Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: YmldzJ/kwu6X2KbBGomPDDk4nU8BkqHVj+QPu1amxNI=
Subject key identifier: 3A:85:FE:9C:79:A3:92:D2:99:74:3A:B6:2C:D0:2A:0C:16:B2:CE:66
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 019DA4C1C718AB8E6B4920CBB3A5735335AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 0D
Signing time: Sun 19 Apr 2026 08:00:55 +0000
Manifest this update: Sun 19 Apr 2026 08:00:55 +0000
Manifest next update: Mon 20 Apr 2026 08:00:55 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: OjvLG7cBxpD5KbpjLzDtkI+mSRopPA5N26nZvVIAadk=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:c7:18:ab:8e:6b:49:20:cb:b3:a5:73:53:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: Apr 19 08:00:55 2026 GMT
Not After : Apr 20 08:00:55 2026 GMT
Subject: CN=3a85fe9c79a392d299743ab62cd02a0c16b2ce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:b4:82:ff:ea:1e:5b:c2:5d:cd:88:ef:b2:
96:ac:b6:8b:2d:62:a0:f7:c3:b5:f3:c8:77:74:09:
83:8b:19:3a:eb:8d:14:93:31:a6:a5:7d:d3:cd:76:
89:84:c1:4c:f3:52:5a:17:f1:fb:2f:d8:8e:93:26:
5e:53:9e:fe:7d:dd:c4:91:9b:1b:b6:aa:6e:af:46:
cd:1c:13:d2:50:f7:80:31:71:73:40:ed:91:f5:f8:
75:ec:51:67:bf:57:a2:6d:87:1d:ba:cd:46:cb:8a:
e4:fc:d1:a8:3f:f7:52:0c:9a:47:e6:fd:43:77:ee:
27:61:b4:5a:f9:7a:50:83:c7:46:1b:4f:6e:63:8c:
78:6a:93:40:4a:7b:68:74:5a:70:22:f6:6e:df:08:
a7:7d:89:96:bc:f6:ea:f3:75:e9:48:fe:d5:e7:86:
c7:83:ec:68:5b:be:85:d7:52:72:b6:31:78:6c:e1:
ed:1a:dc:a7:02:7a:03:77:d5:b2:f7:91:15:df:76:
23:c0:d6:51:bd:3f:9b:3d:03:32:65:c2:2e:1d:73:
9e:0d:31:00:f5:df:59:71:41:14:3c:4b:ad:9c:44:
82:89:c3:76:1e:5a:96:f7:18:aa:4c:e4:04:a2:c9:
c4:ef:ae:7d:92:34:7c:74:75:21:c7:02:b2:88:d7:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:FE:9C:79:A3:92:D2:99:74:3A:B6:2C:D0:2A:0C:16:B2:CE:66
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c1:67:d3:5f:de:2f:ef:7a:b8:d2:dd:67:91:fc:0e:19:33:
c3:c8:78:bc:cd:e0:a3:e5:a4:e8:e6:9a:57:fd:20:d3:f1:44:
5b:40:6b:9d:a8:ff:32:a9:60:e6:5d:38:82:cf:e1:2b:30:77:
fb:b4:49:ae:0d:41:66:0d:f5:27:ee:29:ac:77:13:d7:70:b4:
e3:9c:77:10:c4:84:82:bb:21:1b:25:80:3a:3c:c9:27:46:a0:
45:7a:23:47:2a:79:0c:e4:10:41:50:2a:d3:48:e7:6c:65:bc:
c3:1f:db:ea:f6:88:f0:f6:48:9c:da:e2:d8:d0:70:d2:3d:98:
ca:d3:3a:75:76:0d:18:d4:16:60:7a:c4:cb:d2:36:90:b4:e0:
89:65:5a:4e:6a:a3:d3:d1:ec:41:29:90:79:e2:aa:39:59:48:
3d:1d:db:6c:15:60:a3:ac:94:c8:14:b8:55:96:7f:52:ee:6d:
00:e4:eb:af:37:e5:17:da:b9:bd:69:56:df:09:30:69:6d:94:
dc:58:e7:10:9e:d4:cf:a6:6d:d4:4b:9b:a1:60:06:14:5c:ca:
e6:3f:04:61:50:b5:a2:ed:b3:ee:56:a2:74:dd:c2:c8:9a:f5:
d0:ef:3a:2c:d0:83:19:5c:83:56:ed:f6:5d:ea:95:70:67:30:
a4:a0:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:24 2026 by rpki-client