Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: tOwKFCqxnpJZT3/b6T8v54GC0TTh6U2/hgjtEjyRxrQ=
Subject key identifier: 8E:A8:9C:D6:6D:EB:9C:13:00:34:7B:98:AE:DA:43:CB:33:81:87:6C
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019CE3DAA9130308283BFBFADA40E0BBA8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 044B
Signing time: Thu 12 Mar 2026 21:01:23 +0000
Manifest this update: Thu 12 Mar 2026 21:01:23 +0000
Manifest next update: Fri 13 Mar 2026 21:01:23 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: h7WYnXNBBG+t95hbDjKeaMWGmrw2cLinZSDM7Fr/MKQ=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:a9:13:03:08:28:3b:fb:fa:da:40:e0:bb:a8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Mar 12 21:01:23 2026 GMT
Not After : Mar 13 21:01:23 2026 GMT
Subject: CN=8ea89cd66deb9c1300347b98aeda43cb3381876c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:b1:30:30:b8:bf:78:81:b1:24:34:9b:ec:
e4:4a:6e:76:b1:c2:3b:44:bd:ff:e6:0b:03:54:0e:
a6:0a:74:63:51:9f:dc:2f:3f:ca:56:ea:7e:00:a9:
9b:57:2e:f0:6a:06:8d:ce:28:6e:77:f5:33:7c:09:
50:19:24:d2:ec:49:6e:b6:2e:19:17:4c:33:70:e6:
ad:9b:6d:c2:8b:9b:82:58:b7:12:b7:26:fa:a5:d5:
e6:67:2e:58:34:90:69:34:57:f1:a0:27:91:34:89:
43:51:99:ac:da:2a:07:a1:14:82:ab:d7:45:19:3d:
74:34:e5:9d:82:4b:e0:f4:bb:a4:9d:01:6f:9a:50:
ec:32:bf:8a:2a:f6:d6:36:20:98:da:d1:63:54:b3:
ab:be:fd:f6:05:d0:5b:d3:ac:d4:1a:54:ab:29:0d:
5c:e4:e1:47:bd:fb:37:84:21:ad:47:81:8d:b6:e5:
05:05:db:fa:d3:4e:00:67:43:dc:84:98:ee:57:6b:
c7:6e:fc:da:34:b0:15:19:b5:c4:fc:13:97:ac:e5:
4b:b0:82:2b:0c:ad:54:b1:0c:36:c9:f5:e0:15:e4:
df:e8:12:74:97:31:ea:cc:18:94:77:40:e4:92:85:
dd:9f:7d:3d:71:a9:63:6f:68:c5:38:f0:15:23:ee:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:9C:D6:6D:EB:9C:13:00:34:7B:98:AE:DA:43:CB:33:81:87:6C
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b7:f9:1a:29:a3:9c:ce:2e:0c:cf:7a:e1:c0:3f:db:82:85:
b6:08:ef:ed:22:10:f3:04:f7:1d:60:83:9b:45:db:7d:27:50:
31:ce:ee:b6:5c:1e:f2:95:aa:6f:d8:f4:68:74:f0:6e:1d:a9:
78:54:e0:e3:46:17:56:02:d4:8b:b0:e9:c0:8a:06:64:0f:af:
17:2f:7c:f9:1d:59:5b:ea:8f:87:8a:f5:79:bc:d6:9a:8e:35:
98:cf:4a:ff:74:38:a8:da:7f:29:6c:9f:6a:fb:2f:a1:ad:36:
7b:ea:e9:ed:cc:c2:e7:8e:18:39:38:d4:73:b9:0d:9c:13:63:
cb:79:ee:c5:7d:19:07:2c:6b:66:56:d8:e9:23:26:22:0d:60:
7f:0b:d0:38:e9:54:85:f5:fe:a4:68:3d:f4:3b:1b:67:14:1e:
93:be:b5:43:5d:3a:80:1e:80:ad:86:9d:e3:ec:aa:13:a5:00:
7f:30:cc:01:f1:78:15:7b:66:30:e3:4c:ac:e5:aa:64:26:76:
d9:43:97:41:b5:51:bc:5e:c7:89:bc:c8:8a:a2:48:00:78:21:
14:5f:4e:1c:fa:26:42:31:70:50:4b:c3:cf:a4:da:fb:bc:ee:
8e:41:6d:b2:e6:ce:29:1f:27:d6:ea:df:65:6f:41:11:19:bb:
dc:0f:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:45 2026 by rpki-client