Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: /XsyRS00q/1Cnnr9Dy4XvZzZ4jEBYZI1Pjnv6GhWS5U=
Subject key identifier: 02:D4:CE:A1:72:F3:A1:39:B3:F5:19:CA:00:F2:8F:8D:8E:56:C1:56
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019CE636DE587BFE7EA56B6EFD5E15ECDFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0C45
Signing time: Fri 13 Mar 2026 08:01:21 +0000
Manifest this update: Fri 13 Mar 2026 08:01:21 +0000
Manifest next update: Sat 14 Mar 2026 08:01:21 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: NwqwipPFd6URs601IC0VAhVOTu2ACQPBtGVZEkhy4E4=)
2: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
3: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:de:58:7b:fe:7e:a5:6b:6e:fd:5e:15:ec:df:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Mar 13 08:01:21 2026 GMT
Not After : Mar 14 08:01:21 2026 GMT
Subject: CN=02d4cea172f3a139b3f519ca00f28f8d8e56c156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:3a:f4:e0:a8:2a:4b:8f:36:b0:5f:d6:25:
dc:5c:d3:20:40:cd:bb:65:b2:74:6c:cf:f1:fb:d6:
af:3f:35:06:a9:32:73:db:59:af:8e:bb:3b:5a:c4:
ca:6b:50:42:22:78:ea:6c:cb:e7:e7:73:42:e5:64:
ac:13:d4:7f:a8:9e:27:d2:8e:40:98:89:1d:fe:95:
b6:db:1c:b6:1b:11:78:24:0e:8f:ff:26:b5:9c:cd:
b7:34:1e:84:49:1b:ff:ec:52:23:dc:31:0d:c4:5b:
50:ef:d2:3f:ae:e0:a5:36:35:a0:1e:63:73:62:e8:
b9:0a:0e:99:1d:79:a2:cb:04:7e:c1:d4:40:24:a1:
2c:5e:37:9d:cd:68:b5:82:37:e2:7a:8c:61:d5:b9:
7d:59:9d:eb:58:16:46:da:5d:5b:f7:42:01:89:b2:
94:6c:90:d8:95:cd:53:2d:aa:77:f1:22:50:5f:ef:
15:e7:7f:60:39:f5:8c:eb:15:23:85:84:61:f5:01:
9d:20:e7:02:1f:37:c2:dd:10:71:a3:e8:f7:d8:9a:
e7:af:7a:0a:53:9b:7b:76:2a:5e:8c:f2:7d:cc:ea:
e7:d8:b9:81:9c:56:0d:71:81:c3:b1:f4:83:16:a1:
32:98:e2:94:a8:d1:f0:12:de:72:7f:ae:57:20:30:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:CE:A1:72:F3:A1:39:B3:F5:19:CA:00:F2:8F:8D:8E:56:C1:56
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7d:47:12:9c:71:5f:d0:64:4f:e2:31:7b:21:1d:c4:c6:b0:
19:4d:b7:b2:a2:cd:1f:f4:8b:d7:3f:45:e7:39:5c:8d:e4:54:
ef:b0:d8:78:c0:f2:81:78:f2:83:e7:c3:fb:57:5d:a3:bb:d7:
16:ce:ac:5f:b2:a4:2d:3a:2d:bd:cd:8f:8c:b0:c1:ec:8b:ed:
74:e1:60:cd:37:d1:18:14:93:e1:92:36:9b:20:ba:b2:f9:c9:
f7:6f:0c:d6:ef:a4:95:b4:a3:05:ce:64:56:0b:3c:63:79:10:
25:9d:d5:52:16:dd:32:b1:a6:67:b9:cf:7a:ac:9f:30:04:e1:
f9:4c:55:09:45:cb:c9:fe:78:f4:82:26:f1:25:6e:3e:c3:a1:
8a:08:71:96:a8:87:d2:b3:8d:d5:ee:d2:c4:1e:64:24:e3:d0:
ef:52:9e:73:3e:c1:44:be:76:9d:f3:30:d5:2d:67:2d:a3:bb:
34:c3:06:d7:81:58:02:87:e4:dd:b6:55:d8:e9:c0:05:eb:10:
58:59:71:da:fe:48:b2:bb:7d:fb:68:7e:71:79:38:ce:52:d7:
ff:cc:a9:3e:5c:39:c0:c2:d7:43:f0:d1:5e:6c:69:dd:5f:9e:
07:3b:b2:f0:0b:a2:57:a7:31:74:cd:dd:ac:9d:d8:39:64:b3:
b7:b5:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:45 2026 by rpki-client