Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: vEStQt1LpfoL0Galypfd85lsObecnv45OjlSx5C054Q=
Subject key identifier: 87:D1:A7:20:CF:F5:5C:7F:D8:03:00:21:C0:A5:6D:26:A7:F7:88:CC
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 01A0CD10CE449D3960377FBA3A0A848A80EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0BD4
Signing time: Wed 23 Sep 2026 07:00:25 +0000
Manifest this update: Wed 23 Sep 2026 07:00:25 +0000
Manifest next update: Thu 24 Sep 2026 07:00:25 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: YUfV78eH0JDmJwmLekGwDdJtUzFOEhZRD7dADw+nEcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:ce:44:9d:39:60:37:7f:ba:3a:0a:84:8a:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Sep 23 07:00:25 2026 GMT
Not After : Sep 24 07:00:25 2026 GMT
Subject: CN=87d1a720cff55c7fd8030021c0a56d26a7f788cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:39:94:c0:66:a1:9b:86:e8:89:92:af:a8:
3c:6c:ec:74:d2:ab:32:31:e4:d4:ff:fc:cc:f0:85:
38:1e:c9:f1:e8:38:66:f0:c8:53:92:05:fb:c2:65:
b2:d7:37:f2:85:dc:da:9e:75:e7:db:a6:37:08:87:
af:47:22:c9:38:4a:89:cc:a4:66:a9:90:c2:89:b2:
27:a3:93:37:f4:3f:fb:aa:14:e0:4d:d4:06:a7:c7:
3a:48:ae:85:07:40:87:68:ec:3b:c4:a7:9a:3c:86:
fb:66:a9:aa:f1:ba:e4:8f:d0:4e:a3:74:12:8a:0c:
bb:9b:95:d7:06:7a:15:01:61:8a:23:ee:f8:6d:10:
fa:39:c8:b0:d8:fb:62:1a:31:03:44:84:f0:55:68:
13:1f:76:97:04:75:e7:1e:0b:15:b1:22:ee:60:be:
ab:c7:94:0c:4b:eb:db:74:84:c1:23:87:7a:60:a1:
28:97:62:d6:25:29:c9:a0:3e:e6:a4:58:cb:9e:cc:
5a:b1:03:6a:26:f6:0a:21:71:3d:e0:a2:cd:1e:37:
22:7f:03:c0:98:96:6c:33:6f:ce:3e:e5:07:a9:7c:
85:da:72:9b:60:f5:65:ac:95:33:54:bd:bc:13:c8:
6e:7c:39:92:10:d2:50:3e:66:4a:70:39:90:53:4c:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:A7:20:CF:F5:5C:7F:D8:03:00:21:C0:A5:6D:26:A7:F7:88:CC
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:de:f9:a0:de:bd:62:25:f4:d1:c6:22:bd:9f:d5:b3:d5:
f4:f1:3c:de:b2:66:9b:e2:ed:60:ee:5f:45:ed:5d:80:86:e9:
eb:aa:fc:96:f1:2d:25:ff:af:56:71:6a:db:37:02:e1:1f:12:
d6:ce:7f:c7:5c:92:50:99:4c:86:18:66:06:0c:0b:d5:15:b7:
05:9d:b0:25:ec:d3:b9:5a:26:d9:3c:02:fe:5c:24:5c:3d:3f:
ff:23:d6:3a:af:e8:7b:f6:31:af:7f:42:db:db:f8:ce:dc:30:
20:39:ad:78:97:29:bb:74:12:c4:76:cc:32:13:f0:23:ec:c0:
9d:5e:0f:24:4b:98:b7:70:02:ee:f2:11:d2:7c:66:bf:8c:8e:
e9:f5:aa:64:76:49:69:5f:64:b4:23:ad:98:1e:9b:c8:46:f6:
f4:96:a4:2a:26:35:fc:0e:a6:20:07:a6:3c:e1:2a:d1:43:e2:
9c:ad:21:6c:60:76:71:0b:3a:6d:0f:00:5c:8c:2e:62:10:9e:
91:75:18:69:2f:15:e4:24:5a:10:d6:0a:8f:2b:ae:b5:77:a0:
56:59:17:37:97:fe:86:da:3a:28:4d:b6:83:5d:19:76:89:d7:
a6:e3:a8:0c:8b:e5:d8:a8:1a:19:06:a6:02:4e:49:5b:83:e9:
4f:4e:d4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEM5EnTlgN3+6OgqEioDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1
NmZkYTYwHhcNMjYwOTIzMDcwMDI1WhcNMjYwOTI0MDcwMDI1WjAzMTEwLwYDVQQD
Eyg4N2QxYTcyMGNmZjU1YzdmZDgwMzAwMjFjMGE1NmQyNmE3Zjc4OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorE5lMBmoZuG6ImSr6g8bOx00qsy
MeTU//zM8IU4Hsnx6Dhm8MhTkgX7wmWy1zfyhdzannXn26Y3CIevRyLJOEqJzKRm
qZDCibIno5M39D/7qhTgTdQGp8c6SK6FB0CHaOw7xKeaPIb7Zqmq8brkj9BOo3QS
igy7m5XXBnoVAWGKI+74bRD6Ociw2PtiGjEDRITwVWgTH3aXBHXnHgsVsSLuYL6r
x5QMS+vbdITBI4d6YKEol2LWJSnJoD7mpFjLnsxasQNqJvYKIXE94KLNHjcifwPA
mJZsM2/OPuUHqXyF2nKbYPVlrJUzVL28E8hufDmSENJQPmZKcDmQU0zLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfRpyDP9Vx/2AMAIcClbSan94jMMB8GA1UdIwQY
MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt
ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh
LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8Le+aDe
vWIl9NHGIr2f1bPV9PE83rJmm+LtYO5fRe1dgIbp66r8lvEtJf+vVnFq2zcC4R8S
1s5/x1ySUJlMhhhmBgwL1RW3BZ2wJezTuVom2TwC/lwkXD0//yPWOq/oe/Yxr39C
29v4ztwwIDmteJcpu3QSxHbMMhPwI+zAnV4PJEuYt3AC7vIR0nxmv4yO6fWqZHZJ
aV9ktCOtmB6byEb29JakKiY1/A6mIAemPOEq0UPinK0hbGB2cQs6bQ8AXIwuYhCe
kXUYaS8V5CRaENYKjyuutXegVlkXN5f+hto6KE22g10ZdonXpuOoDIvl2KgaGQam
Ak5JW4PpT07UKw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:36 2026 by rpki-client