Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: C3AQUmKe+3FUObgB4LScyB/ymbPk1cH03fMsEj+DNwU=
Subject key identifier: 21:3C:59:06:20:DC:51:96:D5:54:A4:A6:3C:84:97:BA:CE:30:A6:72
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019CABD988016A530DFB699377F0EC98F40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 042E
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: 0JVbPJy02NnJtX0Cq0ZSLuMa1VTn4j790LIDBl1RKPU=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:88:01:6a:53:0d:fb:69:93:77:f0:ec:98:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=213c590620dc5196d554a4a63c8497bace30a672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:58:5c:c2:ec:af:bb:32:c5:d7:31:bb:71:
e0:e3:f5:e0:c7:21:12:51:92:34:f7:5c:75:55:7b:
a1:73:df:5e:d3:16:8a:26:f2:25:ed:94:f4:c2:f2:
3c:40:1f:fb:48:2e:f4:30:81:33:33:c5:a3:df:db:
a0:d9:cd:64:58:ca:a7:65:21:6c:47:29:84:ec:68:
28:91:af:a2:e5:3f:dd:64:d4:21:a5:10:b6:4f:88:
ad:a0:08:6e:59:bb:fa:65:72:80:c0:68:f3:29:67:
15:db:50:38:4b:91:de:5d:b4:2a:76:ff:9c:6c:7c:
bd:b5:a7:92:32:21:9c:df:a1:5d:00:7d:04:07:e4:
9d:d7:f4:59:77:7d:13:95:b0:9e:59:59:7a:68:b6:
db:27:80:0e:f4:fb:34:93:97:22:90:ec:89:cc:9b:
83:5b:cb:a1:a6:55:33:73:28:ed:03:65:bd:a1:1e:
fc:65:16:0c:37:c1:98:8f:89:cb:a1:43:bd:16:e8:
93:53:da:0b:6e:f7:cf:a7:e9:bc:32:c5:7d:f1:49:
8f:1f:67:2c:37:ee:64:47:d4:78:b5:7f:b7:9e:e1:
2e:8b:98:12:f2:c0:52:7f:27:98:47:73:b4:32:72:
75:cb:fe:6f:0d:d8:1f:97:89:a7:1d:f6:ad:ed:39:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:59:06:20:DC:51:96:D5:54:A4:A6:3C:84:97:BA:CE:30:A6:72
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fb:f1:f3:78:3d:c1:90:ed:e4:60:37:95:01:64:51:88:e6:
7b:cf:20:4d:26:5b:a2:a4:d2:d4:7e:5f:b2:7e:e2:b3:86:8a:
84:68:ac:8d:44:77:cf:ff:51:96:ec:87:ee:72:19:f7:d2:f4:
1a:68:b9:74:d3:77:ba:4c:02:4d:bd:98:05:c6:dd:a6:25:f7:
d9:a0:cf:6e:c6:7d:18:f9:a9:36:1a:1b:04:66:ab:f9:1d:15:
5c:05:a6:23:2e:f9:96:3b:1c:46:fc:26:e1:76:40:49:bf:df:
b0:1e:0c:a7:9f:a5:ad:d4:a4:4e:3f:c5:47:a4:ea:11:55:6d:
2c:f2:01:e5:8b:eb:b8:6f:f2:53:df:b9:35:32:bb:56:26:c0:
de:2f:99:6d:9d:40:82:7b:62:31:66:d3:9b:e1:19:11:36:80:
b8:54:8f:8a:b3:48:05:cc:ed:55:aa:f4:4a:5c:26:91:85:4a:
b6:fc:3d:1d:73:df:ab:2a:56:62:8c:e5:ea:b3:2e:eb:32:df:
79:af:cd:2d:bb:3d:09:12:d6:73:e5:9c:d6:17:48:94:00:dc:
43:bc:24:0b:ef:f8:04:c8:3d:4b:6e:b7:96:47:0b:32:59:96:
81:cd:39:6b:34:76:36:c3:78:f8:61:57:f8:ae:cb:73:77:80:
86:86:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:52 2026 by rpki-client