Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: MD2ZdwSoF+K0cS/7L314XOUUvkGKQqBrd2c7iixz/2Y=
Subject key identifier: 5E:1D:9A:29:C1:A9:22:0B:1F:03:C9:68:86:64:1E:B8:3C:78:93:16
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019D2997283376EBAFDC63496FD5E9836038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:05 +0000
Manifest this update: Thu 26 Mar 2026 10:01:05 +0000
Manifest next update: Fri 27 Mar 2026 10:01:05 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: m0ysj2QuoiSq4UIi8vQV+Tvc0VJuMlaED0nB5HG0z2E=)
2: YKIZEXPg8oheZp7WpP7OU246ru8.roa (hash: Q2zcLyXdsWeX4PkdcMwGBRDhiV4NlfFDZoV6YyWN27s=)
3: ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa (hash: GE/9jCmc5lF87tDmPaGk9SCOllCN178iR70DGke83Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:28:33:76:eb:af:dc:63:49:6f:d5:e9:83:60:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Mar 26 10:01:05 2026 GMT
Not After : Mar 27 10:01:05 2026 GMT
Subject: CN=5e1d9a29c1a9220b1f03c96886641eb83c789316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:5f:72:52:84:cf:e6:7f:18:13:4d:f5:55:
ac:84:89:84:37:c9:31:8c:17:f9:a4:bb:95:ab:2d:
8b:b9:2a:c5:b1:3f:8e:fd:a7:50:62:4e:8d:e3:10:
56:8e:28:3b:92:8b:dc:f7:87:36:6a:b6:f7:2f:08:
88:f0:c0:62:56:fb:4a:a1:37:24:8c:a5:ec:28:6d:
a3:22:f7:e8:0d:09:81:9e:5e:2e:f7:49:50:9b:c5:
d0:89:e0:e2:f1:ee:da:21:d8:9a:d6:9a:3e:cd:ba:
70:85:f8:c7:e0:e3:81:01:1a:9a:7b:5a:b2:21:fc:
83:ed:20:e9:50:fb:85:72:2a:97:0e:e2:c7:7c:4c:
ef:d1:4c:71:16:ad:22:41:63:96:bb:e8:d4:b1:d1:
0f:d9:bf:17:5b:eb:93:c3:8b:3b:15:3f:d0:8e:c9:
0a:e9:c2:4c:c8:2a:eb:03:a7:fd:fa:ba:2d:7b:03:
e6:dc:b8:da:dc:f2:ba:aa:5e:e8:41:6d:b4:c0:55:
a1:61:dc:d5:e7:c6:a5:54:2b:29:71:c8:ad:ed:fe:
95:bd:0f:53:f2:bc:a3:3f:ba:30:fd:1a:7f:65:3c:
08:12:93:cc:a9:52:cd:1d:ed:be:4a:73:b2:c9:3a:
d7:14:fe:6e:d8:3a:bd:b3:e2:44:2b:a1:3a:ea:db:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:9A:29:C1:A9:22:0B:1F:03:C9:68:86:64:1E:B8:3C:78:93:16
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ac:b3:ac:4f:12:f0:58:9f:13:fd:8f:4c:dc:fa:a4:3d:c0:
f3:12:28:9b:45:e7:20:b3:9b:9b:6d:98:a6:71:c1:24:b6:07:
ce:d5:90:c8:25:cf:f6:9f:74:24:59:c2:01:cd:58:b3:50:dd:
46:5d:e5:30:b4:01:25:70:7b:b1:dd:2f:16:77:e6:69:ca:7b:
16:f5:cc:e2:56:03:59:98:03:0c:5f:c9:b8:ce:ce:9b:72:88:
d2:80:66:1b:9e:46:de:ff:14:99:89:9e:01:0b:20:cf:31:6b:
a2:95:1d:82:12:db:ac:c4:66:30:2b:31:0b:41:39:be:08:0e:
e2:f6:e6:e6:ab:7d:d4:89:47:dc:65:80:64:27:6f:82:3a:ce:
b0:c3:aa:6e:9f:66:b8:67:04:70:f5:19:6b:f5:f4:23:e2:c6:
27:19:f6:68:33:47:cb:3c:2f:4a:84:f9:47:0d:e9:f4:54:8c:
88:3d:68:10:47:8f:b2:18:16:0f:cf:68:f4:78:bf:7f:89:fc:
15:a8:84:e1:5c:9c:ff:e4:85:37:17:ee:64:a0:ce:00:f1:46:
9a:e8:47:56:71:bf:00:c8:fe:d6:98:fa:3b:82:9e:b2:84:b1:
f7:45:17:4e:b2:d4:c6:40:25:ca:ca:fd:4b:5f:40:9d:44:a6:
fe:5d:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:39 2026 by rpki-client