Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: rxateS9s5EbJMp13BHl8jqMJ2BgSIvCE8Xev5uzKF7Q=
Subject key identifier: 1A:9E:D0:3A:31:42:02:B8:80:7D:E2:85:DD:AB:35:64:EF:7E:9F:4A
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019E1D9052DCF56DDBC5B624F4E151B9F581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0A70
Signing time: Tue 12 May 2026 19:00:58 +0000
Manifest this update: Tue 12 May 2026 19:00:58 +0000
Manifest next update: Wed 13 May 2026 19:00:58 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: h/h2rR7hp1uL/Bgva+B8VJbDuYyAsh2mORLkQ9PKsZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:52:dc:f5:6d:db:c5:b6:24:f4:e1:51:b9:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: May 12 19:00:58 2026 GMT
Not After : May 13 19:00:58 2026 GMT
Subject: CN=1a9ed03a314202b8807de285ddab3564ef7e9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:a7:12:02:b4:d6:75:6e:6d:c8:da:05:06:
32:9d:c8:d9:f9:b2:5c:06:5e:1c:ad:23:16:8b:01:
a7:2d:46:e8:96:4c:04:84:77:e7:e0:1c:8f:97:a1:
40:8e:09:49:88:be:3a:dd:3a:9c:92:94:80:7b:fa:
90:7d:25:ee:e1:c0:3d:7b:f9:6a:3a:0f:3d:99:3d:
55:ac:dd:3a:90:32:d5:31:57:d8:1e:c2:c5:d4:c1:
e5:2b:d9:4b:d9:c1:f1:7e:4f:f6:01:e0:a9:6f:50:
da:2d:0e:08:98:0c:53:b2:86:87:b7:81:a7:88:a2:
3b:e9:f8:ce:27:56:45:af:f7:e5:c7:42:c5:de:6d:
85:7d:de:5c:d9:ea:95:cb:47:da:eb:94:3f:1c:b9:
bc:99:e3:d1:cc:fd:c8:d8:2b:ac:2d:58:2d:d4:b1:
83:28:d3:1b:b9:15:9b:4b:37:05:80:be:ae:d5:95:
35:5b:a1:9f:b3:b0:3f:4a:8c:bc:61:cd:d0:e9:01:
86:05:f3:77:a9:5f:a6:fd:fe:4b:3a:4b:64:12:a1:
55:56:6c:b1:94:25:b5:46:0d:af:3e:45:9b:27:f4:
23:c4:95:ab:49:da:ab:47:ab:0a:22:70:d1:88:f1:
de:1f:88:c4:29:dc:23:00:93:c1:41:74:91:76:05:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:D0:3A:31:42:02:B8:80:7D:E2:85:DD:AB:35:64:EF:7E:9F:4A
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8e:72:d6:0a:31:a3:bc:b6:a5:63:3d:ae:ac:36:cc:49:7b:
5f:57:5e:ac:8f:7e:21:8e:24:45:c4:74:64:f6:c4:07:7f:2d:
15:7e:79:26:fb:4c:df:b9:2d:bb:46:3b:ca:af:2c:12:ac:94:
29:e6:64:0f:10:7b:9e:a9:9d:40:08:55:e7:5d:6e:c2:73:e1:
18:24:0d:f4:74:37:44:ca:f0:f5:03:e1:be:2b:b8:69:10:78:
3d:09:99:c8:55:f2:93:c7:72:13:8c:e7:c7:fa:b5:15:e0:b3:
d5:c6:21:91:e7:9a:50:1f:aa:db:a2:ff:a6:2e:b1:07:69:c0:
dd:09:27:57:56:61:34:36:99:8e:0a:9e:3e:0c:c0:38:8b:e0:
32:2d:cc:5a:42:ee:81:ec:c7:ad:01:0d:88:a3:df:4f:70:64:
05:f1:c3:8f:a2:62:a7:8e:55:61:6f:0e:6e:76:e2:7c:fc:27:
9b:dc:b0:8b:bb:ba:44:34:11:22:53:7a:73:0a:c4:3e:be:42:
34:f0:3b:cd:96:0c:b0:81:8b:0f:e0:77:7c:17:44:22:12:7d:
9d:46:5f:12:ed:a4:34:17:9b:31:59:d2:a0:9b:f4:41:87:6d:
43:13:68:47:ac:0a:fc:60:64:db:24:e5:fb:40:fa:4e:e8:77:
ea:fd:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:43 2026 by rpki-client