Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.mft
File: 27dTHUg0yzte7BCBkXelqa8VQeM.mft (raw, json)
Hash identifier: sVxinNWyUmsIJjY0mnEJg9ORKVDbsZmSJlWA7deSytM=
Subject key identifier: 66:BE:D5:40:9C:6C:4A:B8:88:6D:8F:F8:F4:E5:D3:90:E9:D5:92:E8
Authority key identifier: DB:B7:53:1D:48:34:CB:3B:5E:EC:10:81:91:77:A5:A9:AF:15:41:E3
Certificate issuer: /CN=dbb7531d4834cb3b5eec10819177a5a9af1541e3
Certificate serial: 01A134EC95E74BF0FA62E22C04DD4F1CE8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27dTHUg0yzte7BCBkXelqa8VQeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.mft
Manifest number: 0D
Signing time: Tue 13 Oct 2026 11:01:22 +0000
Manifest this update: Tue 13 Oct 2026 11:01:22 +0000
Manifest next update: Wed 14 Oct 2026 11:01:22 +0000
Files and hashes: 1: 27dTHUg0yzte7BCBkXelqa8VQeM.crl (hash: SrnDQnrzLYfFfandL6MtbPJBEaBIljRvS04dSkxFMzE=)
2: EyUToF8sjE97pTp9WiGCqzekrUE.roa (hash: tHIqv4CfBKp0ie/EQOB+vocnFYtIMYOnZZ/t0QlwneM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/27dTHUg0yzte7BCBkXelqa8VQeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:95:e7:4b:f0:fa:62:e2:2c:04:dd:4f:1c:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb7531d4834cb3b5eec10819177a5a9af1541e3
Validity
Not Before: Oct 13 11:01:22 2026 GMT
Not After : Oct 14 11:01:22 2026 GMT
Subject: CN=66bed5409c6c4ab8886d8ff8f4e5d390e9d592e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:7a:01:e3:91:81:8d:b8:a0:9b:e1:46:32:
f2:97:01:e2:94:7a:99:86:61:69:8d:98:0c:8f:59:
b5:02:bf:e8:14:e6:3f:25:6b:5d:86:f4:47:5c:9a:
de:28:aa:99:d5:60:9d:87:af:27:b8:88:7a:7d:7c:
bc:42:fb:02:92:f9:db:91:f8:e3:07:0a:9b:27:29:
91:c3:f7:be:76:8f:83:72:09:40:59:07:dc:e4:6c:
98:36:c3:fa:9f:bf:f4:28:20:78:95:13:31:a5:9c:
74:4d:8f:b2:23:e6:19:08:4c:ca:07:c3:f2:fe:17:
0d:2d:9f:ce:f0:68:f0:11:40:a9:62:a5:6f:91:42:
5a:24:cc:59:ef:3d:4e:15:27:cb:c8:a4:f6:dd:ac:
ab:18:ce:8d:c8:7d:81:e9:e0:a4:0f:c0:fc:b8:77:
67:b2:b0:e2:d9:83:d2:38:74:de:17:d1:19:25:8b:
43:c2:ee:b9:1a:e6:4e:82:e7:f1:a6:71:97:df:87:
9e:15:38:ee:30:4c:f5:7d:cf:1c:14:32:52:24:6f:
33:1d:0e:ec:78:42:86:4a:f1:13:73:81:51:39:a3:
21:66:22:97:9b:be:4c:72:b9:85:f6:70:cc:8d:6f:
ee:72:72:c7:ad:c4:72:f7:8b:d3:e3:4a:83:12:8e:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:D5:40:9C:6C:4A:B8:88:6D:8F:F8:F4:E5:D3:90:E9:D5:92:E8
X509v3 Authority Key Identifier:
keyid:DB:B7:53:1D:48:34:CB:3B:5E:EC:10:81:91:77:A5:A9:AF:15:41:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27dTHUg0yzte7BCBkXelqa8VQeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:f5:39:06:6b:33:b7:fb:af:3b:5d:b9:41:82:de:02:23:
b9:2a:7a:d8:f1:aa:47:ae:c3:86:b7:08:6d:e2:ba:a9:26:9a:
b6:b9:0a:71:aa:8d:fa:4e:2d:e9:72:cc:ac:5a:23:af:dc:b3:
61:5a:1e:8a:09:46:3f:35:56:0c:8f:73:82:4f:b0:c1:89:d4:
67:3b:5b:24:9e:b6:38:82:ec:89:95:07:5e:03:be:a4:20:5a:
5a:57:d1:61:50:ba:09:77:3c:30:a7:e8:84:df:33:af:ab:dd:
e4:a7:1f:dd:02:03:22:ce:e3:34:a4:cb:a1:b9:b5:fa:34:59:
36:08:17:e3:ff:b5:fe:88:06:1a:4d:37:38:72:82:1f:39:37:
7e:78:77:f1:1f:86:73:74:40:b2:70:90:71:97:03:b4:18:c5:
e6:dc:b4:8c:72:d4:8b:44:51:aa:0b:0a:57:41:96:44:d1:4e:
bd:1c:01:1d:33:0d:a1:2a:c2:67:08:78:c3:15:be:18:bf:15:
7b:bb:a1:d9:a9:75:ff:29:93:82:1b:fb:56:4e:fc:d4:77:c0:
3c:9a:1e:b5:e9:a2:ff:92:19:1b:7f:c9:3b:61:a5:b5:94:c1:
a1:95:3b:b1:b9:d4:67:23:ed:e9:91:ba:72:de:77:1a:97:c8:
a8:b3:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:55:31 2026 by rpki-client