Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: 8MfxYyJ052B6jYFjGdjdb/ds9QxQaTae7xmlYxAQCAQ=
Subject key identifier: 3B:71:54:37:4D:BC:C1:55:FC:83:A0:4D:94:9C:19:9F:02:AD:91:E3
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019E1CB506AB597B72EAD8ABA7E449E23EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 04ED
Signing time: Tue 12 May 2026 15:01:26 +0000
Manifest this update: Tue 12 May 2026 15:01:26 +0000
Manifest next update: Wed 13 May 2026 15:01:26 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: xNkVEtMKCVL26snCfUjzkzuKQHAFAL52UDLf89VQy+k=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:06:ab:59:7b:72:ea:d8:ab:a7:e4:49:e2:3e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: May 12 15:01:26 2026 GMT
Not After : May 13 15:01:26 2026 GMT
Subject: CN=3b7154374dbcc155fc83a04d949c199f02ad91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:c7:10:dc:5f:54:61:ef:16:4e:ff:10:2c:
63:17:b4:9a:98:cc:8e:37:13:9c:bd:d6:30:7e:33:
7d:23:ce:e9:c5:12:e2:bf:da:d4:29:ff:e6:5b:84:
0c:bf:17:ff:f0:bf:ea:4c:ae:12:6e:b2:8f:67:77:
c7:2f:11:80:1d:6d:94:87:34:4a:f0:8a:03:e5:4f:
3a:20:ab:b1:8f:c7:38:0b:5e:48:ae:1d:3c:6e:9e:
b8:e2:12:56:86:0b:45:71:fe:81:c3:f9:a5:c3:83:
59:0a:11:ce:4c:5e:1e:ea:b8:31:3d:cb:a2:84:ca:
58:b8:cb:17:db:76:63:61:99:41:14:70:45:79:7c:
b4:f2:6a:af:24:04:2c:84:07:65:c2:97:92:bb:62:
2f:50:e4:b5:6d:80:d4:d0:6c:d0:b6:c5:8b:e0:3c:
d0:41:cb:65:54:53:fd:49:1e:ac:98:51:08:ef:bf:
5a:d2:26:70:d4:a3:49:06:40:a4:07:97:5f:cc:49:
eb:2e:4c:f7:e6:95:db:48:52:d4:fe:ca:11:e8:e7:
6a:25:c0:72:5e:04:0e:ae:ce:58:6c:ee:77:6d:d7:
f6:41:97:a3:d2:bf:b4:de:d9:be:f8:29:92:9b:e2:
8a:7c:40:e3:c7:93:c4:4e:93:1b:fa:76:98:5b:c4:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:54:37:4D:BC:C1:55:FC:83:A0:4D:94:9C:19:9F:02:AD:91:E3
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a3:c6:8a:b4:e9:b3:6b:c6:85:7f:89:80:79:5c:42:e5:e4:
47:49:85:f8:a3:62:7a:ca:37:c9:64:a5:29:ec:ae:f9:af:48:
db:a2:e2:ba:af:25:f5:e2:4b:87:6d:4c:03:44:a7:fb:62:75:
61:47:fb:b8:60:91:ea:43:e6:1e:e5:84:33:e9:c1:70:ab:60:
8a:ce:7e:fb:e4:59:e9:ce:33:bb:ae:ab:94:47:e7:a9:c0:30:
32:f1:5b:08:94:c5:73:3c:d3:c8:da:11:33:8f:7b:23:e4:03:
d5:9a:ee:a1:06:18:d7:e8:04:16:b2:ca:ef:99:44:58:e1:58:
62:1d:8f:59:15:3f:a1:d7:9a:da:57:59:53:35:41:1e:a9:04:
7c:90:20:1d:4f:a1:05:9b:02:80:5a:b0:ee:55:80:bc:0e:29:
e6:10:48:a8:ca:7f:3e:7f:9c:b3:7d:75:2d:4e:42:dd:1f:3f:
74:2f:78:00:27:f5:4d:a7:17:8f:85:bc:e2:44:2b:0b:e5:8f:
31:20:13:b2:10:2c:12:79:53:24:fd:38:94:14:ec:81:c1:c7:
12:34:ac:c4:98:55:77:01:4b:fd:c8:62:f8:70:5a:8f:71:10:
55:0c:fd:c1:b4:b0:c9:53:99:ce:96:fa:70:ea:ac:d9:27:57:
26:ac:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:35 2026 by rpki-client