Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File: d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier: vL8WDhI/468MdVIWXumxL/UpEYqcDRCueTV+hveacdQ=
Subject key identifier: DC:E9:87:40:6A:B4:DF:77:26:DF:B1:A1:93:73:BB:CF:AC:57:0C:9D
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 019DCC749CDA2DDE2F64BC2108FB8F9F3BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number: 0C
Signing time: Mon 27 Apr 2026 01:01:27 +0000
Manifest this update: Mon 27 Apr 2026 01:01:27 +0000
Manifest next update: Tue 28 Apr 2026 01:01:27 +0000
Files and hashes: 1: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (hash: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=)
2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: DD3w/YjgkYNX6Jbl2VyA7ZsDdUFvKTdMx9Y1wrqr4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:9c:da:2d:de:2f:64:bc:21:08:fb:8f:9f:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Apr 27 01:01:27 2026 GMT
Not After : Apr 28 01:01:27 2026 GMT
Subject: CN=dce987406ab4df7726dfb1a19373bbcfac570c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:cd:f6:88:04:f2:7e:6d:7d:01:0c:76:f9:
7e:c2:f8:f7:7d:85:db:2b:d2:75:4d:a7:a5:62:83:
c8:12:05:a2:60:d7:4a:47:88:b6:68:c8:6f:82:aa:
ef:08:28:f0:f4:80:4a:10:0e:0e:21:80:5e:49:94:
12:7d:a9:3f:84:99:f7:94:1e:e3:24:5d:84:db:53:
94:6c:d1:21:a2:2d:68:80:96:9a:e2:41:8d:01:03:
40:b6:6b:5a:b8:fe:62:41:b0:e9:c2:31:bc:27:28:
64:4b:1e:eb:e6:6f:4f:ff:71:7b:80:ea:e3:76:3f:
21:1e:63:ba:fc:20:50:c1:0b:f3:2d:e9:ec:d1:31:
34:5a:75:b3:c1:89:7f:bb:39:86:04:c6:cb:83:1a:
ac:24:d8:72:5b:4d:94:5b:f0:02:a4:4c:c6:e5:2e:
ee:9d:80:ee:89:a7:75:aa:dd:ce:08:d2:37:d2:c2:
2c:b3:14:bd:d7:b6:0e:dd:a2:74:64:3f:38:fd:c9:
9e:a0:2c:98:06:12:17:60:27:d8:b6:6c:2a:d7:55:
77:50:2d:3a:0b:c3:3c:44:92:8e:49:a0:60:cd:80:
03:12:65:3c:57:e1:bf:72:64:21:4d:7c:ed:be:37:
a6:9e:4a:9f:22:c6:93:5f:7b:7b:73:b2:f5:af:fb:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E9:87:40:6A:B4:DF:77:26:DF:B1:A1:93:73:BB:CF:AC:57:0C:9D
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:ea:8e:31:a1:f1:ed:66:25:a1:d5:97:42:b1:17:76:c0:
32:e7:00:cf:bf:d8:26:f2:3f:53:15:ac:ef:5c:e5:b4:03:93:
d7:bb:fd:f7:dd:eb:1d:ed:34:25:fd:14:9b:f2:cf:4d:ef:02:
9e:be:57:a0:c4:f3:2d:1f:bb:d9:c3:9b:a2:6f:24:5f:93:4b:
38:0c:ab:65:ab:3f:76:ef:b6:ee:cb:95:04:82:60:73:4d:c0:
47:a6:69:43:c7:bf:ee:79:db:5b:76:12:d3:e5:ea:1c:8e:af:
09:01:ae:2c:32:52:6a:6f:eb:80:ef:e3:9d:e9:f5:ed:1b:c2:
b2:61:6a:c8:a6:9b:3b:a2:60:a0:5e:b6:d9:9f:4c:b1:1e:44:
3a:30:ed:11:d5:31:1f:be:e7:6f:86:bd:01:a8:f3:db:15:3c:
be:22:79:7f:45:62:26:b1:fa:0c:3c:ea:e3:0e:5b:ec:49:13:
68:a4:ae:13:84:c0:d5:70:70:ac:8b:e6:51:e7:71:d3:a6:15:
0c:ef:9d:ac:a8:6d:cd:2b:9b:f2:92:95:e8:d7:91:62:ea:41:
bf:39:36:c3:da:44:42:42:aa:e4:31:fa:62:00:57:cb:55:3a:
80:5e:f3:f4:96:57:f0:3b:9e:66:e4:4b:15:5c:fd:55:4b:68:
f7:57:4f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MdJzaLd4vZLwhCPuPnzvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NmVjMDRkN2U2Nzk4ODYyMTZkMDdiYzcyMjhkYjUyOGYz
Yzg2ZmQwHhcNMjYwNDI3MDEwMTI3WhcNMjYwNDI4MDEwMTI3WjAzMTEwLwYDVQQD
EyhkY2U5ODc0MDZhYjRkZjc3MjZkZmIxYTE5MzczYmJjZmFjNTcwYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdXN9ogE8n5tfQEMdvl+wvj3fYXb
K9J1TaelYoPIEgWiYNdKR4i2aMhvgqrvCCjw9IBKEA4OIYBeSZQSfak/hJn3lB7j
JF2E21OUbNEhoi1ogJaa4kGNAQNAtmtauP5iQbDpwjG8JyhkSx7r5m9P/3F7gOrj
dj8hHmO6/CBQwQvzLens0TE0WnWzwYl/uzmGBMbLgxqsJNhyW02UW/ACpEzG5S7u
nYDuiad1qt3OCNI30sIssxS917YO3aJ0ZD84/cmeoCyYBhIXYCfYtmwq11V3UC06
C8M8RJKOSaBgzYADEmU8V+G/cmQhTXztvjemnkqfIsaTX3t7c7L1r/tYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzph0BqtN93Jt+xoZNzu8+sVwydMB8GA1UdIwQY
MBaAFHduwE1+Z5iGIW0HvHIo21KPPIb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDI3QVRYNW5tSVloYlFlOGNpamJVbzg4aHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yZjgyODItNmM1NC00MDE4LTkzYjEt
NDkzYWYxY2JiZTBjLzEvZDI3QVRYNW5tSVloYlFlOGNpamJVbzg4aHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yZjgyODItNmM1NC00MDE4LTkzYjEtNDkzYWYxY2JiZTBj
LzEvZDI3QVRYNW5tSVloYlFlOGNpamJVbzg4aHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOvqjjGh
8e1mJaHVl0KxF3bAMucAz7/YJvI/UxWs71zltAOT17v9993rHe00Jf0Um/LPTe8C
nr5XoMTzLR+72cObom8kX5NLOAyrZas/du+27suVBIJgc03AR6ZpQ8e/7nnbW3YS
0+XqHI6vCQGuLDJSam/rgO/jnen17RvCsmFqyKabO6JgoF622Z9MsR5EOjDtEdUx
H77nb4a9Aajz2xU8viJ5f0ViJrH6DDzq4w5b7EkTaKSuE4TA1XBwrIvmUedx06YV
DO+drKhtzSub8pKV6NeRYupBvzk2w9pEQkKq5DH6YgBXy1U6gF7z9JZX8DueZuRL
FVz9VUto91dPjA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:24:38 2026 by rpki-client