Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: LVyLHX/KGWAiYAaCT40JZ8WtJaUCCsZUmrdgJlXajww=
Subject key identifier: 13:12:21:BA:6C:F5:4D:30:81:36:33:C7:91:8B:27:04:2F:7E:DA:27
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019DCF75207B3EF0F11B80C0243A4DC9D550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 04C5
Signing time: Mon 27 Apr 2026 15:00:52 +0000
Manifest this update: Mon 27 Apr 2026 15:00:52 +0000
Manifest next update: Tue 28 Apr 2026 15:00:52 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: 04k2Teg3diOK+WlZEw6geC/NtdaTLIzPJe5UvW7FiXA=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:20:7b:3e:f0:f1:1b:80:c0:24:3a:4d:c9:d5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Apr 27 15:00:52 2026 GMT
Not After : Apr 28 15:00:52 2026 GMT
Subject: CN=131221ba6cf54d30813633c7918b27042f7eda27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:60:50:37:2e:11:da:7e:e8:6d:47:87:32:
f1:7d:2d:a1:9c:25:b0:a5:5b:b4:3f:97:22:90:9f:
06:2d:51:44:9d:c5:b5:bd:59:95:54:e9:3b:d4:87:
34:e1:b2:a3:a6:a4:6d:61:fa:f3:c1:86:13:3f:d0:
3c:e6:b6:2a:87:68:00:6f:95:40:c1:f6:00:49:af:
ca:64:97:2f:6c:2f:33:1b:b4:2b:2b:0d:aa:ba:54:
d6:7d:7b:85:85:e7:b1:fd:af:ac:b1:e6:00:fe:50:
48:4d:bc:4c:f9:22:eb:ea:6b:db:72:0e:be:e3:04:
b4:39:a4:87:a9:92:22:3d:57:99:fa:e1:7b:57:75:
1e:68:36:09:fe:bf:05:db:89:f1:18:c6:64:72:54:
8c:ca:b7:b3:6d:fb:73:15:e1:3e:a4:39:87:bc:38:
49:89:6b:49:1f:9c:d9:36:ba:39:84:07:0f:46:6f:
4f:1e:9f:91:56:8d:43:f8:c0:5a:4c:3e:c6:35:bc:
8a:72:14:fe:9a:fa:d3:3f:19:d6:16:df:73:56:65:
18:a1:1e:44:5c:ba:af:63:98:55:4c:f0:23:b8:d5:
19:89:78:6c:5e:28:3c:5e:85:16:c2:41:f9:df:21:
0e:da:76:a9:f6:48:84:f9:67:32:d3:09:71:ab:85:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:21:BA:6C:F5:4D:30:81:36:33:C7:91:8B:27:04:2F:7E:DA:27
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f3:82:61:42:50:02:ba:d1:3e:45:3b:96:69:64:c6:88:99:
5e:e4:56:d3:c0:be:c1:ec:23:68:04:30:97:2f:e9:3f:1c:8c:
47:d8:3c:ae:f5:04:95:54:3c:7f:0a:a9:50:fb:17:a1:8b:18:
67:7d:2e:fa:f2:1a:ee:95:64:58:6f:9c:65:da:d9:84:7d:b9:
42:aa:c9:f4:10:70:fb:74:d5:8d:ae:8b:fe:98:c3:87:57:9a:
5a:52:e6:41:e4:a1:43:52:e2:23:c5:dd:bf:2b:2e:85:c8:08:
fb:8c:dc:a6:9d:c7:af:e7:9c:10:df:0b:74:6b:86:37:62:d0:
11:c6:5d:ea:d7:8d:89:45:b1:a1:94:9b:e8:c1:93:90:04:bf:
d0:b6:cf:10:27:34:9a:cd:89:7a:c6:de:d4:f7:5a:ec:90:ed:
b4:6c:0e:d1:76:50:2c:64:2d:62:ba:16:a2:ac:db:d6:23:71:
83:08:41:18:a0:9f:76:a3:cd:5d:f2:2e:9f:c1:56:3c:db:c9:
a2:da:5f:7d:6d:59:f2:bc:cb:b4:3b:77:d8:34:da:fd:f7:14:
e6:bd:68:5f:a5:1d:0b:42:a6:18:6f:85:71:69:9f:e7:52:a9:
2c:57:7f:c9:69:b6:48:06:ca:2a:c1:8b:86:5f:cc:41:5a:3a:
5c:1f:39:18
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3PdSB7PvDxG4DAJDpNydVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmVmZWQyYTI0YWMxMjBlZDI2YWU5MmFlNDg1ODFiNzdk
MjQ5NzEwHhcNMjYwNDI3MTUwMDUyWhcNMjYwNDI4MTUwMDUyWjAzMTEwLwYDVQQD
EygxMzEyMjFiYTZjZjU0ZDMwODEzNjMzYzc5MThiMjcwNDJmN2VkYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9RgUDcuEdp+6G1HhzLxfS2hnCWw
pVu0P5cikJ8GLVFEncW1vVmVVOk71Ic04bKjpqRtYfrzwYYTP9A85rYqh2gAb5VA
wfYASa/KZJcvbC8zG7QrKw2qulTWfXuFheex/a+sseYA/lBITbxM+SLr6mvbcg6+
4wS0OaSHqZIiPVeZ+uF7V3UeaDYJ/r8F24nxGMZkclSMyrezbftzFeE+pDmHvDhJ
iWtJH5zZNro5hAcPRm9PHp+RVo1D+MBaTD7GNbyKchT+mvrTPxnWFt9zVmUYoR5E
XLqvY5hVTPAjuNUZiXhsXig8XoUWwkH53yEO2nap9kiE+Wcy0wlxq4XZ7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBMSIbps9U0wgTYzx5GLJwQvftonMB8GA1UdIwQY
MBaAFPtu/tKiSsEg7Saukq5IWBt30klxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yNy0wcUpLd1NEdEpxNlNya2hZRzNmU1NYRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjU0NWE0LTIyZmEtNDUxYy04N2Fm
LTYyZjMxNmQwN2Q3MC8xLzEtMjctMHFKS3dTRHRKcTZTcmtoWUczZlNTWEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JhL2Y1NDVhNC0yMmZhLTQ1MWMtODdhZi02MmYzMTZkMDdk
NzAvMS8xLTI3LTBxSkt3U0R0SnE2U3JraFlHM2ZTU1hFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0fOC
YUJQArrRPkU7lmlkxoiZXuRW08C+wewjaAQwly/pPxyMR9g8rvUElVQ8fwqpUPsX
oYsYZ30u+vIa7pVkWG+cZdrZhH25QqrJ9BBw+3TVja6L/pjDh1eaWlLmQeShQ1Li
I8XdvysuhcgI+4zcpp3Hr+ecEN8LdGuGN2LQEcZd6teNiUWxoZSb6MGTkAS/0LbP
ECc0ms2Jesbe1Pda7JDttGwO0XZQLGQtYroWoqzb1iNxgwhBGKCfdqPNXfIun8FW
PNvJotpffW1Z8rzLtDt32DTa/fcU5r1oX6UdC0KmGG+FcWmf51KpLFd/yWm2SAbK
KsGLhl/MQVo6XB85GA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:18 2026 by rpki-client