Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: +k3fGAVTzQAfBmz9vlHqk90XFGkNd1TrHmrWM9Db32U=
Subject key identifier: 38:BF:EE:0A:83:48:05:14:69:FA:87:9F:9C:44:09:E0:60:E7:48:5E
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019E1C7DD3DF46B1739F993F1B3D88F7C3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0CFF
Signing time: Tue 12 May 2026 14:01:08 +0000
Manifest this update: Tue 12 May 2026 14:01:08 +0000
Manifest next update: Wed 13 May 2026 14:01:08 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: TxArrxle3Y7YcwR9rEtq8zk0cbODs5yHjtey9rihLf4=)
2: DfHWpmAWUgCCErY8uLt82E-U1FA.roa (hash: +Qi5uESsKdV2qG1rG182kIlHI1TpCDtCPoj/zgTI3/E=)
3: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
4: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:d3:df:46:b1:73:9f:99:3f:1b:3d:88:f7:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: May 12 14:01:08 2026 GMT
Not After : May 13 14:01:08 2026 GMT
Subject: CN=38bfee0a8348051469fa879f9c4409e060e7485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:f5:88:62:79:2d:bf:9b:53:78:3c:bb:38:
eb:8f:f7:e2:24:10:bb:81:06:68:5a:54:59:23:c2:
ab:93:92:08:8e:bf:c1:e6:b7:59:bf:90:04:71:5e:
64:a6:d8:34:11:7a:3b:8b:22:23:7e:a6:4b:31:56:
b0:b1:d1:c4:d9:d8:b9:98:cb:f9:46:12:40:71:c4:
4f:1a:1b:4d:3a:63:16:12:1c:1d:83:d1:cb:be:bc:
e9:70:6d:3b:0f:b2:e1:76:9f:e5:fd:47:fc:99:73:
0e:24:7f:21:3b:cf:ca:07:0e:41:82:d8:99:75:c1:
0c:3c:84:c0:89:1c:f6:3b:ce:5c:59:22:4d:51:45:
7a:8d:48:14:49:51:74:1b:1f:1f:9e:6a:8c:73:71:
39:3b:85:18:61:54:cf:19:00:47:7e:65:14:99:aa:
29:a3:2c:71:98:be:72:80:4c:da:c0:7b:2e:2b:33:
3c:6d:19:93:8e:07:63:44:a9:cb:c3:ec:b8:91:06:
38:6b:ae:96:45:50:be:59:87:7a:96:e5:d3:92:31:
53:55:bf:c7:ba:7f:1a:9a:8b:dd:ad:c3:16:c5:e4:
65:c2:0e:d3:a8:ce:87:ea:9b:34:d2:aa:bb:e0:6b:
a7:2d:cc:b7:26:db:f2:24:35:87:e4:8b:4b:af:57:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:EE:0A:83:48:05:14:69:FA:87:9F:9C:44:09:E0:60:E7:48:5E
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:06:3b:e1:9c:e0:cf:ce:5a:97:4f:85:ce:c7:d0:ee:38:a1:
d9:07:e9:b9:7f:b9:2d:87:b7:51:95:eb:f2:4c:f1:27:2d:c2:
fe:be:ea:e4:b9:2d:80:d1:8c:bb:b5:39:4c:38:09:88:6f:3e:
f8:31:dc:91:08:7b:77:c4:8f:ad:43:22:3c:d7:57:0f:82:c4:
c3:bb:f5:80:bf:62:83:6b:f1:9b:fc:a4:d2:34:5b:e6:42:50:
fe:13:18:68:de:6e:be:ab:ea:10:f9:3c:91:bc:7e:53:fe:22:
70:08:42:1d:12:42:c6:d4:2e:cd:66:14:74:56:e0:3e:9b:63:
c9:56:26:48:ba:5a:31:44:ef:16:1c:cc:7f:55:40:d5:e6:1c:
52:9c:22:3a:db:9f:fe:07:a5:38:b8:b8:aa:f4:3b:25:6a:ca:
e0:6f:32:d1:a5:4e:e7:52:fb:de:1f:8c:6e:28:6c:0c:e8:bb:
89:09:38:2a:80:d6:0b:1f:8d:a0:03:7d:24:ec:98:31:0f:f0:
ce:48:10:c7:54:05:b7:9d:bf:bf:30:c3:42:58:12:37:18:c3:
44:6a:17:21:74:24:6e:7e:bd:5a:59:05:df:ae:fb:85:54:ca:
a7:4d:b6:24:99:13:bf:b5:19:f3:ed:67:f9:5f:d5:6a:e0:75:
62:6c:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:55 2026 by rpki-client