Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
File: v27iTmpzNB7J5d_AQr71vFnah8c.mft (raw, json)
Hash identifier: RRiq9HQhTL076emkvahzkEy9ux+QZygW1CUytb2CRGA=
Subject key identifier: 90:12:67:9E:6B:F4:32:28:90:69:CF:DC:19:41:66:7E:C8:7D:A9:C6
Authority key identifier: BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
Certificate issuer: /CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Certificate serial: 019FAAF5CBA66B3B57EEC80865B014ED59B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
Manifest number: 0152
Signing time: Tue 28 Jul 2026 23:01:02 +0000
Manifest this update: Tue 28 Jul 2026 23:01:02 +0000
Manifest next update: Wed 29 Jul 2026 23:01:02 +0000
Files and hashes: 1: aRyykpGyV8l037pwYFABQHmZBQo.roa (hash: Nh6oT8lybS2Q4BHuKgllOdaD6W0W7agU3wHBADfldjo=)
2: v27iTmpzNB7J5d_AQr71vFnah8c.crl (hash: k4cXKL3u35wxrNiJBMjehUb5XuAnANDAxpdfhmDdGM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:cb:a6:6b:3b:57:ee:c8:08:65:b0:14:ed:59:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Validity
Not Before: Jul 28 23:01:02 2026 GMT
Not After : Jul 29 23:01:02 2026 GMT
Subject: CN=9012679e6bf432289069cfdc1941667ec87da9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:cb:9d:b7:35:2e:1d:04:cc:7a:d7:a6:26:
27:fd:b1:2d:a2:50:17:c9:f0:a4:2f:48:3e:cc:00:
3b:7d:a1:b3:c7:6e:49:87:ad:0e:73:fb:79:63:73:
7c:2f:d6:57:06:d6:df:5c:cf:c4:f1:a2:5b:48:f2:
22:18:26:9f:5d:8c:0e:89:05:8c:43:8d:f5:4e:bc:
56:19:c5:16:f7:66:f7:0b:00:9e:07:51:40:63:10:
47:ba:be:05:c8:52:54:69:9c:a1:df:64:eb:2f:4d:
e5:a6:f3:2e:6f:fc:e8:39:c3:ed:af:31:e2:7a:63:
d7:8b:d4:f3:1a:f3:6f:9b:8a:2d:3f:b6:1a:c8:c4:
68:66:e7:ba:89:9a:c4:d9:cc:d8:ad:2c:27:13:3f:
4d:83:0e:e0:dc:98:4e:fd:32:fa:8b:57:61:cd:31:
d8:39:a8:84:78:b4:36:a3:29:df:3d:77:b7:65:c3:
2d:cd:1c:d9:65:5a:fa:bf:b3:eb:7f:cd:6c:c7:3c:
1a:22:5c:37:c5:e5:16:5a:48:1c:6f:02:35:30:91:
36:dd:f4:58:0f:d6:d3:da:5b:52:89:4d:fd:22:bf:
a5:1b:c2:9a:fa:9e:62:8e:76:9e:ba:7f:7a:a8:7d:
bd:93:21:7e:02:5e:3d:58:61:e7:ec:ab:98:44:4a:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:67:9E:6B:F4:32:28:90:69:CF:DC:19:41:66:7E:C8:7D:A9:C6
X509v3 Authority Key Identifier:
keyid:BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:b8:a8:ad:3e:9a:85:34:50:7e:8f:ae:8b:07:58:08:12:
85:41:85:61:81:e7:af:e7:a8:fb:97:c9:d0:2c:aa:5c:a1:37:
6c:17:54:8c:bf:47:10:7d:b2:bc:93:4f:70:ab:70:76:f3:6b:
d0:dc:a9:d9:e0:d0:5b:d8:b6:cd:37:6a:88:8e:23:0f:52:58:
6f:24:b6:e3:fc:e3:be:0c:08:7f:42:96:73:d3:b2:57:e8:72:
80:ed:2b:6c:38:6a:e6:02:d3:9d:d4:04:03:03:e0:fe:48:d4:
bc:ef:19:54:0d:55:d4:e7:ab:15:42:bc:7c:a0:b9:de:56:81:
98:75:8d:52:fe:ef:7c:32:ed:72:d5:0c:30:8c:a1:dc:af:9c:
ad:32:ae:ed:4d:27:01:e7:49:d5:d2:fd:ac:e0:d6:78:37:d2:
5f:73:a9:ab:8d:65:f4:47:f9:7f:d3:fb:ab:89:58:4a:93:18:
a1:49:d0:94:da:24:91:66:92:51:b4:8b:a6:c8:aa:71:81:d0:
a3:9f:ed:c6:2d:30:47:f7:b0:e9:12:42:8e:fc:40:92:71:a4:
d1:4b:4d:52:6c:09:3c:7c:a1:8c:d4:45:1e:4d:97:f6:47:dd:
6e:af:68:27:e3:42:4f:7d:c4:da:4e:c3:1c:83:b0:bf:35:ac:
64:f7:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:54 2026 by rpki-client