Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: 1KX+EeIR1bjY0CQgvLRk4AGi1EXl5e9KZHrkANUZEAU=
Subject key identifier: FF:37:3E:9A:BE:70:42:34:52:A5:01:96:E2:9D:A1:5C:3A:31:92:31
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019FAA877FCD2C51114DC9F0689E907F1C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 05BB
Signing time: Tue 28 Jul 2026 21:00:34 +0000
Manifest this update: Tue 28 Jul 2026 21:00:34 +0000
Manifest next update: Wed 29 Jul 2026 21:00:34 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: 5ENv3+K+8CcVPQXA7zfOGONhwNbyf3Eom1+eIJWmH5w=)
2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:7f:cd:2c:51:11:4d:c9:f0:68:9e:90:7f:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Jul 28 21:00:34 2026 GMT
Not After : Jul 29 21:00:34 2026 GMT
Subject: CN=ff373e9abe70423452a50196e29da15c3a319231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:f7:7a:f8:ba:78:34:35:64:b9:80:de:de:
39:ae:32:64:a7:d9:94:d0:fa:82:9c:9f:af:b5:bc:
37:37:de:ff:d0:24:e1:83:5c:19:12:33:2a:d5:e5:
8d:c0:7b:af:78:ab:fb:18:e8:86:88:84:b6:e2:51:
a8:b0:7b:a7:7c:38:15:d7:c1:f5:b1:8e:e1:31:b1:
22:d0:8a:21:f4:a4:ee:07:0d:b7:77:bd:d4:ad:cf:
84:b8:51:f1:46:f1:0b:d1:9d:e9:fa:93:48:04:8f:
fc:c9:14:f6:aa:18:2e:d4:a4:12:19:a6:04:c3:35:
19:e0:6f:c3:66:4e:2d:fb:2f:e6:b3:b6:f4:d0:52:
6d:11:ac:c8:cb:a9:9e:cb:ab:5f:53:69:8b:2e:8b:
9c:3a:ba:c7:ce:9b:1d:d6:90:8b:43:90:8b:25:5f:
0c:32:cc:87:7f:8c:65:f0:ab:3c:44:82:e8:d5:54:
b6:31:2e:4c:3b:28:82:f4:8a:80:3d:89:03:cc:81:
e8:90:f9:1d:7c:4c:e7:c7:ad:63:50:09:98:10:9b:
4d:ea:58:36:ad:63:71:3c:84:3e:10:ed:e8:12:3e:
dc:58:65:c6:9d:98:2c:3f:1b:6a:fd:4c:19:cc:26:
99:0d:9a:37:ef:89:b2:4d:28:45:37:cf:07:a1:56:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:37:3E:9A:BE:70:42:34:52:A5:01:96:E2:9D:A1:5C:3A:31:92:31
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:60:e0:00:2d:39:df:82:8f:99:3c:78:68:ed:91:38:a4:2f:
26:03:a2:27:d8:40:6b:b4:7e:71:68:c0:9a:ed:b0:f3:d0:35:
26:87:b2:3c:42:e8:79:da:5d:b9:2e:4e:b5:d5:6d:9f:41:39:
a9:92:85:c8:6f:e5:7c:c8:1b:0a:58:8c:c8:f0:69:64:8e:4d:
3c:02:fe:90:a0:65:7c:96:4e:fb:f8:f6:55:fc:5b:b0:99:c7:
c7:c9:fb:5a:9a:b8:6f:aa:de:14:0c:ca:93:95:0c:c8:f9:e9:
40:8f:d3:a9:39:6b:36:f6:29:e3:57:f6:a7:f3:bc:92:ba:e3:
62:6f:fa:00:e6:f6:ef:bb:18:79:30:28:56:09:d7:31:72:d1:
73:98:f7:26:21:99:f1:ab:70:bc:7f:d4:b5:8a:22:6d:e3:42:
29:9f:15:dc:a0:84:bf:04:19:4d:62:43:0a:c0:ba:d1:e3:b7:
84:6a:b7:01:f0:43:60:29:3f:1e:0c:9f:f8:c5:d3:6e:5f:35:
e2:34:73:2b:c7:fc:ff:38:cc:3d:08:94:48:e3:ca:8d:c1:5f:
87:30:a2:77:97:a6:2d:62:8f:59:51:a7:85:1d:e0:d9:dd:fb:
07:d1:5e:88:3c:a2:5b:d9:6a:ad:6e:fe:b1:f5:8b:f4:0b:1d:
4f:f8:fe:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+qh3/NLFERTcnwaJ6QfxyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmVmZWQyYTI0YWMxMjBlZDI2YWU5MmFlNDg1ODFiNzdk
MjQ5NzEwHhcNMjYwNzI4MjEwMDM0WhcNMjYwNzI5MjEwMDM0WjAzMTEwLwYDVQQD
EyhmZjM3M2U5YWJlNzA0MjM0NTJhNTAxOTZlMjlkYTE1YzNhMzE5MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgr3evi6eDQ1ZLmA3t45rjJkp9mU
0PqCnJ+vtbw3N97/0CThg1wZEjMq1eWNwHuveKv7GOiGiIS24lGosHunfDgV18H1
sY7hMbEi0Ioh9KTuBw23d73Urc+EuFHxRvEL0Z3p+pNIBI/8yRT2qhgu1KQSGaYE
wzUZ4G/DZk4t+y/ms7b00FJtEazIy6mey6tfU2mLLoucOrrHzpsd1pCLQ5CLJV8M
MsyHf4xl8Ks8RILo1VS2MS5MOyiC9IqAPYkDzIHokPkdfEznx61jUAmYEJtN6lg2
rWNxPIQ+EO3oEj7cWGXGnZgsPxtq/UwZzCaZDZo374myTShFN88HoVbMlwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP83Ppq+cEI0UqUBluKdoVw6MZIxMB8GA1UdIwQY
MBaAFPtu/tKiSsEg7Saukq5IWBt30klxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yNy0wcUpLd1NEdEpxNlNya2hZRzNmU1NYRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjU0NWE0LTIyZmEtNDUxYy04N2Fm
LTYyZjMxNmQwN2Q3MC8xLzEtMjctMHFKS3dTRHRKcTZTcmtoWUczZlNTWEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JhL2Y1NDVhNC0yMmZhLTQ1MWMtODdhZi02MmYzMTZkMDdk
NzAvMS8xLTI3LTBxSkt3U0R0SnE2U3JraFlHM2ZTU1hFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWDg
AC0534KPmTx4aO2ROKQvJgOiJ9hAa7R+cWjAmu2w89A1JoeyPELoedpduS5OtdVt
n0E5qZKFyG/lfMgbCliMyPBpZI5NPAL+kKBlfJZO+/j2VfxbsJnHx8n7Wpq4b6re
FAzKk5UMyPnpQI/TqTlrNvYp41f2p/O8krrjYm/6AOb277sYeTAoVgnXMXLRc5j3
JiGZ8atwvH/UtYoibeNCKZ8V3KCEvwQZTWJDCsC60eO3hGq3AfBDYCk/Hgyf+MXT
bl814jRzK8f8/zjMPQiUSOPKjcFfhzCid5emLWKPWVGnhR3g2d37B9FeiDyiW9lq
rW7+sfWL9AsdT/j+Nw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:41:29 2026 by rpki-client