Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: rNW6rTTkNP19v6sN8Ezp7fL90kNOfofAvn3NXjF1lGg=
Subject key identifier: F7:5B:DD:95:2B:6A:E8:10:C2:77:3C:FD:71:D4:0D:CD:3B:BA:DF:84
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019DCF3E5425E5B79F9E238FF66E04C4CCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0CD7
Signing time: Mon 27 Apr 2026 14:01:01 +0000
Manifest this update: Mon 27 Apr 2026 14:01:01 +0000
Manifest next update: Tue 28 Apr 2026 14:01:01 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: 6dTHJZf160tVKl1kqDetFrW4tJRhHUH27eqS1QJraeA=)
2: DfHWpmAWUgCCErY8uLt82E-U1FA.roa (hash: +Qi5uESsKdV2qG1rG182kIlHI1TpCDtCPoj/zgTI3/E=)
3: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
4: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:54:25:e5:b7:9f:9e:23:8f:f6:6e:04:c4:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Apr 27 14:01:01 2026 GMT
Not After : Apr 28 14:01:01 2026 GMT
Subject: CN=f75bdd952b6ae810c2773cfd71d40dcd3bbadf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:56:07:29:7d:48:bf:0b:2a:2a:36:1a:e4:
11:08:4a:3c:3a:31:4c:00:f5:8a:cf:bf:83:b8:4a:
ab:18:65:6c:79:fb:c9:38:3b:dc:68:ae:1c:ef:49:
34:c5:f4:af:09:68:33:05:c2:f3:e0:ec:54:8d:3a:
bb:eb:2d:0b:e6:9f:3b:25:2c:05:81:30:2c:d5:25:
c3:9b:38:79:b0:df:3e:c1:82:a3:60:dc:88:ce:47:
6c:6e:50:f1:db:83:37:70:c4:01:91:6a:44:7f:72:
be:3e:a7:08:59:8c:73:be:c8:f4:31:11:79:23:ad:
d0:8a:15:bf:49:e6:17:4c:63:85:94:1e:b9:5b:72:
61:b7:46:a2:81:1a:3d:3c:a3:62:20:3d:d0:33:3d:
e3:f3:93:b7:a3:62:66:3b:74:6d:3e:8a:64:99:7c:
69:c3:9b:15:88:c9:25:be:ac:5f:9b:ad:c4:48:00:
a3:b5:b4:18:37:f7:09:f8:97:72:72:67:ca:f2:33:
fe:20:8b:ec:c6:b9:03:26:5f:47:12:6d:3f:38:07:
db:10:8c:0e:cc:ec:85:14:68:1a:a6:f6:bb:1f:99:
fb:de:1a:4c:4b:44:78:36:bd:35:04:ff:4b:03:fa:
4e:a0:8a:7a:51:a4:86:a2:9e:d6:1a:90:6b:f7:9f:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:DD:95:2B:6A:E8:10:C2:77:3C:FD:71:D4:0D:CD:3B:BA:DF:84
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:81:20:da:d3:91:b6:83:8c:3d:59:86:23:aa:c7:88:2c:9e:
86:cd:a2:c7:16:2d:69:de:6a:2d:66:13:41:7a:82:64:9f:e5:
27:0c:95:c6:d6:17:0e:75:5b:34:d2:c3:34:9a:c4:38:d2:77:
89:de:b5:b3:25:08:ba:38:49:e1:c8:8e:97:09:4a:1a:17:96:
8a:f7:89:7e:07:4c:78:4a:27:4f:0c:41:53:5b:33:1c:4b:09:
78:15:15:79:95:7c:af:99:9b:9e:68:c4:e8:d9:10:8a:d3:6b:
5b:63:50:f5:8b:09:fd:8d:9b:5b:12:29:7f:83:66:09:a2:4d:
29:74:f3:87:bc:2f:5c:cd:c5:70:bc:d6:a9:05:7e:5a:01:e8:
f6:48:0d:f7:c8:0e:9d:4c:f9:5a:a7:24:2f:13:58:75:8b:95:
d5:63:10:31:08:a6:05:c2:9c:14:7b:ba:1d:8d:d2:8e:f5:41:
ef:a9:69:b6:8e:8a:2f:aa:ed:f3:55:f7:e2:9e:bc:02:ee:6d:
c6:e2:81:9c:93:4e:44:49:8c:96:3a:25:03:c5:ee:e2:c9:9b:
c8:c9:4b:fd:8a:7a:ef:c0:42:90:88:2c:ad:b1:ad:84:b4:f5:
59:54:f3:18:4d:73:98:58:86:2d:01:24:3b:7a:28:e4:85:3c:
8c:f7:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:08 2026 by rpki-client