Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: 6NBY8P/86YSHX81/+qsZPqgtMuiNOXk/4WTkrpX6clg=
Subject key identifier: 2A:1B:9C:9C:B9:03:2E:61:E0:DE:62:60:2F:5E:E9:40:33:82:C4:1A
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 019D37F724F6B24F31310336107F69A5D16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 1314
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: hH8QCJtsOBNh3I69UixOvxD7/f0XQHn++WF7KLOtIhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:24:f6:b2:4f:31:31:03:36:10:7f:69:a5:d1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=2a1b9c9cb9032e61e0de62602f5ee9403382c41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:4c:28:e0:6d:24:6f:dd:0f:9e:97:03:c4:
ce:3d:46:0c:9b:78:65:98:76:92:d2:38:df:69:87:
4f:12:09:3c:12:fa:7e:da:fc:1e:96:07:bf:d4:d9:
c9:90:3b:55:55:8b:6d:d3:5d:14:7a:7d:52:1f:75:
1a:f7:30:9b:34:52:a4:2f:c9:58:00:4f:2c:71:e4:
7b:e6:d9:32:82:09:96:f2:ba:2b:40:d5:46:40:da:
e4:91:2e:84:1b:73:71:7c:01:f6:0e:7d:73:9c:8a:
8d:72:99:b7:e7:5e:13:82:2c:e6:e9:e3:14:64:3f:
19:06:8b:ee:0d:33:b4:b7:c7:5e:5e:87:a6:81:c3:
52:fa:8c:f7:31:01:3e:e9:a0:65:eb:06:de:39:b7:
6a:a0:22:b1:e4:d1:5a:f3:c0:34:f0:5b:c1:a9:0f:
0d:0b:d0:7e:b7:03:21:5c:b7:00:ca:44:c1:f8:c0:
50:e5:ef:6a:3b:c2:ab:c9:f2:47:6c:f7:69:31:c6:
ba:20:54:71:0f:2b:fb:89:bb:c3:f8:51:71:46:a7:
21:19:a9:b9:9e:47:67:c5:90:da:33:58:90:52:f3:
a5:56:73:0d:0b:b3:4e:d3:a6:d9:bb:c9:86:05:93:
4b:f8:4b:a5:c9:f4:e4:08:95:a5:5d:f9:a9:36:f4:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1B:9C:9C:B9:03:2E:61:E0:DE:62:60:2F:5E:E9:40:33:82:C4:1A
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:91:7a:0e:e2:03:03:c2:b0:59:cc:f1:fb:c6:4e:31:36:
bd:f7:ac:4d:81:ae:6f:1c:f7:5e:0a:76:01:cb:50:1e:aa:73:
a4:ad:41:c8:07:51:fc:36:ad:c5:f3:da:e2:63:b0:cc:54:49:
58:01:0f:41:17:5f:3e:42:31:43:c3:65:70:67:a3:7d:bb:be:
ca:ff:a3:71:ef:a8:40:d2:78:70:64:7b:40:2e:bb:c6:63:54:
1f:7c:0d:19:09:13:76:1f:4e:dd:82:7d:8f:e1:df:42:97:73:
a1:08:bb:ed:df:5d:29:75:4b:5e:23:de:64:8d:b3:ac:98:fe:
de:b1:0e:d8:d7:63:de:0c:2e:20:87:81:d0:0a:84:19:ff:08:
6c:7c:b2:5b:18:27:e6:d2:02:e3:1c:ac:ad:b3:fe:9b:a4:d4:
71:45:85:4e:f4:62:5c:f0:1a:c1:20:1d:f9:fc:52:41:cf:5f:
27:5d:72:77:25:bd:01:6f:1d:b2:7c:eb:e2:48:71:5f:87:b1:
15:08:9c:12:63:a4:6a:d5:78:09:00:c5:ba:49:3d:83:39:87:
15:44:b9:4f:cc:23:ba:41:1c:ab:74:3a:8d:c4:24:99:94:e2:
d2:7d:d0:ce:e4:a5:00:93:53:a2:9a:63:4a:2c:0b:de:6f:38:
5e:e1:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:34 2026 by rpki-client