Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: mKIU6hzspqHruJKYrDELZWX+sIcROwatUixuyJ/jpk8=
Subject key identifier: C1:D9:E9:E7:CC:48:DE:55:BD:F5:58:B3:39:74:32:4A:9F:62:08:4A
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 019F130A5F6FEDAE4FFBF1460A53FBF0F993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 140A
Signing time: Mon 29 Jun 2026 11:01:14 +0000
Manifest this update: Mon 29 Jun 2026 11:01:14 +0000
Manifest next update: Tue 30 Jun 2026 11:01:14 +0000
Files and hashes: 1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: nsM2Jc/p8rnCB+srBbyAEvrsNfMLpxQX0PN5y0bNx1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:5f:6f:ed:ae:4f:fb:f1:46:0a:53:fb:f0:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Jun 29 11:01:14 2026 GMT
Not After : Jun 30 11:01:14 2026 GMT
Subject: CN=c1d9e9e7cc48de55bdf558b33974324a9f62084a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:43:24:0a:c6:ad:37:26:67:5f:c6:04:55:
2d:30:8e:e0:25:e7:74:3b:fe:3a:78:7d:d8:c0:e1:
d0:c3:52:87:6e:c7:c9:16:a5:76:a8:4f:98:9c:5c:
fa:d6:91:20:49:e9:27:1f:58:3a:08:eb:9d:22:37:
b0:40:9b:bf:06:de:0a:f2:33:a4:b5:df:cc:22:15:
4a:59:bb:6f:52:d1:b9:f4:17:3f:8f:51:0f:72:a4:
d3:02:26:d0:bd:a3:09:f0:68:bb:ab:4a:ba:72:9c:
29:32:28:65:28:a8:c2:06:ca:3a:42:70:fb:57:b1:
fb:dc:e2:28:fc:ff:d5:f0:68:ac:4a:9e:a8:11:66:
e4:e2:e6:91:2d:f1:13:b9:61:74:17:f5:67:bc:41:
cb:53:84:60:43:92:a5:c6:a3:33:23:40:27:96:72:
0e:83:42:2c:30:dd:ff:0b:c4:63:be:e9:7d:05:75:
b5:05:dc:89:fa:ed:9d:23:50:08:a5:e2:27:55:4d:
53:8a:d7:f3:ff:7b:84:62:56:be:a4:f9:82:2f:aa:
7f:de:f2:a9:13:d9:ae:c8:44:2b:05:47:7c:d0:ce:
c9:33:7c:a2:d2:d3:5e:70:15:6a:e6:b1:f3:c1:cd:
7d:88:8e:eb:4f:7d:05:d4:ee:d8:1a:e5:9c:ef:39:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:E9:E7:CC:48:DE:55:BD:F5:58:B3:39:74:32:4A:9F:62:08:4A
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:2a:6a:42:84:42:e4:0f:a9:63:b8:49:2b:0d:5c:91:49:
8e:a9:3e:5a:68:ad:43:83:b9:9a:55:cb:d9:92:b5:a6:bb:47:
e5:45:8a:a3:8f:86:0d:91:fc:a0:52:76:9c:21:c1:ae:fd:69:
08:19:0b:2c:50:7d:9a:07:9a:dc:d5:1e:8b:ad:11:4e:77:1c:
a8:e3:10:10:7e:f8:e6:3e:6b:c0:7e:e5:e4:5a:f7:0f:d9:f4:
d4:83:f8:7a:0d:01:cd:b4:18:cc:03:e7:72:4c:d6:52:aa:bc:
b6:6c:e4:17:b8:13:93:54:1e:ec:ac:ac:a7:4f:39:a4:12:de:
6a:02:29:59:cc:82:54:c1:c9:b7:63:76:0f:65:0c:0c:e9:3d:
ed:b2:35:3d:3a:17:f7:08:62:a0:b2:4e:d5:a9:f3:1e:03:6c:
e2:4f:f3:ee:34:d6:72:f5:d4:28:2b:c8:a2:f6:68:05:14:08:
7d:77:09:eb:7e:3e:74:35:dd:9e:cf:b7:24:9a:ed:a7:9d:be:
b5:f4:0a:05:ad:22:5d:96:b0:b2:2d:84:9f:cc:e2:cf:aa:2e:
9d:f3:65:e3:e4:55:4c:d4:ba:59:cd:72:03:7d:3f:48:89:75:
c2:21:68:22:0f:66:6c:72:f4:35:ca:49:09:ed:f3:14:64:c3:
c7:cd:10:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TCl9v7a5P+/FGClP78PmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl
YjEwZmQwHhcNMjYwNjI5MTEwMTE0WhcNMjYwNjMwMTEwMTE0WjAzMTEwLwYDVQQD
EyhjMWQ5ZTllN2NjNDhkZTU1YmRmNTU4YjMzOTc0MzI0YTlmNjIwODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpdDJArGrTcmZ1/GBFUtMI7gJed0
O/46eH3YwOHQw1KHbsfJFqV2qE+YnFz61pEgSeknH1g6COudIjewQJu/Bt4K8jOk
td/MIhVKWbtvUtG59Bc/j1EPcqTTAibQvaMJ8Gi7q0q6cpwpMihlKKjCBso6QnD7
V7H73OIo/P/V8GisSp6oEWbk4uaRLfETuWF0F/VnvEHLU4RgQ5KlxqMzI0AnlnIO
g0IsMN3/C8Rjvul9BXW1BdyJ+u2dI1AIpeInVU1Titfz/3uEYla+pPmCL6p/3vKp
E9muyEQrBUd80M7JM3yi0tNecBVq5rHzwc19iI7rT30F1O7YGuWc7zlRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHZ6efMSN5VvfVYszl0MkqfYghKMB8GA1UdIwQY
MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt
NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk
LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljAqakKE
QuQPqWO4SSsNXJFJjqk+WmitQ4O5mlXL2ZK1prtH5UWKo4+GDZH8oFJ2nCHBrv1p
CBkLLFB9mgea3NUei60RTnccqOMQEH745j5rwH7l5Fr3D9n01IP4eg0BzbQYzAPn
ckzWUqq8tmzkF7gTk1Qe7Kysp085pBLeagIpWcyCVMHJt2N2D2UMDOk97bI1PToX
9whioLJO1anzHgNs4k/z7jTWcvXUKCvIovZoBRQIfXcJ634+dDXdns+3JJrtp52+
tfQKBa0iXZawsi2En8ziz6ounfNl4+RVTNS6Wc1yA30/SIl1wiFoIg9mbHL0NcpJ
Ce3zFGTDx80Qyw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:33:55 2026 by rpki-client