Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: 5PnC5sIY8ize0feqpvwN1xa8bA3pN1uxO1EfgJgJWXA=
Subject key identifier: 24:D4:9F:3C:A3:DB:D7:17:60:A0:D1:31:8E:02:69:EA:DA:DB:7D:1B
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 019D270424EB72B84797BB6D6D2695BEC5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 1061
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: VxDKTnOBMRJ2Kde15FsZ6GvpmJtG7CXXYebDcBLbCt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:24:eb:72:b8:47:97:bb:6d:6d:26:95:be:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=24d49f3ca3dbd71760a0d1318e0269eadadb7d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:52:85:5b:2b:e3:1b:b0:de:dd:50:89:34:
62:e3:77:f6:c1:db:7d:33:8e:be:4d:ac:22:bc:ac:
e3:84:e5:58:b0:25:04:a6:65:f0:05:34:91:33:69:
73:d3:b7:0e:2c:f2:96:f6:65:51:df:db:93:a1:3f:
3b:e6:83:0f:48:1d:a7:5c:0b:2b:f5:e5:40:90:34:
17:43:25:eb:f7:6d:85:ff:ad:10:9f:ec:00:a6:4f:
ba:b2:64:d8:ba:a1:04:d2:b4:31:0d:22:77:aa:4a:
11:c6:7e:c4:1b:8b:47:61:6f:93:9d:96:56:04:6e:
45:8c:f3:d5:81:f6:bb:37:2f:a5:ff:d8:f1:7e:3d:
c1:28:b6:4b:76:70:a1:a6:2f:1f:31:16:7f:4d:20:
ce:e6:1d:70:ed:18:42:49:ce:ad:fd:6d:ae:a4:ee:
f3:8a:ea:52:dd:f7:2e:88:3a:62:8c:e0:fb:73:2e:
9f:43:59:71:32:4d:f6:ae:7e:99:c1:6c:c4:fe:bf:
c8:d6:93:7f:55:82:9a:9a:71:3c:95:3e:25:03:76:
02:f6:de:8b:04:c6:52:cd:1e:4d:f3:fb:f5:fb:94:
af:18:d0:cf:fd:fb:39:f8:ac:55:98:14:31:e7:b1:
b7:d5:9f:37:da:48:fa:11:70:1b:08:10:e2:73:03:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:9F:3C:A3:DB:D7:17:60:A0:D1:31:8E:02:69:EA:DA:DB:7D:1B
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:2b:3e:9b:90:80:71:c7:61:f6:9d:11:ba:2e:0c:39:6f:c9:
04:96:cc:90:a6:a6:8c:d4:e7:01:ae:cf:74:31:6e:96:e9:d7:
6f:da:4a:9a:0c:10:fc:67:f4:82:6f:f1:97:3f:f8:c9:dd:8f:
7d:73:78:23:27:5c:c6:52:3d:10:23:80:9d:76:9e:9f:24:84:
e1:1e:ad:b2:be:16:72:fa:71:ca:dd:67:19:d2:06:c7:24:36:
9a:6f:a2:d6:c0:e4:a9:37:77:4b:88:bc:f4:9f:39:6d:2e:30:
49:99:76:45:9a:db:b9:b4:e5:c7:01:76:39:ad:3a:17:77:e7:
74:f0:27:6d:44:e5:6e:34:52:98:4f:de:02:0a:54:2b:8d:97:
02:f0:b1:ad:eb:14:d3:c7:fc:d4:6c:58:da:46:7e:a6:fc:7f:
86:ef:ee:f4:98:4f:f5:79:4d:1b:6a:4f:b9:30:8d:92:05:a3:
f4:da:c8:11:03:69:c5:f8:3a:7f:4b:dd:e5:43:b2:a4:c8:82:
b9:28:9a:c7:a4:0f:c8:d0:6c:a8:da:b4:8d:d3:52:56:62:02:
38:4c:a8:3b:02:b7:f7:f9:39:51:6b:0b:0d:9a:66:6c:95:ff:
4f:b7:83:31:70:7b:1f:91:a5:8d:30:b0:83:b1:e8:f7:9f:42:
ad:0a:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:39 2026 by rpki-client