Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: 1a4sUZ1bxfT43Xb1jCkWx7p+7mHmJCm9ybSgG++q9ZI=
Subject key identifier: 80:AE:0E:C0:FD:27:B3:8F:1A:DD:75:B0:49:AD:F7:02:9E:51:C7:12
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019D37C0FB2B2BB7BBE1843ACA9C40D36EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 09F9
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: gIadfGcISlUTc64WTRJOABYWy3zUleZ9y1Al6hrjzUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fb:2b:2b:b7:bb:e1:84:3a:ca:9c:40:d3:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=80ae0ec0fd27b38f1add75b049adf7029e51c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:64:7b:a5:71:5a:d9:3e:29:73:d5:0b:82:
2c:77:e5:68:35:e1:47:cf:d5:c9:3a:04:23:70:05:
72:8a:ea:c5:e5:01:5d:0d:eb:c1:7c:ee:49:73:db:
59:f2:18:f2:14:81:d0:4e:a3:e0:c7:ba:4f:15:a6:
ca:04:37:7a:b6:23:6f:02:5f:f6:0f:52:9b:45:11:
6e:db:1c:38:21:e1:92:a7:2f:16:d8:ec:69:20:44:
a7:0f:97:d9:ef:a6:75:d8:55:02:c8:6a:8a:21:14:
2d:fd:7f:aa:e3:ec:d9:d1:16:4d:cc:ce:f8:66:14:
6e:46:bb:68:e0:c9:30:0c:e7:1b:25:bf:38:a0:ba:
dd:af:6e:ee:99:69:0e:d8:3c:f8:4a:d7:b9:da:09:
49:73:dd:d6:5f:18:52:f3:06:63:0d:b1:c0:f4:b5:
e9:48:c3:31:11:f9:49:00:f3:a6:fc:08:24:ff:73:
70:49:54:1e:c7:e3:cd:9b:d1:f4:4b:6e:6a:15:42:
db:65:8a:42:a8:ad:df:9b:07:03:7e:81:da:98:f5:
0b:69:c0:57:88:08:1a:e6:b9:67:07:67:6b:d2:b1:
de:d4:de:0d:f7:32:70:0a:3d:ae:c5:6d:e6:94:d0:
dc:3e:9e:4e:bd:a7:9d:fb:60:69:fb:74:e4:4b:90:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:0E:C0:FD:27:B3:8F:1A:DD:75:B0:49:AD:F7:02:9E:51:C7:12
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:47:63:4f:12:5a:c7:7e:07:8e:67:ba:30:4d:6a:bd:8a:
74:42:56:df:d5:2b:6a:f6:fa:24:fe:9a:ff:89:fc:5c:31:13:
b5:75:1f:96:eb:9d:91:c1:87:56:35:21:a9:d1:9f:3e:46:a4:
18:03:0c:4d:e7:e8:40:91:0c:f0:85:d5:f1:8f:6d:d2:27:3b:
39:63:56:4d:58:ec:99:b4:56:d7:42:02:66:cd:d4:36:4f:35:
7f:c3:3a:33:0e:e1:df:52:03:89:e7:c4:8b:8a:09:1c:34:d9:
85:eb:37:59:8a:53:29:e7:1b:fa:79:39:31:36:ff:bc:5d:43:
31:a3:b0:76:e0:58:c1:b6:a4:da:46:5f:06:25:b0:89:68:2e:
9b:9c:b1:4e:17:1d:50:8d:e5:f8:5d:0e:3a:d6:1b:71:6e:25:
d7:b0:40:aa:38:31:99:2e:09:92:70:4f:f7:74:8f:53:78:c1:
22:4c:46:8c:28:45:c7:d7:d5:96:c4:47:13:69:6c:b9:00:a0:
fb:70:6b:55:d7:d9:2f:c8:4f:af:8e:f1:b6:d9:0c:4a:49:86:
1c:37:3e:22:dd:1c:e8:bd:ac:e1:da:c3:9a:0e:fd:9a:87:73:
f5:08:76:c7:52:fc:4e:ac:66:9d:5d:43:69:21:b5:95:27:4f:
fe:e6:ee:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPsrK7e74YQ6ypxA027IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1
NmZkYTYwHhcNMjYwMzI5MDQwMTI3WhcNMjYwMzMwMDQwMTI3WjAzMTEwLwYDVQQD
Eyg4MGFlMGVjMGZkMjdiMzhmMWFkZDc1YjA0OWFkZjcwMjllNTFjNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCRke6VxWtk+KXPVC4Isd+VoNeFH
z9XJOgQjcAVyiurF5QFdDevBfO5Jc9tZ8hjyFIHQTqPgx7pPFabKBDd6tiNvAl/2
D1KbRRFu2xw4IeGSpy8W2OxpIESnD5fZ76Z12FUCyGqKIRQt/X+q4+zZ0RZNzM74
ZhRuRrto4MkwDOcbJb84oLrdr27umWkO2Dz4Ste52glJc93WXxhS8wZjDbHA9LXp
SMMxEflJAPOm/Agk/3NwSVQex+PNm9H0S25qFULbZYpCqK3fmwcDfoHamPULacBX
iAga5rlnB2dr0rHe1N4N9zJwCj2uxW3mlNDcPp5Ovaed+2Bp+3TkS5CpswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICuDsD9J7OPGt11sEmt9wKeUccSMB8GA1UdIwQY
MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt
ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh
LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAhHY08S
Wsd+B45nujBNar2KdEJW39Uravb6JP6a/4n8XDETtXUfluudkcGHVjUhqdGfPkak
GAMMTefoQJEM8IXV8Y9t0ic7OWNWTVjsmbRW10ICZs3UNk81f8M6Mw7h31IDiefE
i4oJHDTZhes3WYpTKecb+nk5MTb/vF1DMaOwduBYwbak2kZfBiWwiWgum5yxThcd
UI3l+F0OOtYbcW4l17BAqjgxmS4JknBP93SPU3jBIkxGjChFx9fVlsRHE2lsuQCg
+3BrVdfZL8hPr47xttkMSkmGHDc+It0c6L2s4drDmg79modz9Qh2x1L8TqxmnV1D
aSG1lSdP/ubuiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client