
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File: V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier: qZZdDyHx5TtEwhOLrcMyQudKuet9SXt90JCcmj7YDrg=
Subject key identifier: 25:F1:C3:CD:EA:95:38:A1:EE:20:64:A2:31:75:FC:5B:DC:8A:6E:BE
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial: 01A180AB81738194994FFACF02F69B38C4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number: 14BC
Signing time: Wed 28 Oct 2026 04:01:25 +0000
Manifest this update: Wed 28 Oct 2026 04:01:25 +0000
Manifest next update: Thu 29 Oct 2026 04:01:25 +0000
Files and hashes: 1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=)
2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: r04FcEaWjdPIM8brBZVR8TlZXIUHalRdzis02BtD00M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:81:73:81:94:99:4f:fa:cf:02:f6:9b:38:c4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Validity
Not Before: Oct 28 04:01:25 2026 GMT
Not After : Oct 29 04:01:25 2026 GMT
Subject: CN=25f1c3cdea9538a1ee2064a23175fc5bdc8a6ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:12:8b:e2:d6:86:67:3f:ed:35:54:63:43:
ee:f8:15:d1:75:ad:23:67:e6:ed:f3:96:32:ac:c1:
c6:30:28:7b:4b:16:f7:08:1f:af:5d:12:5a:f7:5f:
29:95:31:8e:83:c4:2e:43:ed:71:23:9e:94:90:94:
6e:4c:91:63:9f:59:59:42:cf:23:9d:e7:eb:ce:4e:
f9:9d:0c:00:ba:5b:ea:ea:d4:c7:7f:98:c7:c3:b9:
0e:04:e3:d0:05:4e:e5:16:f7:59:26:79:ad:61:68:
62:07:dd:fa:fa:2a:b7:54:63:b7:e5:06:a6:a6:8c:
89:99:04:70:c6:3e:23:05:b8:b9:db:63:08:8e:ce:
3e:a7:bf:2b:d6:ff:00:3a:4f:7c:6f:3e:81:18:dc:
7a:6d:e0:39:34:27:64:63:95:eb:7d:7c:f1:f6:cf:
9b:74:f4:8b:5d:c0:3d:91:c0:4f:54:4b:f4:8f:62:
3d:86:c2:80:76:04:32:3d:0d:3f:ed:8a:b6:38:95:
60:d6:6f:c2:31:53:76:68:26:53:f2:59:7b:7f:7b:
b5:17:37:df:48:8d:a2:42:48:5b:84:5e:3d:fb:8f:
a2:8c:c1:55:24:4b:1e:ae:64:a4:86:e1:3f:8f:3e:
ce:33:50:5c:d8:89:06:8b:35:0e:3a:f2:0c:58:0d:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:C3:CD:EA:95:38:A1:EE:20:64:A2:31:75:FC:5B:DC:8A:6E:BE
X509v3 Authority Key Identifier:
keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:24:46:80:3c:1a:26:2e:5b:37:95:fc:ed:b6:2b:06:80:
0d:b7:61:46:62:5d:03:ce:fa:fa:c8:fb:38:65:74:1f:31:65:
b0:3b:45:c4:6b:af:5e:47:bf:69:e3:39:fa:86:2c:e2:55:bb:
85:3d:77:17:2a:c4:8c:4d:7e:63:85:5c:80:2b:87:cf:95:2f:
fb:0d:54:41:6d:85:63:83:51:b7:ef:ac:75:be:eb:dc:d1:ae:
52:ae:93:20:94:3a:0e:66:ce:1c:46:46:a4:8e:96:91:2c:d4:
93:b4:8b:97:bb:ce:01:f3:0f:29:51:fc:5f:a7:a6:db:f5:f7:
09:c8:74:30:c0:66:af:bd:95:e7:99:66:1d:4d:5f:a7:75:de:
18:69:e7:2c:d8:1a:5f:cd:0c:3a:a0:3c:39:78:5b:98:4b:8f:
e5:5e:fd:04:7f:6a:ab:e9:2e:d2:55:60:aa:b1:2d:ed:b2:63:
eb:9f:05:02:01:83:3a:a1:cf:8a:09:01:27:6d:36:ad:3e:2d:
c7:1a:ac:45:76:9d:db:9a:14:fc:53:c8:4d:19:26:4e:b2:02:
2c:83:f2:94:9a:c7:99:06:68:6f:45:b7:dc:21:8b:35:19:14:
17:29:e7:3e:1e:80:95:5a:c2:66:ea:e4:c8:80:38:bd:67:27:
d4:8d:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:49 2026 by rpki-client