Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: r4paeM8snD3mQfC7vRdSSzHlpiufeUcHQFiw17anABA=
Subject key identifier: 2D:28:3B:C5:5C:CB:02:D0:F2:45:BF:38:9F:B1:2C:35:5F:23:A9:E1
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 01A17A03DF84D7628BE444CFAA52BC79DB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 06AB
Signing time: Mon 26 Oct 2026 21:00:36 +0000
Manifest this update: Mon 26 Oct 2026 21:00:36 +0000
Manifest next update: Tue 27 Oct 2026 21:00:36 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: Q4HO3PxX1ZkSGun2TuUd5dL5R8cOe9kFYCkD5+kYE3I=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:df:84:d7:62:8b:e4:44:cf:aa:52:bc:79:db:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Oct 26 21:00:36 2026 GMT
Not After : Oct 27 21:00:36 2026 GMT
Subject: CN=2d283bc55ccb02d0f245bf389fb12c355f23a9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:3f:61:f9:e9:4e:66:80:39:a6:0c:b2:e6:
ff:56:c3:71:a9:02:fd:9d:b1:51:2f:a4:ed:e1:9a:
79:15:fb:a5:57:60:9b:90:33:c8:61:34:43:4b:15:
8f:5e:ed:cc:6c:6d:da:90:2c:03:e6:cc:b9:88:61:
a1:e9:a3:fd:3e:c4:fe:56:be:08:e1:7f:9d:7a:d2:
1b:14:df:fe:73:ef:15:9d:51:0a:9e:e7:2b:85:e3:
44:ab:46:5a:32:55:60:16:bd:4a:84:5f:3c:e0:b7:
3e:ab:d5:a1:c1:99:bd:47:e4:a1:b7:d6:fc:da:08:
54:e3:fc:b2:ac:86:3a:e8:67:b4:d9:cb:e6:14:cd:
d7:71:74:55:df:4d:a2:80:db:6e:88:a5:08:57:d0:
f1:24:72:24:2f:69:ec:f8:ad:f1:bf:d1:f2:7d:d7:
68:74:b6:d5:41:df:f8:d2:ec:7f:8d:f8:ee:35:52:
dd:52:91:ad:9c:f3:a2:35:95:c6:b8:ef:32:e0:2f:
c5:d9:c1:b0:a0:41:2c:24:c4:2b:f9:a0:f7:78:e8:
62:36:96:81:d9:46:85:3f:25:9b:68:c6:b2:93:d8:
37:6a:fc:32:29:18:39:a0:55:4d:0b:32:88:93:0c:
8e:7d:5f:66:de:26:8a:11:00:ca:df:89:4b:b7:07:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:3B:C5:5C:CB:02:D0:F2:45:BF:38:9F:B1:2C:35:5F:23:A9:E1
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:db:dd:34:2b:d1:b3:b6:1c:dd:1b:45:3b:69:45:eb:60:
b5:5d:d6:58:d3:79:9a:85:f9:07:cd:e2:d2:7b:8b:44:44:20:
bf:fe:c3:b1:36:2a:37:16:f1:3a:00:52:e5:00:5e:d5:1f:14:
26:f4:52:cc:4d:23:52:18:a5:b8:a7:aa:fb:54:9c:31:c3:56:
28:d6:d7:f2:8f:26:45:7b:21:4b:ac:dd:4a:31:70:16:53:23:
16:00:be:ec:ca:fc:fe:a4:27:4a:e2:0e:f8:19:ec:2d:ab:be:
cb:2d:f7:4d:37:12:a8:4e:86:e7:50:b0:30:81:93:db:e4:f5:
07:16:d1:ad:99:30:c3:37:04:f9:3c:35:08:0b:24:80:5b:10:
be:0c:5e:38:b5:db:42:00:b4:0f:a1:fe:c8:da:4d:ab:50:70:
9a:80:e8:83:33:35:1e:1c:a7:1e:b1:b6:52:0d:9b:93:0c:79:
01:66:6a:76:f4:0e:a5:0c:d6:bb:fc:27:50:6d:4c:16:21:64:
8f:ab:92:de:8b:b6:2e:79:73:1a:bf:ae:12:6d:7d:05:e7:84:
00:da:5c:56:b7:44:6f:3e:57:07:3c:9e:ab:6f:ee:30:39:01:
24:52:da:67:8c:b0:4e:6a:49:8c:58:03:61:62:73:ca:da:83:
44:af:b8:70
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaF6A9+E12KL5ETPqlK8edtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmVmZWQyYTI0YWMxMjBlZDI2YWU5MmFlNDg1ODFiNzdk
MjQ5NzEwHhcNMjYxMDI2MjEwMDM2WhcNMjYxMDI3MjEwMDM2WjAzMTEwLwYDVQQD
EygyZDI4M2JjNTVjY2IwMmQwZjI0NWJmMzg5ZmIxMmMzNTVmMjNhOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE8/YfnpTmaAOaYMsub/VsNxqQL9
nbFRL6Tt4Zp5FfulV2CbkDPIYTRDSxWPXu3MbG3akCwD5sy5iGGh6aP9PsT+Vr4I
4X+detIbFN/+c+8VnVEKnucrheNEq0ZaMlVgFr1KhF884Lc+q9WhwZm9R+Sht9b8
2ghU4/yyrIY66Ge02cvmFM3XcXRV302igNtuiKUIV9DxJHIkL2ns+K3xv9Hyfddo
dLbVQd/40ux/jfjuNVLdUpGtnPOiNZXGuO8y4C/F2cGwoEEsJMQr+aD3eOhiNpaB
2UaFPyWbaMayk9g3avwyKRg5oFVNCzKIkwyOfV9m3iaKEQDK34lLtwe/oQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC0oO8VcywLQ8kW/OJ+xLDVfI6nhMB8GA1UdIwQY
MBaAFPtu/tKiSsEg7Saukq5IWBt30klxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yNy0wcUpLd1NEdEpxNlNya2hZRzNmU1NYRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjU0NWE0LTIyZmEtNDUxYy04N2Fm
LTYyZjMxNmQwN2Q3MC8xLzEtMjctMHFKS3dTRHRKcTZTcmtoWUczZlNTWEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JhL2Y1NDVhNC0yMmZhLTQ1MWMtODdhZi02MmYzMTZkMDdk
NzAvMS8xLTI3LTBxSkt3U0R0SnE2U3JraFlHM2ZTU1hFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoDb
3TQr0bO2HN0bRTtpRetgtV3WWNN5moX5B83i0nuLREQgv/7DsTYqNxbxOgBS5QBe
1R8UJvRSzE0jUhiluKeq+1ScMcNWKNbX8o8mRXshS6zdSjFwFlMjFgC+7Mr8/qQn
SuIO+BnsLau+yy33TTcSqE6G51CwMIGT2+T1BxbRrZkwwzcE+Tw1CAskgFsQvgxe
OLXbQgC0D6H+yNpNq1BwmoDogzM1HhynHrG2Ug2bkwx5AWZqdvQOpQzWu/wnUG1M
FiFkj6uS3ou2LnlzGr+uEm19BeeEANpcVrdEbz5XBzyeq2/uMDkBJFLaZ4ywTmpJ
jFgDYWJzytqDRK+4cA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:00:15 2026 by rpki-client