:87:91:bc:
4c:f9:23:ab:4e:fa:11:1b:f2:c3:36:75:6d:9a:e6:c4:f5:f0:
e9:4d:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:19 2026 by rpki-client