Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: XtBlCcoLDm1h9eaafDI/YKZTL/JPNtLuaMhq8qkHXKI=
Subject key identifier: ED:84:1B:94:61:4F:7A:28:8D:51:A5:74:89:FF:29:56:FB:A2:DD:EE
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019FA974B544481E1C069E2C85A66AA69B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0B3D
Signing time: Tue 28 Jul 2026 16:00:25 +0000
Manifest this update: Tue 28 Jul 2026 16:00:25 +0000
Manifest next update: Wed 29 Jul 2026 16:00:25 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: ZSam0lW956xfEIKgzN04FK6zMnox9GGbny0YFGL6KsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b5:44:48:1e:1c:06:9e:2c:85:a6:6a:a6:9b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Jul 28 16:00:25 2026 GMT
Not After : Jul 29 16:00:25 2026 GMT
Subject: CN=ed841b94614f7a288d51a57489ff2956fba2ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:43:64:93:6f:99:19:ab:a9:8f:40:1c:ca:
31:7c:ce:0b:65:4f:07:99:dd:27:79:d8:44:4a:bc:
03:79:f3:de:6e:43:c7:cb:62:fb:46:06:c5:77:a8:
c2:9e:a3:46:97:a2:9d:be:10:64:ca:12:78:09:bc:
bb:bf:5a:78:44:61:7b:0d:8b:f2:3e:4c:ab:63:fb:
67:38:f7:5a:ec:19:42:c4:6f:81:d6:51:d0:ef:60:
85:dd:b5:23:dc:70:49:1c:e8:97:0b:7d:d3:9f:83:
3b:44:19:c9:52:25:5a:13:8f:ef:62:29:11:85:de:
7b:2e:d5:a8:20:cc:b8:bc:19:58:c3:c8:d4:7f:13:
0e:65:1f:a1:e0:cb:24:05:f6:b8:d4:ac:ff:de:c6:
ab:3e:d0:02:59:8e:ca:51:ac:58:95:e9:9b:12:fc:
e0:8f:57:89:e5:25:30:8c:5c:76:9d:02:18:52:82:
be:29:9c:6b:ab:a4:b8:82:64:c7:f7:b4:f0:08:43:
43:9c:3f:f2:26:d2:9b:b0:c7:e1:ae:02:23:3d:83:
bb:fc:36:61:76:2f:e0:41:a8:c2:3e:38:c2:20:aa:
db:1e:eb:95:d8:ab:2d:09:58:c5:fe:5c:00:1b:2f:
6b:ad:c9:f2:5f:73:a3:e9:19:fb:4b:73:ac:6c:c1:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:1B:94:61:4F:7A:28:8D:51:A5:74:89:FF:29:56:FB:A2:DD:EE
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:69:97:c3:d4:8c:ee:8e:1f:c6:c2:3a:fe:41:3e:6a:ea:
b4:98:0d:e0:35:b0:94:8b:41:32:f3:e5:05:d7:1d:29:94:2c:
72:a2:4c:b3:68:9c:03:69:a3:5e:12:f2:85:8f:b9:b7:35:16:
90:7a:57:1f:83:4a:9a:a4:76:23:db:55:ea:21:f2:5a:59:5b:
57:77:fd:fe:5c:27:bc:59:55:93:d5:7f:67:81:77:ff:6c:d2:
fe:75:6f:93:83:9f:cf:d1:5e:5b:20:8f:f1:4b:04:97:ce:a3:
22:16:85:b2:89:96:33:77:8e:6a:ba:cb:fe:4f:20:a3:ec:a4:
9e:ba:39:06:3f:0e:2b:06:f4:5f:6a:a7:d2:0b:2a:17:f3:1b:
0b:d4:19:03:3c:b7:c6:16:48:2f:fc:d5:82:68:ef:58:07:e8:
ec:26:e5:9e:ae:e7:51:04:30:0e:13:22:28:7b:c4:09:a6:26:
68:6c:03:e4:f0:34:0f:4d:af:71:e2:06:1a:b5:75:80:b4:16:
35:e0:b6:c3:43:ee:b5:c2:72:22:e5:02:6b:82:0f:df:c6:eb:
f6:69:74:32:d2:bb:65:c0:83:27:28:df:e0:70:7e:25:42:52:
29:de:f8:0f:cc:07:f6:67:22:4c:25:ab:fd:5c:09:c9:95:ec:
28:f7:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:24 2026 by rpki-client