Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: m8ijx8GfgmGSqRdpLw56l05lrh0D8qFEQ9d3Zw0W7Cw=
Subject key identifier: 21:FC:E0:BD:2D:26:3A:F2:9F:C3:83:FE:4B:39:B5:E7:16:C7:09:32
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 019DDCC3722F3D8C0FDF7705C7E4DBC277F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 2A
Signing time: Thu 30 Apr 2026 05:01:29 +0000
Manifest this update: Thu 30 Apr 2026 05:01:29 +0000
Manifest next update: Fri 01 May 2026 05:01:29 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: WdU0smpw1GTej99qQ4wN6JBXK25P/gv+J4AxQshSUmE=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:72:2f:3d:8c:0f:df:77:05:c7:e4:db:c2:77:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: Apr 30 05:01:29 2026 GMT
Not After : May 1 05:01:29 2026 GMT
Subject: CN=21fce0bd2d263af29fc383fe4b39b5e716c70932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:b8:ac:da:81:e3:f1:01:86:14:41:d6:a7:
99:a4:a9:41:f2:2c:d6:4d:c0:fc:6d:02:6a:51:ef:
d8:58:09:76:ae:17:44:b4:61:d1:cf:89:40:c1:7d:
7b:b8:b5:51:6c:3a:99:6c:fa:7e:42:b2:f7:61:42:
3c:13:64:4d:a7:d4:b8:d2:a9:e8:55:b1:30:0b:f3:
d1:42:03:6c:92:75:af:35:78:24:ee:4c:72:ae:30:
b5:52:48:c0:35:eb:bb:ae:0f:c3:a0:48:ee:64:ff:
39:72:db:eb:58:cd:7f:37:12:81:c0:6f:5a:69:f1:
63:10:01:74:dc:3d:b9:47:29:80:89:9b:71:13:68:
0b:4b:94:c8:f7:e7:61:d2:9a:e7:1d:31:9e:17:f3:
e7:e1:ce:f7:7f:bb:87:26:a6:37:06:16:b4:a0:1f:
9b:44:82:5d:04:d1:42:04:4a:94:f9:41:b7:27:c4:
21:56:c6:2b:75:47:6c:de:bc:25:aa:7c:c7:49:25:
e2:fa:cc:2c:6f:e5:eb:23:c8:51:dc:66:92:40:86:
dc:98:2c:62:8b:b8:a8:b2:9d:ca:ab:28:d9:83:dd:
1e:78:3b:24:0d:e1:c9:a3:8a:9f:49:eb:eb:5c:1b:
4e:3a:ca:42:24:c7:4b:39:a4:9c:83:9d:80:b1:a4:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:E0:BD:2D:26:3A:F2:9F:C3:83:FE:4B:39:B5:E7:16:C7:09:32
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5c:2e:71:8c:1c:3e:66:9d:0c:bc:79:b0:4f:05:79:cf:c5:
1a:a5:c0:ac:ce:9d:f8:7a:db:7b:ce:8b:11:d3:e0:a4:ac:77:
af:b9:15:b3:53:f7:df:27:e3:8c:ea:aa:1c:2e:63:ce:5a:e0:
f4:a0:e4:9d:da:1a:6e:98:89:c9:ba:48:40:62:e1:d6:af:a0:
50:98:f4:44:fa:b8:b7:70:4c:15:ab:3e:29:b1:d8:87:a1:79:
7c:0b:b8:87:06:aa:69:ab:dc:af:45:30:ef:03:48:bf:67:cb:
93:b4:bc:b1:39:5b:94:8d:9e:e5:22:85:ae:7e:05:1c:0a:4e:
a0:f5:30:a7:6a:40:d1:45:2e:31:55:95:75:3b:ee:f9:c7:a0:
53:32:ec:58:ed:ce:58:5d:db:8b:25:08:ba:88:3f:fa:6d:61:
82:60:77:b2:c8:48:c0:e0:a7:59:5f:09:0a:b5:66:f6:81:ff:
e9:a4:05:87:7e:32:61:b9:91:46:05:05:61:c7:b5:ae:3a:e6:
69:37:9d:3d:a7:b2:8c:7d:14:ab:12:39:95:ed:a1:e5:54:31:
b7:8d:e0:de:68:52:5b:af:0d:41:b2:f5:83:23:e0:56:8f:aa:
17:fb:89:f2:90:59:a9:f0:c6:e9:16:d8:aa:97:00:c7:56:0f:
23:7f:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:10 2026 by rpki-client