Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: hVNM43J1fr53LyFZRhcGzoBoAlu2E9Df1XaDXIXye2U=
Subject key identifier: C9:A6:69:79:AE:16:49:78:81:DC:44:41:C7:9D:32:71:11:8F:0E:E3
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 019F94DC15AA4CC5AD16100951B5BC232EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 11A3
Signing time: Fri 24 Jul 2026 16:01:19 +0000
Manifest this update: Fri 24 Jul 2026 16:01:19 +0000
Manifest next update: Sat 25 Jul 2026 16:01:19 +0000
Files and hashes: 1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: tiU/GFhkzbTnBLYFggLDp6/XWFpkiUfwVXeZutV2JQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:15:aa:4c:c5:ad:16:10:09:51:b5:bc:23:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jul 24 16:01:19 2026 GMT
Not After : Jul 25 16:01:19 2026 GMT
Subject: CN=c9a66979ae16497881dc4441c79d3271118f0ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:d9:b1:3f:26:9e:e8:27:d1:48:3a:87:01:
57:a2:4d:21:23:57:42:cb:37:99:83:05:4b:4b:e7:
a1:29:dd:af:02:1e:18:11:f6:e4:24:df:65:48:d8:
6b:f1:3d:9c:6b:f7:0c:0d:de:73:98:85:67:da:c0:
bd:53:e8:f1:02:81:18:78:47:dd:c5:50:83:19:c0:
60:17:3c:c4:39:79:37:f3:39:8d:97:a7:02:7b:0e:
d2:79:e7:58:5a:7f:18:f6:15:22:2f:4e:43:e1:3a:
83:1f:6d:09:d1:07:7c:9d:f6:0f:70:f1:1e:d5:ec:
45:a9:88:40:f4:d3:ee:6c:fa:95:1a:05:b5:e5:69:
44:71:da:df:9f:09:52:cb:a7:72:a2:ba:c0:36:10:
e1:d6:d7:e6:06:e5:d6:04:d1:da:0e:f3:a3:9a:2c:
f3:f0:5d:2a:7d:e8:1d:6c:c5:a9:5f:df:da:89:21:
99:ae:81:c3:56:8a:ad:8a:2c:60:75:cb:48:af:a4:
53:fd:7b:e3:9e:91:80:e7:d1:b8:46:59:55:4b:6b:
a5:aa:9d:7e:9e:e2:4b:23:12:c7:09:f2:fa:93:0b:
a1:38:d4:0f:c0:a3:53:00:c6:51:10:ad:dd:76:98:
bb:4e:fc:fa:0f:2e:59:30:e8:b6:61:e0:9a:8d:38:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:69:79:AE:16:49:78:81:DC:44:41:C7:9D:32:71:11:8F:0E:E3
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:ad:68:07:ce:29:b1:02:b1:a9:36:63:5e:b8:a7:4d:e2:82:
e9:86:15:3e:6b:54:21:ff:1a:f0:8e:48:5e:31:3d:d8:9f:2e:
55:49:56:77:b2:84:be:df:cc:f0:80:38:f1:bd:57:36:57:e2:
5f:5c:1f:e6:32:96:5f:22:9a:2d:de:70:71:19:dc:94:fe:c8:
36:5e:80:42:3b:e4:92:23:90:9d:24:81:14:52:af:b0:c6:a6:
12:90:08:13:2c:9e:50:97:5c:1c:c0:aa:b1:bc:1d:1a:53:50:
a2:e1:b9:33:a1:22:7e:8d:10:13:ab:e8:d7:4e:d8:db:71:db:
eb:7f:56:47:e0:d8:31:29:51:02:41:f7:a5:db:67:4e:3e:e0:
93:81:02:1a:ce:a9:69:11:33:4f:da:7a:80:cf:ed:05:ac:8d:
14:0c:c3:e8:2b:04:c0:e8:81:e4:48:56:93:02:0e:9d:93:c5:
be:5c:61:85:f5:05:a4:82:52:40:4f:3c:a5:38:64:17:d4:4b:
df:53:55:e8:52:1b:25:5c:5f:46:2f:a3:14:f7:29:84:5b:7b:
7f:0e:14:db:6a:3f:fe:ee:3f:58:e0:f9:1f:c5:95:62:c4:2d:
5a:80:3d:24:8b:1e:ae:fc:bd:ad:99:3b:40:1d:4c:b7:d7:65:
84:06:36:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3BWqTMWtFhAJUbW8Iy7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi
YjgyZmMwHhcNMjYwNzI0MTYwMTE5WhcNMjYwNzI1MTYwMTE5WjAzMTEwLwYDVQQD
EyhjOWE2Njk3OWFlMTY0OTc4ODFkYzQ0NDFjNzlkMzI3MTExOGYwZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgrZsT8mnugn0Ug6hwFXok0hI1dC
yzeZgwVLS+ehKd2vAh4YEfbkJN9lSNhr8T2ca/cMDd5zmIVn2sC9U+jxAoEYeEfd
xVCDGcBgFzzEOXk38zmNl6cCew7SeedYWn8Y9hUiL05D4TqDH20J0Qd8nfYPcPEe
1exFqYhA9NPubPqVGgW15WlEcdrfnwlSy6dyorrANhDh1tfmBuXWBNHaDvOjmizz
8F0qfegdbMWpX9/aiSGZroHDVoqtiixgdctIr6RT/XvjnpGA59G4RllVS2ulqp1+
nuJLIxLHCfL6kwuhONQPwKNTAMZREK3ddpi7Tvz6Dy5ZMOi2YeCajTjA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmmaXmuFkl4gdxEQcedMnERjw7jMB8GA1UdIwQY
MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt
MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm
LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4a1oB84p
sQKxqTZjXrinTeKC6YYVPmtUIf8a8I5IXjE92J8uVUlWd7KEvt/M8IA48b1XNlfi
X1wf5jKWXyKaLd5wcRnclP7INl6AQjvkkiOQnSSBFFKvsMamEpAIEyyeUJdcHMCq
sbwdGlNQouG5M6Eifo0QE6vo107Y23Hb639WR+DYMSlRAkH3pdtnTj7gk4ECGs6p
aREzT9p6gM/tBayNFAzD6CsEwOiB5EhWkwIOnZPFvlxhhfUFpIJSQE88pThkF9RL
31NV6FIbJVxfRi+jFPcphFt7fw4U22o//u4/WOD5H8WVYsQtWoA9JIservy9rZk7
QB1Mt9dlhAY2Cg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:57 2026 by rpki-client