Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: bzEWOuwpvrR5hENmu2kiojMdrsWg/jA5z5nABuWXB3Y=
Subject key identifier: BF:0B:5B:F2:7C:F1:AB:D2:73:2E:5D:5C:DF:A5:B8:A5:43:27:70:0C
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019D9B50752633A0070F394DCF5B74536B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 04AA
Signing time: Fri 17 Apr 2026 12:00:34 +0000
Manifest this update: Fri 17 Apr 2026 12:00:34 +0000
Manifest next update: Sat 18 Apr 2026 12:00:34 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: E+PXnK3olzHeybLYGoJQJH0aLN12Zy1oltEZee51JC4=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:75:26:33:a0:07:0f:39:4d:cf:5b:74:53:6b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Apr 17 12:00:34 2026 GMT
Not After : Apr 18 12:00:34 2026 GMT
Subject: CN=bf0b5bf27cf1abd2732e5d5cdfa5b8a54327700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:03:4c:e6:60:04:a8:2f:6e:0b:d8:bf:90:
f6:fe:64:14:a9:89:82:4a:bc:39:c2:84:f7:9a:82:
15:53:b2:5c:3e:20:49:0b:74:33:1b:6c:04:7f:8e:
57:a1:f7:e8:95:f8:3a:96:61:6c:96:98:4e:fa:c8:
e4:70:e2:a0:2e:1d:06:64:8c:3b:84:21:5c:15:2f:
6c:9c:69:79:44:35:b8:bc:f3:6f:4e:3d:7e:4b:ac:
6d:47:b2:1a:0d:fe:99:47:d9:fe:6d:d2:85:9e:cb:
8d:ea:bc:82:7d:d1:3c:e8:67:fa:ba:7b:b9:ad:22:
c7:b3:3c:7f:f8:15:64:2b:41:62:41:1b:a4:2e:a6:
05:c4:e5:b9:1f:79:82:7e:bd:2b:ed:fd:2f:3e:d0:
e7:91:72:6a:eb:27:14:a2:80:ee:2d:31:f5:d0:ed:
55:00:ec:33:c5:ae:17:29:86:18:d2:5d:f8:32:28:
3a:7f:6e:f3:ae:70:52:ae:8b:ad:cf:a0:a6:ac:d5:
1b:4f:a3:51:a6:55:e0:8d:3f:96:7d:c6:98:ae:3f:
f0:e2:3b:e0:6b:85:fc:f7:42:17:54:bf:6e:0f:4c:
b4:fb:a7:8c:fa:bf:cc:b9:3c:96:82:2b:37:83:f9:
91:aa:c3:5b:6f:1c:15:87:77:9c:2d:41:bd:99:cd:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:5B:F2:7C:F1:AB:D2:73:2E:5D:5C:DF:A5:B8:A5:43:27:70:0C
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:91:4a:e6:78:d2:fc:c2:9a:97:7b:d4:27:f7:48:1a:2c:44:
64:01:ed:33:28:ae:7c:e3:dc:2e:af:75:9e:50:70:a8:fe:8d:
95:ad:58:88:3c:51:58:72:63:4b:2a:8c:08:f6:e4:73:7c:3e:
f5:70:3d:d0:3e:8e:53:d9:29:a8:3b:63:48:c5:6d:77:f9:42:
31:01:96:85:ed:4b:6f:10:cb:a7:64:82:e6:41:54:02:0b:5c:
60:98:0d:37:c8:39:d7:a2:a0:b3:22:84:1b:8a:2b:86:07:e6:
9f:24:f6:30:f6:27:f3:d0:42:16:72:9b:27:1f:e6:21:4f:97:
cc:4a:85:c5:e8:e9:3b:82:1f:c7:ca:c8:12:0f:50:9b:9a:71:
b5:16:72:cf:83:d2:48:ec:f1:f2:7c:04:ea:a6:81:90:46:79:
23:d9:3e:7d:02:54:ff:c8:f3:86:28:79:02:7e:0c:9d:70:2d:
95:9e:a2:d7:78:5a:c6:27:65:a3:01:1f:99:86:ec:44:e1:81:
77:cf:ee:56:35:e5:79:3f:fd:6c:1b:87:cf:4f:e8:b8:67:c1:
27:c3:0f:ae:ac:99:d9:74:a7:46:a6:84:02:93:8a:78:c1:95:
65:d1:ac:d5:ae:1b:7c:64:9d:8b:4c:b7:51:eb:68:bf:32:d9:
01:62:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:42 2026 by rpki-client