
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: L7CsMc5e+/miv/DPLFjr6X5WPue+5lzS9eJKG65U5pM=
Subject key identifier: 87:21:74:8E:6F:4F:93:AF:CF:23:B1:4D:B4:25:72:4E:43:D0:2F:93
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019CAAC6D2CEB414CA23366FBECF19093E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 09B0
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: pDU/SHw8oaoIZpzu7bYzEGdLGJrjvLJvrEIlirhpedY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d2:ce:b4:14:ca:23:36:6f:be:cf:19:09:3e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=8721748e6f4f93afcf23b14db425724e43d02f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:4e:17:3e:d8:dd:5a:d8:60:21:d0:52:b1:
d0:56:34:49:90:d4:53:75:5e:f1:35:cc:46:18:da:
d4:59:5c:80:56:c6:1d:47:f3:33:1d:18:64:7d:b3:
14:7c:bd:1c:70:f2:92:fb:29:32:f7:03:c2:0f:eb:
4e:ba:9d:76:11:ab:6a:d5:9f:05:4e:f6:ac:2d:76:
9c:54:b4:c7:b8:e0:9d:c0:0d:e1:b5:35:83:b8:f5:
1b:12:66:72:65:c9:50:9b:01:30:7a:33:e7:a4:ef:
34:ba:fa:da:53:6f:ee:b6:7a:06:ce:01:09:eb:24:
26:4e:a2:77:f0:b3:80:41:25:28:68:8d:f8:47:7b:
5b:17:f3:56:6a:7d:8d:cc:05:51:88:5a:32:c5:94:
1f:50:1c:74:d2:ba:86:9e:25:c0:9c:12:5e:ca:b6:
3b:7d:ef:f1:9c:e5:bc:5c:bb:4a:f4:86:29:39:af:
e4:be:fa:66:44:d4:a5:55:8e:96:02:de:57:60:8a:
c3:c3:a7:c0:b6:04:01:1a:fa:51:5e:e6:37:a3:21:
cf:10:fe:62:27:7b:bf:1b:16:da:eb:94:ef:61:dc:
ee:4c:be:35:0b:b1:f3:8f:7b:0c:9e:ec:d2:2d:62:
aa:93:20:6b:2e:47:c9:3f:e1:21:6e:6c:67:3c:be:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:74:8E:6F:4F:93:AF:CF:23:B1:4D:B4:25:72:4E:43:D0:2F:93
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:78:41:3a:72:b4:6c:b8:59:7d:8d:8e:92:c6:98:c0:65:
7b:ea:2e:bb:d1:df:10:37:d1:da:6f:43:d5:fe:d7:81:11:c2:
cc:b3:0e:f0:5b:9b:96:04:06:b6:53:e5:91:d9:e6:66:fd:56:
da:23:a1:67:14:f0:7c:29:f4:bd:ba:0f:43:77:03:17:c8:fb:
d1:90:46:6d:9e:8a:26:54:8c:d0:8f:64:94:90:a4:5e:d0:ef:
ed:4c:fa:2b:6f:d6:c3:89:b9:36:9d:2d:e2:24:dd:8f:4c:7e:
6d:bd:e3:46:41:81:65:81:65:5c:33:9c:ac:3f:9a:52:bb:ad:
51:73:a7:08:da:1d:6e:45:f6:eb:ec:6c:eb:89:ef:45:27:33:
e2:35:0e:6a:7d:ab:56:d4:3a:23:b5:de:2f:ed:c7:c6:fe:7d:
b4:93:cf:c4:1d:7b:0e:94:eb:3f:d1:a2:d9:60:19:9d:ad:fd:
fa:c9:21:ad:5c:52:b0:db:99:9c:d7:79:61:9e:04:d2:3e:dc:
0b:fa:88:5b:ca:cb:50:d4:c3:4d:8f:2b:26:d5:b5:45:c2:85:
3e:0f:3e:04:08:2a:ae:84:33:59:4a:c3:86:37:02:3d:46:46:
e1:e3:c6:a1:13:38:d8:76:3b:81:31:a9:59:f5:a9:16:53:b2:
17:38:32:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxtLOtBTKIzZvvs8ZCT5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1
NmZkYTYwHhcNMjYwMzAxMTkwMTIyWhcNMjYwMzAyMTkwMTIyWjAzMTEwLwYDVQQD
Eyg4NzIxNzQ4ZTZmNGY5M2FmY2YyM2IxNGRiNDI1NzI0ZTQzZDAyZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G9OFz7Y3VrYYCHQUrHQVjRJkNRT
dV7xNcxGGNrUWVyAVsYdR/MzHRhkfbMUfL0ccPKS+yky9wPCD+tOup12Eatq1Z8F
TvasLXacVLTHuOCdwA3htTWDuPUbEmZyZclQmwEwejPnpO80uvraU2/utnoGzgEJ
6yQmTqJ38LOAQSUoaI34R3tbF/NWan2NzAVRiFoyxZQfUBx00rqGniXAnBJeyrY7
fe/xnOW8XLtK9IYpOa/kvvpmRNSlVY6WAt5XYIrDw6fAtgQBGvpRXuY3oyHPEP5i
J3u/Gxba65TvYdzuTL41C7Hzj3sMnuzSLWKqkyBrLkfJP+EhbmxnPL7aCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIchdI5vT5OvzyOxTbQlck5D0C+TMB8GA1UdIwQY
MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt
ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh
LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw94QTpy
tGy4WX2NjpLGmMBle+ouu9HfEDfR2m9D1f7XgRHCzLMO8FublgQGtlPlkdnmZv1W
2iOhZxTwfCn0vboPQ3cDF8j70ZBGbZ6KJlSM0I9klJCkXtDv7Uz6K2/Ww4m5Np0t
4iTdj0x+bb3jRkGBZYFlXDOcrD+aUrutUXOnCNodbkX26+xs64nvRScz4jUOan2r
VtQ6I7XeL+3Hxv59tJPPxB17DpTrP9Gi2WAZna39+skhrVxSsNuZnNd5YZ4E0j7c
C/qIW8rLUNTDTY8rJtW1RcKFPg8+BAgqroQzWUrDhjcCPUZG4ePGoRM42HY7gTGp
WfWpFlOyFzgy+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:13 2026 by rpki-client