Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: Y1uZ51ntgIpEwLDkI20xJuqUsiRTm7IbwFvn5esgUhg=
Subject key identifier: B7:C2:3E:D9:60:77:5D:63:A3:9B:ED:A9:9A:9E:39:55:E0:C5:F7:E4
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 019D25BA61D9AE997A210F7335DE5D7D9776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 0CFA
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: UsxnbmsFfVG+I6iFjhQ3xhCfdScVg6+WGUPBgY4Khv4=)
2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:61:d9:ae:99:7a:21:0f:73:35:de:5d:7d:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=b7c23ed960775d63a39beda99a9e3955e0c5f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:98:8e:c0:4c:f0:55:30:ae:f2:33:f4:bc:
cb:cf:a1:99:24:7b:16:38:2f:82:94:d9:94:fa:9c:
e6:f7:88:87:f9:d1:2f:1f:f9:77:da:e2:ed:e3:b2:
41:fc:e4:60:24:25:06:1f:51:ff:75:c4:23:38:df:
b4:52:bc:4f:c9:4b:72:3a:60:bf:19:27:a6:e8:57:
65:79:af:ba:65:6a:79:42:1e:9f:f2:73:77:fb:67:
90:68:89:a2:23:f3:6f:46:ca:45:04:dd:bf:a8:f7:
0f:29:54:a0:9b:4f:58:55:19:99:44:c7:03:ce:0f:
49:a2:fd:4f:6d:7e:2c:f5:dd:a0:6d:0f:b5:8f:3b:
a3:ab:e5:19:3c:41:44:01:36:24:b6:0a:27:1a:ed:
fe:4f:07:43:08:94:0d:4a:7b:20:bc:57:95:66:fa:
9b:03:bd:aa:4c:35:48:6e:6e:de:14:2f:6c:62:99:
36:fb:ea:a7:bd:79:7f:f4:a4:91:c2:23:78:24:b5:
6f:fa:1d:16:b3:b8:be:38:41:52:a8:56:8b:49:6e:
7b:6b:6d:a0:ac:80:e1:4d:bf:1b:58:44:e5:5e:0a:
06:71:cc:0f:86:d5:f0:3e:48:fb:e9:15:62:68:46:
52:74:b2:c4:e3:83:15:04:52:79:54:a7:eb:fa:fb:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:3E:D9:60:77:5D:63:A3:9B:ED:A9:9A:9E:39:55:E0:C5:F7:E4
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:15:d3:e8:24:89:4a:7f:5c:3b:03:f5:19:76:0e:11:5b:ec:
dc:9a:89:a5:85:54:92:e5:87:7a:8d:6b:0a:89:11:eb:eb:3a:
f4:30:33:2d:e4:30:6f:77:21:0d:1b:52:bf:18:db:20:9c:04:
98:0a:af:86:9e:a3:b9:b4:c7:d9:72:88:57:95:81:56:cd:3f:
56:24:12:11:02:84:8d:32:93:14:32:b8:8b:eb:fd:a4:1b:d3:
aa:cf:6c:c2:ed:0a:1c:30:7c:64:36:4a:5f:26:d7:e5:0a:6d:
ef:1e:8c:af:00:74:78:f0:57:8e:4e:db:6d:4d:b4:03:80:08:
5f:e6:d3:2f:90:db:1a:39:13:f9:70:67:1b:04:12:15:84:1c:
47:1f:0a:3b:b9:18:31:f8:70:2a:cd:35:45:2e:f4:14:4b:cd:
b1:06:29:28:5b:4c:d5:19:a1:1b:8f:28:91:76:b1:b5:67:05:
fa:ce:cc:74:82:6f:bc:c6:20:35:52:a4:cf:0b:f0:ed:c4:ce:
1f:57:50:5c:f5:75:f9:41:39:0f:97:ef:44:6b:bf:86:2f:eb:
0d:be:c9:9b:09:55:c4:01:ff:76:2a:a4:0f:6e:ff:51:85:5a:
64:85:2d:d9:aa:8e:c8:bb:81:dd:23:46:7d:fd:6b:27:9a:01:
f4:1c:cf:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lumHZrpl6IQ9zNd5dfZd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjYwMzI1MTYwMTA0WhcNMjYwMzI2MTYwMTA0WjAzMTEwLwYDVQQD
EyhiN2MyM2VkOTYwNzc1ZDYzYTM5YmVkYTk5YTllMzk1NWUwYzVmN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9yYjsBM8FUwrvIz9LzLz6GZJHsW
OC+ClNmU+pzm94iH+dEvH/l32uLt47JB/ORgJCUGH1H/dcQjON+0UrxPyUtyOmC/
GSem6Fdlea+6ZWp5Qh6f8nN3+2eQaImiI/NvRspFBN2/qPcPKVSgm09YVRmZRMcD
zg9Jov1PbX4s9d2gbQ+1jzujq+UZPEFEATYktgonGu3+TwdDCJQNSnsgvFeVZvqb
A72qTDVIbm7eFC9sYpk2++qnvXl/9KSRwiN4JLVv+h0Ws7i+OEFSqFaLSW57a22g
rIDhTb8bWETlXgoGccwPhtXwPkj76RViaEZSdLLE44MVBFJ5VKfr+vvuWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfCPtlgd11jo5vtqZqeOVXgxffkMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhXT6CSJ
Sn9cOwP1GXYOEVvs3JqJpYVUkuWHeo1rCokR6+s69DAzLeQwb3chDRtSvxjbIJwE
mAqvhp6jubTH2XKIV5WBVs0/ViQSEQKEjTKTFDK4i+v9pBvTqs9swu0KHDB8ZDZK
XybX5Qpt7x6MrwB0ePBXjk7bbU20A4AIX+bTL5DbGjkT+XBnGwQSFYQcRx8KO7kY
MfhwKs01RS70FEvNsQYpKFtM1RmhG48okXaxtWcF+s7MdIJvvMYgNVKkzwvw7cTO
H1dQXPV1+UE5D5fvRGu/hi/rDb7JmwlVxAH/diqkD27/UYVaZIUt2aqOyLuB3SNG
ff1rJ5oB9BzPIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:56 2026 by rpki-client