Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: gKJK7SlcIx+lPDmusIKOLwm70Ju8yIMXQTHfcZWANWk=
Subject key identifier: 02:49:81:CE:BE:D0:26:2B:C0:C4:94:3C:68:75:D6:D3:5F:6D:18:5B
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 01A13D13C590EA822E62E254ABACFE6AC4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0C0E
Signing time: Thu 15 Oct 2026 01:01:08 +0000
Manifest this update: Thu 15 Oct 2026 01:01:08 +0000
Manifest next update: Fri 16 Oct 2026 01:01:08 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: 1jvIuSvZi4gimPquYMfJhDmtC3tCwUqLToXaHJ4eBMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:c5:90:ea:82:2e:62:e2:54:ab:ac:fe:6a:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Oct 15 01:01:08 2026 GMT
Not After : Oct 16 01:01:08 2026 GMT
Subject: CN=024981cebed0262bc0c4943c6875d6d35f6d185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:9c:75:3b:2c:6f:00:d8:16:56:88:95:87:
df:ab:2b:b1:10:96:57:96:53:7d:1d:aa:ad:7f:39:
0d:b8:66:24:0a:66:77:f1:d7:ac:21:1d:81:13:ae:
91:b8:30:37:0b:bb:46:01:e6:3c:da:21:0c:94:29:
32:d6:0d:a2:35:04:61:07:28:ca:05:9a:c2:6d:9f:
81:48:1e:6b:d6:32:29:6f:07:22:e7:1f:8b:3d:1a:
d3:b7:9c:a6:cf:3c:2c:2b:66:7a:b2:c6:4c:11:30:
5b:0c:5c:66:92:c7:a3:9b:60:ca:1f:65:2a:96:49:
63:44:19:5f:7c:46:15:98:22:8d:0c:82:97:ec:cf:
76:25:5c:af:a8:4d:70:ad:00:8c:ee:75:98:3e:62:
83:d1:d4:2a:f1:f6:16:df:15:9a:38:38:5e:9a:12:
f3:d3:26:b8:7e:d9:11:21:f7:26:75:b7:32:42:71:
09:79:b0:e9:71:f6:3f:cb:06:d2:4c:0d:79:d0:75:
b7:6c:6c:17:60:23:b8:f1:b5:75:97:b5:98:2f:79:
29:20:61:06:93:cc:b3:22:dc:90:fc:4a:13:e0:3e:
72:69:6a:72:2d:8c:c5:7d:76:d5:1a:0f:75:4b:ff:
3b:b3:9b:69:5a:53:f7:c8:62:f7:8e:54:39:46:a6:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:81:CE:BE:D0:26:2B:C0:C4:94:3C:68:75:D6:D3:5F:6D:18:5B
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4b:ec:bd:f9:af:67:d1:b1:35:b5:2d:cf:16:a5:00:9b:6c:
a6:33:77:6a:53:6f:b2:bc:3a:28:02:15:0f:cb:9a:c8:51:58:
0f:2f:20:7b:1f:77:fd:15:7a:3a:8f:a4:98:9d:73:2c:f9:2a:
f3:a5:e9:41:68:52:42:ce:d3:72:f2:e6:99:38:2f:ee:5f:9f:
bb:30:01:4f:be:7f:b7:53:84:ef:54:d4:a2:9c:ec:85:c0:01:
d1:8a:95:a0:e9:75:9e:bb:f9:1f:b5:e1:20:8c:e4:2a:bc:57:
e5:4f:b5:51:72:81:4b:d5:cf:42:a7:60:b5:06:54:05:8a:93:
c7:4e:af:8a:2d:22:07:2b:c5:ed:a1:c3:71:fc:9c:e0:58:95:
bc:c3:c7:15:e7:7d:eb:87:f7:13:6d:fa:94:90:be:ef:20:b5:
ec:18:b5:ca:99:26:4c:37:3d:f2:17:1f:0a:eb:59:c9:aa:1f:
d3:c6:f2:e3:d0:cd:2e:7b:48:c2:1d:39:f7:bf:60:00:d0:a8:
7c:f8:15:94:01:b7:93:ca:db:a1:cd:41:66:d0:1b:63:a8:0c:
94:44:59:13:88:16:41:f0:45:10:f9:c3:f3:4a:0a:15:9c:52:
ea:4a:0d:0b:2d:88:4f:ca:6a:74:c4:cb:7e:c0:06:e2:e7:9a:
f0:25:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:49 2026 by rpki-client