Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: tnZ8tOgp4mcsliKRE4Y/CQobNHrhrwHCBecQrcH4798=
Subject key identifier: EE:E1:62:0A:BB:86:A0:04:D4:CE:B4:39:C6:4F:94:C0:D4:AA:79:75
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 01A100235FD5A62E19C2A2B5CEF382924508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 01CA
Signing time: Sat 03 Oct 2026 05:01:20 +0000
Manifest this update: Sat 03 Oct 2026 05:01:20 +0000
Manifest next update: Sun 04 Oct 2026 05:01:20 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: U38RcalnYzHILVvv+YDe/Ff90/HEdZPuIyLv5LJzdQA=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:5f:d5:a6:2e:19:c2:a2:b5:ce:f3:82:92:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: Oct 3 05:01:20 2026 GMT
Not After : Oct 4 05:01:20 2026 GMT
Subject: CN=eee1620abb86a004d4ceb439c64f94c0d4aa7975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:03:9d:1b:41:df:83:96:15:b6:68:fe:dc:
90:75:20:1e:1a:cc:39:a8:a7:44:02:b5:36:2c:03:
25:a3:d3:cf:2c:1d:74:3b:57:96:65:8e:c9:ce:eb:
db:2a:2c:d2:94:c4:bd:b1:99:3c:3d:4d:ab:ec:44:
e4:09:d2:1a:69:a1:e3:2e:6d:28:c3:51:01:4c:dc:
5a:75:6a:16:56:74:36:c0:00:ab:60:bd:a3:35:11:
df:33:fe:b1:45:ad:70:e4:b8:93:5f:98:50:51:46:
ec:1a:9f:e7:d9:6a:b1:61:3a:0d:7f:21:2d:db:ea:
36:f5:63:9c:41:34:98:fc:f4:53:16:e4:6e:06:8d:
0b:96:48:05:99:c3:40:35:50:fe:de:4e:4d:33:0f:
d9:6a:9f:d1:8a:a5:26:ec:40:12:ca:b5:fa:45:6a:
9c:b2:e8:84:f9:08:6a:c8:47:14:73:20:48:2a:b6:
05:92:95:ac:2e:a3:0f:9c:c4:21:6c:1a:8c:3b:be:
4a:53:c4:64:5b:39:6b:2d:7c:68:ac:a8:3c:4c:dc:
12:ef:46:06:6f:bf:e9:45:b5:0a:66:23:45:f3:ce:
1e:c5:88:c0:c5:7a:84:2f:e1:50:0f:4c:ce:f4:a5:
05:6c:a8:71:6f:53:5f:59:ba:9f:d2:15:46:20:78:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:62:0A:BB:86:A0:04:D4:CE:B4:39:C6:4F:94:C0:D4:AA:79:75
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fa:b8:77:31:77:e8:cb:df:b3:9a:2d:92:0b:b1:c0:de:8b:
df:2a:5e:ef:dd:c1:29:7f:c7:94:d4:8b:d0:9c:16:be:a5:5a:
a4:a3:c2:9a:34:1d:ce:a0:f9:f8:f2:15:63:39:ac:ce:1f:9a:
cb:ef:a2:07:ec:52:8e:a4:a9:a6:12:8d:ff:73:2b:fe:7d:4c:
2d:e0:94:a7:7a:4c:1e:7c:55:d2:03:a2:c5:4c:24:22:6d:df:
45:db:9c:0a:07:44:01:ca:ba:08:df:32:f0:a2:3d:fe:fb:79:
63:94:4b:87:ab:ae:44:8f:9e:5b:3d:45:bc:88:dd:7f:dc:9c:
c1:dd:a3:a1:9a:f1:8e:bd:f4:28:7c:b7:cf:22:90:8d:97:6a:
b7:9c:30:50:92:2e:22:b4:e3:a1:99:bf:ea:d5:26:19:e4:d3:
b5:57:3a:f1:e2:0a:3a:a3:2f:28:d4:84:6d:99:d5:b2:87:69:
52:b1:08:0a:1b:be:5b:85:47:cb:f6:39:3d:9f:fa:cc:fa:07:
b3:fc:8c:f7:94:eb:0b:eb:23:15:a0:ee:04:8b:a9:1d:71:f7:
42:b5:fe:41:37:d2:ae:2a:d0:a6:4d:ea:ec:37:78:75:b5:98:
44:67:80:5e:18:89:87:d5:fc:5c:66:06:bc:96:4a:42:77:6f:
bf:2f:11:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAI1/Vpi4ZwqK1zvOCkkUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM1MTEwMWFhZTkxZTNiMmZjZmIyNWZlYjAzNjU5YmE4
NWVjYTEwHhcNMjYxMDAzMDUwMTIwWhcNMjYxMDA0MDUwMTIwWjAzMTEwLwYDVQQD
EyhlZWUxNjIwYWJiODZhMDA0ZDRjZWI0MzljNjRmOTRjMGQ0YWE3OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+0DnRtB34OWFbZo/tyQdSAeGsw5
qKdEArU2LAMlo9PPLB10O1eWZY7JzuvbKizSlMS9sZk8PU2r7ETkCdIaaaHjLm0o
w1EBTNxadWoWVnQ2wACrYL2jNRHfM/6xRa1w5LiTX5hQUUbsGp/n2WqxYToNfyEt
2+o29WOcQTSY/PRTFuRuBo0LlkgFmcNANVD+3k5NMw/Zap/RiqUm7EASyrX6RWqc
suiE+QhqyEcUcyBIKrYFkpWsLqMPnMQhbBqMO75KU8RkWzlrLXxorKg8TNwS70YG
b7/pRbUKZiNF884exYjAxXqEL+FQD0zO9KUFbKhxb1NfWbqf0hVGIHhG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7hYgq7hqAE1M60OcZPlMDUqnl1MB8GA1UdIwQY
MBaAFNuzURAarpHjsvz7Jf6wNlm6heyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYt
ZWE1YmI0YTViYjM5LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYtZWE1YmI0YTViYjM5
LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvq4dzF3
6Mvfs5otkguxwN6L3ype793BKX/HlNSL0JwWvqVapKPCmjQdzqD5+PIVYzmszh+a
y++iB+xSjqSpphKN/3Mr/n1MLeCUp3pMHnxV0gOixUwkIm3fRducCgdEAcq6CN8y
8KI9/vt5Y5RLh6uuRI+eWz1FvIjdf9ycwd2joZrxjr30KHy3zyKQjZdqt5wwUJIu
IrTjoZm/6tUmGeTTtVc68eIKOqMvKNSEbZnVsodpUrEIChu+W4VHy/Y5PZ/6zPoH
s/yM95TrC+sjFaDuBIupHXH3QrX+QTfSrirQpk3q7Dd4dbWYRGeAXhiJh9X8XGYG
vJZKQndvvy8ROw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:28 2026 by rpki-client