Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier: JFNJd2hKl2Im/J3ZZHaohKrfmmHrb+41wxhxsaOwudw=
Subject key identifier: 4B:DA:16:38:CC:91:B3:15:FC:7C:49:75:D7:81:B1:D5:C6:3A:BC:E8
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial: 019D2A72337D92BBBB72F0DADCCB555248D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:00:20 +0000
Manifest this update: Thu 26 Mar 2026 14:00:20 +0000
Manifest next update: Fri 27 Mar 2026 14:00:20 +0000
Files and hashes: 1: Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa (hash: yU2DLGFjN9TCcYSlsrT9XWj7qaKv71819e5tIEo7sAw=)
2: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: W5/mmTz70DmCSyJNqiQmo6qe/665mrbcw8MfkT+zDwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:33:7d:92:bb:bb:72:f0:da:dc:cb:55:52:48:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Validity
Not Before: Mar 26 14:00:20 2026 GMT
Not After : Mar 27 14:00:20 2026 GMT
Subject: CN=4bda1638cc91b315fc7c4975d781b1d5c63abce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:57:f1:41:1d:89:d0:e4:40:3f:2b:34:59:
3f:89:5f:3d:16:6b:29:2b:dc:fd:bc:2b:64:89:44:
f2:08:ef:57:59:32:35:67:39:d6:f3:1c:15:09:a5:
7e:a0:c2:11:e2:7f:01:2a:e8:67:14:fa:e0:be:6b:
cb:f9:09:3e:b2:87:58:aa:c0:c5:6f:e8:e2:4e:e1:
e7:33:ce:bd:3e:e4:c9:48:2c:14:24:ac:35:43:4c:
61:70:50:34:6e:26:61:bd:1b:d3:83:a3:80:1f:38:
25:95:7d:cd:19:73:a5:13:fd:4b:66:0a:98:15:87:
79:f1:ae:85:e4:33:fc:c6:6e:9f:69:d8:ad:5f:b9:
38:1b:85:77:ea:e7:be:40:f1:1c:db:f5:09:96:a4:
8d:28:f2:76:9d:2f:da:7e:f9:e0:97:fe:fc:71:0b:
ae:32:5c:ef:16:04:6a:9d:42:d4:5c:30:c0:c8:5e:
35:ad:f6:43:d3:79:73:f1:61:ff:b6:35:11:07:ad:
5b:b6:69:e8:a1:00:57:f4:06:d0:76:ca:60:35:20:
d0:d4:85:7d:13:9d:f6:e1:62:3f:9b:32:ad:2a:7b:
ec:87:58:9f:78:87:8c:f2:64:62:22:b2:f7:9d:92:
d6:80:3c:86:c4:16:ce:8f:2e:f0:cc:25:7e:5c:56:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DA:16:38:CC:91:B3:15:FC:7C:49:75:D7:81:B1:D5:C6:3A:BC:E8
X509v3 Authority Key Identifier:
keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c9:0d:b5:d7:05:4f:1c:96:f8:4d:0d:e2:db:bd:29:44:ac:
af:80:90:30:c1:c7:7f:40:25:fb:83:f9:0d:4c:35:0b:5e:76:
cf:1b:5e:f1:05:8a:b7:dc:bc:9e:ef:52:35:e7:92:31:84:9c:
97:3a:36:6d:68:96:d8:32:eb:43:d4:e2:df:b7:15:94:80:bf:
f9:0f:90:66:e0:cc:83:d8:01:84:61:d5:fb:63:c4:db:b5:fd:
d0:84:91:52:e2:e6:64:ae:0f:90:1e:47:88:95:fb:5b:00:f7:
6b:ea:36:8a:fd:be:43:42:3b:69:f0:d3:53:e6:d8:e3:57:5c:
f1:f8:5e:9a:5e:2e:72:42:a1:48:b7:f5:f2:f0:f3:fa:b2:d2:
87:5a:cd:d1:13:c8:56:c7:43:6c:98:0f:a3:08:68:44:85:e1:
3b:de:bb:7b:e9:aa:7b:d8:ff:fb:14:6f:d8:90:8c:7a:6d:02:
b3:9a:10:5b:5a:19:43:88:b7:17:7e:2a:4d:51:af:0a:8c:d4:
e4:f3:ca:40:bc:95:65:05:a9:d5:ff:83:ef:2a:91:42:d7:45:
e4:7f:7c:ce:6a:13:3c:35:a0:00:e4:87:72:e6:ba:89:f7:3b:
8b:f9:b7:ac:05:b5:23:a1:b9:c9:27:7f:c0:92:81:b6:de:c7:
4d:2e:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:17 2026 by rpki-client