Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: Sd/3DcHUhR2FhAGu/cqLSKmdhT+sIHS9xphGg27L43Q=
Subject key identifier: CA:6D:98:4E:A1:82:85:31:B3:03:9D:FD:8B:77:5C:02:1D:81:7D:88
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 019CAAFD961D45464B1E2680633EBACB536B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 12CB
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: XTvGOX1Nvzq2655zlJGZ682svpyYvTlmi8EhabUXTQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:96:1d:45:46:4b:1e:26:80:63:3e:ba:cb:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=ca6d984ea1828531b3039dfd8b775c021d817d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:7d:f1:5b:b5:38:72:2c:33:48:9a:a6:13:
06:23:67:ad:63:c3:e3:c2:ea:d6:82:87:f4:07:0a:
17:f0:4d:65:69:ec:74:ab:a0:0d:1e:0e:7d:36:a4:
73:a9:52:69:23:79:51:0a:c5:ad:f1:45:51:42:7a:
1b:a4:bc:fa:40:4d:e1:1c:97:a5:10:d9:65:35:0a:
d0:0a:71:74:ae:a8:f8:1f:ab:53:07:05:68:61:2e:
64:a2:85:55:b8:48:41:ac:79:cd:c8:f4:6b:93:61:
6d:c6:67:7b:99:13:60:f6:00:aa:31:71:94:28:f1:
83:54:ad:88:70:5d:f6:18:63:6a:c8:c3:7c:9a:7a:
62:15:e7:f7:15:a0:7b:73:0c:e4:ed:47:d5:f0:35:
32:a1:67:59:cf:0c:00:f6:05:44:15:08:22:66:1c:
3c:ce:1f:3d:7b:e8:15:17:a6:de:7c:7a:78:e0:7b:
18:61:9a:1c:e0:36:27:c6:34:1a:45:23:44:4a:1d:
11:aa:3d:e6:d8:24:af:b1:59:6b:7c:2b:46:75:ab:
22:56:6a:62:a6:4f:34:dc:1e:d9:d7:26:6c:c9:c1:
0c:33:b5:39:c5:12:33:55:78:b4:6d:60:f1:46:a5:
07:9a:e1:eb:60:17:a9:48:97:16:16:92:a8:80:60:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:98:4E:A1:82:85:31:B3:03:9D:FD:8B:77:5C:02:1D:81:7D:88
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:96:1a:cc:07:91:2a:9f:69:46:cb:8a:cd:4d:ae:0e:a6:11:
7e:d8:5e:a4:9c:26:99:df:ec:19:b9:74:1f:1d:3f:65:54:4b:
bc:66:d5:54:39:33:0f:55:b6:7b:3f:9f:cc:d2:00:cd:fe:30:
e1:42:c0:9d:ae:14:9a:ee:68:36:18:8a:50:c7:ef:4f:3f:95:
49:5b:25:8c:33:b1:11:5d:0f:84:10:88:34:a0:e9:eb:ac:2c:
64:6b:e1:64:57:c6:a7:cc:e6:e9:31:99:86:cd:8b:a7:bb:ff:
a4:f9:18:7b:85:c0:a0:4a:a0:83:16:67:92:2f:c3:f9:b1:d7:
ce:f9:14:63:f4:12:5a:34:6d:cc:82:24:e3:c5:c2:09:44:e8:
62:02:41:d8:33:be:c7:af:8c:9e:7f:eb:ad:e6:74:f7:01:f8:
30:2f:6c:10:25:c6:cb:f7:d0:e4:0e:aa:de:ff:8c:64:fb:5b:
dc:32:60:35:ac:a5:b5:5c:a3:80:7d:8b:e1:7e:69:f0:6b:57:
cb:2b:44:9e:5b:2a:6c:c8:98:bf:30:13:30:be:b2:fe:73:3d:
ee:03:a9:c2:05:69:5e:00:92:4b:90:72:f9:89:a3:e9:ae:52:
55:cb:5b:d6:18:88:ad:6b:ae:f2:b9:07:db:06:2f:25:23:3c:
a4:d8:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:19 2026 by rpki-client