Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
File: v27iTmpzNB7J5d_AQr71vFnah8c.mft (raw, json)
Hash identifier: Sj2ROcEiX+Q6N7mgU4j1cp9maf48EGkVBny0BycVZts=
Subject key identifier: 5C:D0:0B:37:71:7F:C0:C2:B0:23:9F:83:20:60:FF:00:6B:7C:63:E8
Authority key identifier: BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
Certificate issuer: /CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Certificate serial: 019D3752E6527B8FD9E476D00C7531DC76A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
Manifest number: 0D
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: aRyykpGyV8l037pwYFABQHmZBQo.roa (hash: Nh6oT8lybS2Q4BHuKgllOdaD6W0W7agU3wHBADfldjo=)
2: v27iTmpzNB7J5d_AQr71vFnah8c.crl (hash: 1plftN1PlFpDgHTqfW6ZIWyL9/FGByTGk6dPERm35BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e6:52:7b:8f:d9:e4:76:d0:0c:75:31:dc:76:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=5cd00b37717fc0c2b0239f832060ff006b7c63e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:9d:79:4a:20:ff:5d:dd:c7:0e:b8:b3:84:
31:ea:f5:76:61:8b:8c:8b:09:ad:e1:67:ba:57:89:
42:3b:d1:58:3b:b1:3f:1f:f4:ce:77:d6:08:bc:97:
ce:3a:bb:6d:4a:82:1a:17:0e:54:70:27:22:64:43:
89:9b:ad:03:57:7a:50:66:e5:9c:c6:bd:80:9f:9f:
c8:70:be:b4:cf:73:90:8d:d9:7e:b8:da:e6:8b:67:
8f:ec:0d:b0:4d:be:5d:10:ae:8a:c5:5c:fa:ff:b4:
47:bf:8c:93:ee:55:e3:70:54:37:1f:b0:1d:79:8e:
4c:23:d5:85:ae:cf:53:19:d2:98:ab:f1:1e:4d:7d:
21:3a:43:2b:53:7c:58:65:37:a8:a7:46:01:68:8e:
3c:d4:ea:35:3f:96:8b:9c:13:ae:ba:84:8e:e2:6e:
2b:30:b9:14:b0:94:88:f3:42:47:1a:bd:ad:ad:ff:
a1:d2:92:45:1a:89:08:8b:16:9d:06:a5:11:a1:d0:
6f:a7:86:2b:bc:b0:6d:c9:43:d0:d8:3e:25:83:0b:
76:3e:47:46:21:4e:56:06:53:d1:b1:b1:35:47:9a:
47:62:6e:d1:94:30:f3:db:f8:ea:24:79:b7:37:6b:
ef:f4:72:db:e4:91:a1:4a:8f:9e:9a:ea:bd:86:f3:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D0:0B:37:71:7F:C0:C2:B0:23:9F:83:20:60:FF:00:6B:7C:63:E8
X509v3 Authority Key Identifier:
keyid:BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f5:7f:db:a2:fc:46:59:a6:fb:5a:aa:2e:b7:5b:34:66:e4:
e6:c4:84:60:7d:e6:81:26:48:5d:84:35:32:4d:0f:9d:76:e9:
5a:1d:a2:c4:b4:55:3d:c5:36:c0:bc:97:4b:57:c1:2b:8a:f6:
8e:a8:da:d9:d4:8e:68:b4:5c:d0:cc:15:5a:a9:dc:44:a4:d6:
f9:67:d3:56:6b:f5:ba:45:28:e9:7d:f7:f8:10:c2:15:92:c0:
93:37:96:43:8b:a8:0c:6e:ac:6b:4f:1f:f3:e7:ec:09:8c:0d:
d9:35:69:16:b5:9c:3d:af:a4:bb:b4:80:0e:4c:85:01:ff:a2:
f9:5e:a3:c3:c6:98:98:20:57:14:ef:3d:40:a1:39:40:7b:bf:
93:bc:bc:da:27:78:c5:33:56:4b:ec:ed:64:b6:15:12:a7:20:
8e:ea:e9:2f:30:f0:2b:f4:4d:d4:0b:df:cf:f0:42:ed:a1:02:
dc:8c:16:8f:67:5d:33:b0:d7:71:63:7b:fd:f2:85:9a:33:34:
be:c4:a3:89:9d:35:76:f3:a4:72:82:8f:2b:5d:8e:88:b7:7e:
52:7f:bf:e8:fa:d1:be:e7:38:5a:2f:3b:9c:94:31:82:d4:7f:
ff:30:e6:d3:4f:6d:60:d5:cf:1d:54:d1:1d:77:cf:ff:f9:05:
45:08:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:50 2026 by rpki-client