Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: hNYSGSjZz/0+D94PmYg0Q49wXqblx8kz/JU6hv+gAeE=
Subject key identifier: 30:91:B4:FE:D3:A9:D3:28:F7:08:92:D3:4C:B6:58:08:7B:3C:49:C2
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019D284DE622A3FA9F4146400DE75F90559E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 09F1
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: oegx21G4uL4FFb/LQ29UDgfq2wjZo5MvGleqe25aYnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e6:22:a3:fa:9f:41:46:40:0d:e7:5f:90:55:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=3091b4fed3a9d328f70892d34cb658087b3c49c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:46:bf:a9:d5:0a:57:a9:ed:73:4a:d9:52:
68:d0:8a:03:3a:02:1f:21:ad:57:d9:5c:70:8e:b2:
99:ca:2c:08:e8:cb:ea:54:cd:b1:60:57:d4:ce:29:
5e:52:f3:8b:7f:a9:84:81:4b:05:d0:e5:82:05:8c:
05:db:ea:4a:da:1d:e3:18:5a:2a:16:05:17:34:77:
06:08:2b:85:83:f1:75:8e:4c:93:1c:ba:06:26:c5:
6e:2f:d2:86:57:a7:aa:76:71:46:5d:09:08:bb:4c:
b0:21:87:53:76:dc:0f:37:8a:89:00:7f:8f:8e:2c:
9d:7c:c1:eb:be:43:25:97:eb:18:c0:9a:7b:b1:81:
26:f3:47:c0:b9:cc:77:09:d2:e9:89:a6:1a:ae:da:
7a:20:78:ee:0d:0e:c2:ec:34:85:c1:32:10:13:99:
9e:0c:4e:55:dd:4a:fc:d0:18:b7:2a:5a:36:69:4e:
74:58:46:2e:3f:74:9c:1e:16:17:b0:0f:37:fb:5b:
d8:b8:6b:c4:7a:e9:5e:30:96:ea:8d:ca:0a:0a:e3:
74:7e:6a:30:32:70:03:42:7b:17:c4:4e:61:6f:c4:
de:ae:3b:75:29:5e:b8:b1:b8:36:f0:88:d9:fd:34:
61:4c:bd:e0:3f:dd:02:bf:c1:d0:39:40:b0:84:bb:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:B4:FE:D3:A9:D3:28:F7:08:92:D3:4C:B6:58:08:7B:3C:49:C2
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c4:43:b3:29:c3:cb:c9:0d:19:bb:ce:54:e0:de:f9:43:d4:
ec:57:71:85:5b:b9:a2:15:8a:a4:06:53:7d:66:ee:ab:ee:12:
cf:75:98:67:23:a5:67:67:32:2d:75:28:23:49:fa:0a:91:8e:
f9:76:a3:62:81:dd:3d:50:1d:42:ed:cf:2a:57:4e:7e:32:5c:
fd:8b:45:87:e9:ee:2f:bb:75:8b:08:93:b5:c5:e4:3b:0f:4e:
71:98:27:b7:7a:39:4c:61:01:28:8b:b6:b5:f2:44:eb:a9:44:
1b:b5:78:49:ed:1c:91:70:28:a0:cb:20:bd:34:00:46:11:b5:
99:ee:41:3b:a3:45:53:39:c3:96:ea:f9:4a:cf:b9:2f:49:fa:
d6:7b:6b:32:a0:42:32:ce:df:13:6b:e7:13:88:13:2a:22:2f:
2d:7f:da:96:24:e8:19:fe:ae:02:21:b2:4b:2b:72:5a:0e:03:
f8:47:13:b3:99:32:8c:b6:f2:4e:59:cd:86:e9:3f:5d:5b:e8:
79:cc:b3:a1:5f:fb:76:57:4d:5f:2d:65:ab:e1:73:ce:81:ed:
bb:8f:f6:12:35:c8:24:47:1c:a3:10:5b:05:91:6c:1a:34:77:
24:94:3d:3b:65:5a:dc:4f:0b:46:99:de:d1:b0:e3:b5:1f:16:
61:91:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:20 2026 by rpki-client