Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: cLbkQPos0qlIzrlysc7RKM6+PgYIXGrVmKB9+NjFZ9s=
Subject key identifier: B7:20:1B:02:01:08:C3:C8:4A:BD:46:53:39:59:21:95:9F:6E:A5:26
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019CAC471423F285A41785959B2C05ADA3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0C27
Signing time: Mon 02 Mar 2026 02:01:05 +0000
Manifest this update: Mon 02 Mar 2026 02:01:05 +0000
Manifest next update: Tue 03 Mar 2026 02:01:05 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: q6lSiHX9ljczEuzmtuNPWQloLPO7mqlfyC0ptlg/Up0=)
2: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
3: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:14:23:f2:85:a4:17:85:95:9b:2c:05:ad:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Mar 2 02:01:05 2026 GMT
Not After : Mar 3 02:01:05 2026 GMT
Subject: CN=b7201b020108c3c84abd4653395921959f6ea526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:7b:99:28:ed:27:3c:cf:cb:1d:27:7a:dc:
99:da:66:88:7e:eb:ce:7b:fa:48:fb:78:ef:03:36:
88:01:4d:a6:62:0f:45:31:82:07:ba:21:b6:cd:52:
41:89:55:69:20:8e:26:41:d7:a9:e8:55:b6:fa:cf:
3a:34:ac:19:8d:cc:dc:c9:8d:82:90:2e:9a:54:37:
55:b7:26:f0:04:5a:65:82:17:d5:c4:da:17:9e:99:
d2:ad:d9:d4:d2:18:62:f7:48:2f:fc:3a:88:4d:69:
e6:c5:ca:49:24:f7:4d:cc:5c:64:d9:74:76:e2:19:
29:88:c3:e1:90:02:e8:20:22:b8:cc:f2:bb:5f:ed:
39:85:fb:df:41:29:53:8f:46:88:22:84:e0:c7:85:
b8:da:61:4f:03:2a:8b:39:7f:fa:f3:a0:80:b3:16:
c5:90:01:78:eb:be:e5:36:70:cc:3d:25:b8:94:0d:
9a:7e:23:02:bd:7b:9c:2a:5c:68:08:2a:7b:c9:23:
5c:ef:f1:50:d7:0c:63:35:40:44:3c:a3:1a:99:50:
aa:c8:59:32:66:2c:3e:4d:23:84:04:27:15:ad:1a:
d7:2a:f5:47:7d:c7:ac:6d:0d:66:2d:c3:2e:10:c8:
b6:a8:2f:51:85:cf:f8:75:b7:86:7a:89:11:bf:58:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:1B:02:01:08:C3:C8:4A:BD:46:53:39:59:21:95:9F:6E:A5:26
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b7:46:06:c7:93:b7:96:ff:3e:bc:ac:6a:f7:b6:d7:b8:f0:
7b:90:1c:96:71:41:02:3b:96:14:91:ea:12:94:29:e6:4f:88:
f0:c5:2c:a7:6a:ce:f7:e2:e6:99:dd:56:d2:4a:6c:61:59:5d:
55:2e:a0:2f:73:98:51:1f:f4:51:8f:76:3b:42:8e:66:25:00:
5f:2f:b1:7b:b9:80:3c:95:c4:bd:5e:3d:62:d1:af:68:21:bb:
01:88:3f:5f:6d:0a:34:5a:40:4e:95:32:2f:03:05:3b:71:11:
ff:70:c8:08:76:dc:38:3f:e5:d9:9d:7b:88:26:90:70:d6:45:
96:9e:c6:a8:59:ec:6f:32:38:cc:e8:0f:e6:15:33:db:20:1a:
5e:e1:70:0b:3e:7d:e4:9d:db:a7:81:c0:a7:19:30:44:4e:03:
aa:21:5d:03:30:16:c0:2b:0f:89:13:88:31:5b:b5:8a:2e:65:
57:21:6b:e3:aa:f1:6e:af:83:11:3c:68:08:6d:a4:83:dc:8f:
32:b3:fd:a1:9d:43:d5:9a:0a:26:cc:6a:19:27:3d:e7:eb:00:
e5:9c:e5:cd:8b:a2:47:d6:00:ce:9a:67:c6:dd:a6:ca:ab:12:
8f:fe:e6:ca:ca:fc:74:86:dd:99:70:f0:c1:3d:f5:e2:6b:30:
dc:9c:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:59 2026 by rpki-client