Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: ekz4KXoCnGXrcqNzan+JFVi+dlRU0AhzsrE71OyjrYI=
Subject key identifier: 97:64:7E:49:D7:C2:53:36:6F:AA:5B:ED:BA:14:73:25:06:23:37:F5
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019E2881B7654BE50FB813301EEBAA2C8FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 190D
Signing time: Thu 14 May 2026 22:00:50 +0000
Manifest this update: Thu 14 May 2026 22:00:50 +0000
Manifest next update: Fri 15 May 2026 22:00:50 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: vlJlN1/NlcYT7nbeeviDKvreV7CqNA6q9wFAajSPP28=)
2: YKIZEXPg8oheZp7WpP7OU246ru8.roa (hash: Q2zcLyXdsWeX4PkdcMwGBRDhiV4NlfFDZoV6YyWN27s=)
3: ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa (hash: GE/9jCmc5lF87tDmPaGk9SCOllCN178iR70DGke83Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:b7:65:4b:e5:0f:b8:13:30:1e:eb:aa:2c:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: May 14 22:00:50 2026 GMT
Not After : May 15 22:00:50 2026 GMT
Subject: CN=97647e49d7c253366faa5bedba147325062337f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:8c:21:b6:b9:7e:f5:49:04:86:b5:f9:a0:
38:78:8f:33:4b:1e:65:2d:40:0e:9a:8d:f0:de:59:
40:a0:0a:a9:64:74:37:ac:62:8e:aa:90:93:ac:84:
fa:e8:c4:9d:3f:74:2b:6a:4f:42:0f:6d:d3:27:ab:
c2:42:b1:30:ec:76:e8:2b:74:1b:21:ca:7e:42:04:
3f:25:8a:a9:fa:08:b1:6d:21:bc:9a:2b:a4:fa:de:
46:40:73:c6:c4:64:68:55:26:10:8d:fb:ee:03:f9:
50:cd:43:cf:b7:ff:1b:b6:58:55:32:44:71:7c:89:
c7:00:03:ce:e9:d7:28:4e:d0:6f:8c:af:18:f8:44:
be:7b:d9:cf:4c:d1:4f:fe:fd:6e:55:96:39:2c:19:
43:1e:64:68:06:08:ad:17:67:ea:a6:5c:d1:c7:52:
5b:9d:61:5b:fc:b7:13:49:f6:7e:4d:d6:db:0f:e9:
da:d0:37:b9:3d:92:d0:3a:77:57:a8:9d:c0:81:72:
0f:19:d0:79:3a:c7:ad:f1:75:f8:d0:4f:ec:71:bf:
f7:bf:ac:7d:26:1d:11:f8:04:20:ce:97:d0:ab:1d:
f7:26:ae:4b:59:94:74:a6:c3:e5:af:89:95:da:80:
2c:b4:87:af:94:4c:fb:aa:2e:fa:5d:0d:34:57:de:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:64:7E:49:D7:C2:53:36:6F:AA:5B:ED:BA:14:73:25:06:23:37:F5
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6c:6b:35:26:a1:a1:8b:5a:81:76:7a:8e:28:a9:c4:a3:f6:
8d:9c:7b:48:cc:37:2d:6e:97:e0:de:2a:39:b5:fa:59:89:73:
d0:a6:5f:2c:a8:56:f6:e4:ba:8a:59:d3:21:1c:cd:93:35:48:
b8:dc:e8:8b:a3:25:0d:84:41:9d:59:e5:13:2f:4a:ff:64:ed:
cc:d2:3e:45:a7:85:25:88:f8:eb:5d:ea:a0:56:0c:98:d4:ad:
c4:22:67:9e:32:6a:f1:af:db:8e:93:ab:e8:4e:4c:ba:74:01:
e2:8b:0f:15:79:1b:e5:89:89:b3:73:f5:76:e9:74:e5:3c:86:
b0:f1:0b:7c:15:25:c8:13:9a:be:df:d4:69:73:f1:d9:db:9a:
50:31:75:28:e6:2c:d7:38:f9:23:0d:d1:b0:9d:a0:cc:12:bf:
f9:d4:11:24:c6:90:d5:41:05:a0:27:63:f9:16:69:1e:e2:8d:
b2:ae:cd:5b:5a:b9:dc:63:29:02:e3:31:69:2d:7d:9d:c4:2c:
a5:8e:a1:20:57:39:b0:a8:33:c0:9e:2a:c6:4c:0f:4b:77:0d:
f8:da:d1:19:a8:64:48:23:32:7e:04:30:da:cc:41:fe:cd:fe:
65:59:db:06:eb:16:a0:d2:da:a0:c1:e1:0c:6f:d8:3a:57:31:
2d:e2:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:19 2026 by rpki-client