Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: 1lc8OrVbb1lSh601ojauAkB5R0W8YNmfWcu9f0T1qEM=
Subject key identifier: BF:DB:FE:D4:86:A8:E6:7D:70:96:15:F4:D8:0A:94:F2:7F:CA:DC:D9
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019F122EF0C4E9A93EBDDFD80C953BCA9AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 07:01:33 +0000
Manifest this update: Mon 29 Jun 2026 07:01:33 +0000
Manifest next update: Tue 30 Jun 2026 07:01:33 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: q0D4bCvn/guTInBZGe24ivzUYQ2vs0LoMkDbvqkYRBQ=)
2: YKIZEXPg8oheZp7WpP7OU246ru8.roa (hash: Q2zcLyXdsWeX4PkdcMwGBRDhiV4NlfFDZoV6YyWN27s=)
3: ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa (hash: GE/9jCmc5lF87tDmPaGk9SCOllCN178iR70DGke83Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:f0:c4:e9:a9:3e:bd:df:d8:0c:95:3b:ca:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jun 29 07:01:33 2026 GMT
Not After : Jun 30 07:01:33 2026 GMT
Subject: CN=bfdbfed486a8e67d709615f4d80a94f27fcadcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:dd:21:c2:ec:ea:4c:4a:ba:1a:58:48:7a:
3a:9b:18:7d:a0:b6:bd:81:3f:74:29:14:86:91:4f:
88:40:9e:40:9a:5f:ee:ef:c8:22:c0:45:75:d1:f0:
c1:fa:8f:dd:31:d6:c0:3e:88:b1:36:5a:c9:57:60:
96:3b:bb:09:f8:23:fa:ee:fb:9d:13:bd:56:a8:4e:
2b:d2:8d:18:15:49:ce:01:1d:a2:47:0c:1c:c5:96:
8e:82:c8:07:95:58:f7:3c:2c:9a:fe:13:dc:14:e7:
47:a5:49:77:48:a5:9b:0e:35:57:2e:cb:3d:c2:af:
75:b3:69:4d:13:d0:ff:3c:8f:8f:c6:3e:13:a1:3c:
64:93:c8:7d:1d:9a:9d:12:85:a8:44:e0:f0:59:73:
11:1a:d4:88:1b:62:0e:e2:78:5c:c1:72:21:14:b9:
e2:12:29:67:09:02:2b:6d:ad:ea:a7:c4:c9:3c:e8:
6a:59:6e:da:1b:74:1e:97:28:ca:92:7f:87:db:33:
2e:75:87:8b:9f:5b:28:af:58:47:d5:36:80:40:2c:
65:87:3d:54:c6:3f:80:8f:7e:21:ba:e3:e9:9c:2e:
af:ee:ff:d6:e0:86:ef:23:75:ff:48:49:51:87:48:
a6:22:57:0c:bb:8b:f2:c8:4f:c1:07:8d:bc:fa:ef:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:FE:D4:86:A8:E6:7D:70:96:15:F4:D8:0A:94:F2:7F:CA:DC:D9
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:78:91:2b:35:eb:e2:c7:f8:15:00:65:3d:5c:e2:94:24:
55:b6:ed:82:d0:d5:d8:f5:d4:33:ef:59:16:a2:7f:a7:2d:31:
f0:8d:11:30:f4:40:5f:ca:61:f6:c1:fd:6f:18:86:20:f2:e1:
87:3a:3f:ae:cd:29:ca:c0:93:ed:7e:3f:ae:af:88:26:4c:09:
e8:d1:da:ee:40:8f:ea:63:c7:11:d7:1f:ca:f3:22:18:af:ae:
0c:6c:e9:e8:f9:f8:c5:bb:f2:49:00:6e:a1:5e:5b:67:c0:3e:
62:7d:4f:dd:d8:82:77:d9:87:4b:ee:91:ba:ce:70:b6:1f:ed:
33:1f:d7:72:6f:4d:07:98:b4:da:1f:3b:65:16:a9:58:fb:47:
c7:8b:7b:0a:31:2e:a5:27:66:61:55:69:1d:63:52:46:97:8d:
22:cc:02:ce:40:59:80:7a:61:5d:59:64:96:8f:f9:1b:83:8f:
79:b4:01:36:f8:3d:c2:22:0e:2b:d9:33:92:32:3e:7c:c8:23:
33:ce:c6:c1:1e:89:53:96:1f:86:f9:a3:68:49:5f:8e:9a:6a:
39:3e:d2:70:60:fb:aa:e6:85:6c:bb:08:c5:46:f0:de:1b:da:
e0:ba:91:98:88:46:f0:d9:51:32:bf:8b:98:84:80:26:72:4f:
d4:ad:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:44:48 2026 by rpki-client