Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: FzI5P4Clg/ceJgWdkR1fLX2IydKW/LujP/31NS8AiRo=
Subject key identifier: AF:B3:1F:07:20:B9:1A:51:BE:74:14:EA:96:B0:B9:F6:BD:0E:25:FD
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019F9059A4122ED5356738ED7163206B6D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0B30
Signing time: Thu 23 Jul 2026 19:00:21 +0000
Manifest this update: Thu 23 Jul 2026 19:00:21 +0000
Manifest next update: Fri 24 Jul 2026 19:00:21 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: ffLJ376csa48A/60Hpyo+1i+XfnpkcIfLAnDqYJ39m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a4:12:2e:d5:35:67:38:ed:71:63:20:6b:6d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Jul 23 19:00:21 2026 GMT
Not After : Jul 24 19:00:21 2026 GMT
Subject: CN=afb31f0720b91a51be7414ea96b0b9f6bd0e25fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:a8:09:33:05:d0:9a:44:39:45:ac:96:51:
f5:d1:a7:83:b7:ca:27:af:c3:8d:eb:12:b2:ab:4f:
b0:f8:ae:e9:60:41:1c:c6:ef:7b:40:75:c5:93:28:
5c:28:7d:28:a3:38:0d:2a:f9:38:4c:6f:ab:8d:73:
07:5c:48:3c:ba:30:e5:4a:19:27:bf:9e:1d:35:15:
66:64:3a:0b:16:ff:5f:ff:3d:c1:f5:30:84:9b:ed:
e0:35:ef:85:4a:36:96:3d:ec:ec:76:08:06:22:d5:
d0:c0:c1:be:72:89:f3:96:9a:f4:06:07:61:9f:2c:
1d:f8:18:18:02:04:45:62:46:cf:16:04:80:a3:06:
cb:94:ad:da:a7:b2:d7:a7:01:b9:f8:58:c4:e5:9c:
13:96:f8:7b:25:d5:ea:99:61:ae:b5:f2:68:54:fa:
4d:3e:22:ae:a2:81:2e:71:d9:06:52:8a:2c:37:e1:
6e:40:da:55:fe:55:24:7b:7d:9a:79:2a:0f:08:57:
5a:80:07:75:93:3c:05:81:07:5c:2a:4d:54:c3:b4:
8b:f3:d4:f3:87:54:5f:4a:29:f8:e1:05:ad:2e:ba:
07:28:e8:1a:4d:a7:cc:11:1b:b9:51:ac:ad:4e:a2:
d2:92:16:c9:fa:aa:7c:04:dd:17:ae:37:37:d0:25:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:1F:07:20:B9:1A:51:BE:74:14:EA:96:B0:B9:F6:BD:0E:25:FD
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3c:50:02:32:0e:e8:81:a4:92:61:43:b0:75:5d:86:a3:b3:
f4:f6:7c:81:3a:92:2a:4c:84:e3:9c:8c:e7:68:15:cf:29:0d:
b7:c4:f5:a1:99:0a:89:10:7a:b0:5f:6d:ea:cd:c8:c3:92:3d:
dc:3b:51:b3:60:58:db:d0:8c:33:d2:22:4a:0c:4c:a2:22:67:
64:90:b8:fc:c8:0e:7c:22:ae:9c:dd:57:7a:cf:26:05:80:29:
82:71:77:2c:33:cd:69:ff:16:52:0a:4f:f1:2c:96:48:c4:69:
58:d6:13:49:78:c4:f5:84:c7:c3:64:c6:de:bc:73:72:e1:95:
bb:92:02:c6:fd:d3:f7:0c:a4:5c:83:e2:8f:9f:82:67:ff:eb:
b0:84:4a:88:fd:d2:91:01:4c:7c:4a:15:6e:2b:28:32:ad:d2:
bd:9e:d5:c7:16:22:77:7a:6e:fd:87:51:d9:71:10:ff:15:ab:
c2:5a:06:99:1b:97:0f:82:e7:8b:8f:1d:f5:1f:fa:a8:ef:95:
9e:3d:8d:53:cb:36:cc:aa:7a:13:22:10:eb:c7:f0:6f:68:d7:
1a:be:bc:de:47:df:62:50:78:47:f8:bc:9a:fb:34:da:76:5d:
76:b2:d6:f3:b3:f0:39:2b:48:4c:1b:aa:de:3a:c1:e5:0e:a5:
e9:09:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:52 2026 by rpki-client