Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
File: 27NREBqukeOy_Psl_rA2WbqF7KE.mft (raw, json)
Hash identifier: +I7m2g7li/SxMSmFfXN1Dn2aY3Ja23xKJeViLYa6zlI=
Subject key identifier: 33:66:49:E2:21:57:3F:78:C6:A7:C5:A0:51:D5:D3:47:A6:05:47:C8
Authority key identifier: DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
Certificate issuer: /CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Certificate serial: 01A0C067E038D26A40617A54A00B86EBE965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
Manifest number: 01A9
Signing time: Sun 20 Sep 2026 20:00:28 +0000
Manifest this update: Sun 20 Sep 2026 20:00:28 +0000
Manifest next update: Mon 21 Sep 2026 20:00:28 +0000
Files and hashes: 1: 27NREBqukeOy_Psl_rA2WbqF7KE.crl (hash: 3Hhncv8JCketaPrn7lSLXO6bquRvz06I42ejsl4YyZg=)
2: 3LZwc8OKM3EnPozR_o9vjKEwYl4.roa (hash: KE0t0Nmmyf8uv4xhoLCIW4XKb2yD36BrFw5OXJwqiWU=)
3: yjs4tO8Gsh8Yzk2SuHwAiBlMYWw.asa (hash: IxDVVn0HnmYs8bWuZ1m2rrVGiC3dJ5CFGGaXiiroEYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:e0:38:d2:6a:40:61:7a:54:a0:0b:86:eb:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb351101aae91e3b2fcfb25feb03659ba85eca1
Validity
Not Before: Sep 20 20:00:28 2026 GMT
Not After : Sep 21 20:00:28 2026 GMT
Subject: CN=336649e221573f78c6a7c5a051d5d347a60547c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:61:f4:ed:3d:7e:4f:f1:e1:ad:97:f7:f6:
e1:2c:5e:ba:9d:5d:0a:06:07:8e:88:75:71:21:93:
53:5c:88:32:e0:22:95:b9:e4:76:9c:dd:e4:30:16:
15:01:58:5f:4a:44:ec:ca:13:ba:1d:8e:84:7d:45:
0f:0b:56:f8:3c:f4:48:7e:97:37:a9:7d:e1:bc:5c:
a1:79:c5:56:c6:78:41:ee:47:e4:be:ec:92:15:6a:
ef:6a:de:55:5a:35:d7:9c:88:2d:33:90:53:25:f8:
86:df:56:0f:0e:b4:b2:c6:a2:01:9f:a7:1b:04:41:
d9:4d:a6:0c:bc:57:d2:ff:a8:48:05:a9:fa:17:29:
7e:d9:fb:e6:ee:4b:35:0f:2c:03:34:53:90:57:d8:
40:a4:dc:03:c8:2b:59:2f:71:dc:14:fe:40:76:19:
86:ed:bc:7a:ad:6f:58:ff:74:e4:0d:07:26:9e:c1:
3e:8a:9b:11:0e:71:c2:3b:fd:bf:05:72:15:3f:6c:
d1:f0:f2:6c:2e:6f:22:7e:81:e1:8b:0d:70:de:1f:
fd:84:21:58:c5:94:5e:62:0b:17:88:6f:07:ea:23:
fa:37:b3:1a:95:d7:87:76:08:2e:6e:38:00:77:1f:
f7:02:93:49:12:e2:4e:5b:f5:78:dd:9b:82:7b:25:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:49:E2:21:57:3F:78:C6:A7:C5:A0:51:D5:D3:47:A6:05:47:C8
X509v3 Authority Key Identifier:
keyid:DB:B3:51:10:1A:AE:91:E3:B2:FC:FB:25:FE:B0:36:59:BA:85:EC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27NREBqukeOy_Psl_rA2WbqF7KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c7acee-7749-4e36-a406-ea5bb4a5bb39/1/27NREBqukeOy_Psl_rA2WbqF7KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:6e:c1:4c:06:80:0d:71:35:f2:eb:37:69:86:0a:4e:78:
3e:11:06:c3:cf:3b:9b:15:f2:2f:69:96:41:d1:29:b0:14:35:
ae:13:a0:ba:a9:e9:ff:29:60:8c:b1:7a:12:94:b4:bf:e0:6d:
c6:73:53:4b:bc:a1:43:7c:9a:fc:b7:c7:07:fe:84:0e:e4:00:
f4:b0:97:13:36:88:4f:02:bd:ba:23:94:e5:f9:24:37:54:80:
a6:9e:fd:1b:3e:14:ba:d8:b0:d5:db:a6:90:7e:4e:f7:42:8f:
78:98:31:fa:66:bf:9c:51:27:ca:75:06:fc:a4:ed:04:ac:3a:
60:2b:d3:0d:d0:33:4a:b8:99:5c:84:c7:40:25:79:b6:73:d2:
74:4e:b9:01:fd:3a:d6:8e:ea:57:70:7c:bf:f5:c4:00:bc:c4:
6b:ba:25:45:eb:ea:17:e3:6b:3c:83:f8:f3:c8:39:e6:4c:2f:
df:82:7b:6e:fd:19:db:c9:ae:b0:e5:40:47:1f:4e:6f:1d:df:
2b:80:e3:cc:cc:f1:19:d5:c5:0b:2c:63:93:dc:82:d6:ed:97:
15:dc:1a:04:51:a3:18:11:23:7e:b3:e8:13:f2:bb:bc:1a:f7:
44:34:6c:fc:3b:40:9f:62:c3:c0:d2:d8:dd:c2:df:42:b8:86:
ee:a3:82:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAZ+A40mpAYXpUoAuG6+llMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM1MTEwMWFhZTkxZTNiMmZjZmIyNWZlYjAzNjU5YmE4
NWVjYTEwHhcNMjYwOTIwMjAwMDI4WhcNMjYwOTIxMjAwMDI4WjAzMTEwLwYDVQQD
EygzMzY2NDllMjIxNTczZjc4YzZhN2M1YTA1MWQ1ZDM0N2E2MDU0N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WBh9O09fk/x4a2X9/bhLF66nV0K
BgeOiHVxIZNTXIgy4CKVueR2nN3kMBYVAVhfSkTsyhO6HY6EfUUPC1b4PPRIfpc3
qX3hvFyhecVWxnhB7kfkvuySFWrvat5VWjXXnIgtM5BTJfiG31YPDrSyxqIBn6cb
BEHZTaYMvFfS/6hIBan6Fyl+2fvm7ks1DywDNFOQV9hApNwDyCtZL3HcFP5AdhmG
7bx6rW9Y/3TkDQcmnsE+ipsRDnHCO/2/BXIVP2zR8PJsLm8ifoHhiw1w3h/9hCFY
xZReYgsXiG8H6iP6N7MaldeHdggubjgAdx/3ApNJEuJOW/V43ZuCeyU/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNmSeIhVz94xqfFoFHV00emBUfIMB8GA1UdIwQY
MBaAFNuzURAarpHjsvz7Jf6wNlm6heyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYt
ZWE1YmI0YTViYjM5LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jN2FjZWUtNzc0OS00ZTM2LWE0MDYtZWE1YmI0YTViYjM5
LzEvMjdOUkVCcXVrZU95X1BzbF9yQTJXYnFGN0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG5uwUwG
gA1xNfLrN2mGCk54PhEGw887mxXyL2mWQdEpsBQ1rhOguqnp/ylgjLF6EpS0v+Bt
xnNTS7yhQ3ya/LfHB/6EDuQA9LCXEzaITwK9uiOU5fkkN1SApp79Gz4Uutiw1dum
kH5O90KPeJgx+ma/nFEnynUG/KTtBKw6YCvTDdAzSriZXITHQCV5tnPSdE65Af06
1o7qV3B8v/XEALzEa7olRevqF+NrPIP488g55kwv34J7bv0Z28musOVARx9Obx3f
K4DjzMzxGdXFCyxjk9yC1u2XFdwaBFGjGBEjfrPoE/K7vBr3RDRs/DtAn2LDwNLY
3cLfQriG7qOCgA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:54:45 2026 by rpki-client