Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
File: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft (raw, json)
Hash identifier: Uw4AQ5XtkrAPyCYpKm0V7+vH2DPO7hO4BlM/2b2bJFY=
Subject key identifier: A7:67:69:0E:B0:6F:5D:70:9D:66:B6:7F:B0:4C:B7:3D:E0:80:EE:F0
Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Certificate serial: 019D26CD8FFD4114424FABF8744F7989E20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
Manifest number: 168C
Signing time: Wed 25 Mar 2026 21:01:39 +0000
Manifest this update: Wed 25 Mar 2026 21:01:39 +0000
Manifest next update: Thu 26 Mar 2026 21:01:39 +0000
Files and hashes: 1: 4pGvXs49YI8yk2z7iMe2w_b3ME8.roa (hash: 00+UArGuOsJw8ESY6uvQo/LXZz/3ZRDrz0qSe3DG7Eo=)
2: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl (hash: 65caAynmzMIfeB7nkNKsV3d2BPswc3ssLvOaldFdRuw=)
3: nulCvf1ZDiLHKGwlRCqX-xf-u8U.roa (hash: JQ69vYDlz6xz7MB3BkzIIeYrLldb5G4IS4udc2gBcFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8f:fd:41:14:42:4f:ab:f8:74:4f:79:89:e2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Validity
Not Before: Mar 25 21:01:39 2026 GMT
Not After : Mar 26 21:01:39 2026 GMT
Subject: CN=a767690eb06f5d709d66b67fb04cb73de080eef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:9e:91:6d:da:ff:4a:b9:dd:a9:bd:7f:d7:
cd:c9:3f:40:df:32:f8:56:1c:36:63:1b:dd:79:ff:
f3:2f:fd:d0:75:7e:b4:6a:90:c0:6a:8e:25:03:47:
82:fb:0f:5f:0e:19:e0:bb:e0:00:2b:04:bf:cb:b8:
51:48:03:9d:22:68:8b:e5:05:e6:67:b9:38:56:4f:
6f:e9:0e:e6:41:07:38:a1:94:7e:f5:33:cf:4f:38:
80:04:87:d7:5f:19:5e:10:39:f5:aa:a1:eb:64:d7:
6f:c3:76:f7:91:29:c7:d1:15:21:b2:f7:70:32:22:
aa:a8:6b:1d:cb:03:61:ef:38:2b:33:34:99:27:7a:
c2:ac:eb:3f:9f:ae:40:c8:7f:46:30:3b:9a:3c:b9:
d9:03:cd:09:51:c8:45:51:67:f2:a8:2a:71:04:6f:
f6:6f:b0:3e:f4:5e:4c:72:21:36:3f:b4:3c:5d:9f:
56:34:70:57:60:d6:dc:1b:47:3c:9f:0c:fb:7f:ea:
25:86:c5:2e:78:84:2a:66:06:6f:3a:70:99:56:6b:
71:cf:42:43:1a:43:dd:f2:d9:8e:01:36:d4:f6:cf:
3f:46:a5:53:67:e6:15:c7:2f:c4:c5:df:33:f0:1e:
34:22:cd:7f:81:71:00:18:36:3e:af:3b:9c:7a:b5:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:69:0E:B0:6F:5D:70:9D:66:B6:7F:B0:4C:B7:3D:E0:80:EE:F0
X509v3 Authority Key Identifier:
keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:14:05:45:42:70:f8:0b:eb:d0:d2:4a:15:65:d4:bd:76:61:
a4:62:de:b8:15:80:bf:fb:88:40:78:3d:8c:d0:c7:12:a1:92:
2f:dc:95:c2:55:67:e2:58:fb:be:fc:15:c4:1c:e1:0d:a6:48:
be:6d:ba:66:04:08:be:b5:ec:06:ab:01:c8:19:d6:63:3e:08:
ed:9a:a1:e5:8e:8e:c1:e9:dc:44:d5:12:e7:cf:41:c5:a6:52:
51:59:47:c8:19:2d:ce:c8:a4:f7:cc:96:2a:3e:b7:bb:a0:69:
c1:ec:ad:11:f3:2e:ae:dc:b5:f6:c7:98:af:6b:b4:68:ff:9a:
9a:42:15:5e:aa:d4:0c:57:d8:aa:0a:fc:c1:03:5d:96:7c:90:
88:56:d5:e5:bf:06:87:96:53:77:0c:98:a5:ec:37:a8:e6:fd:
3c:d4:37:8e:86:1b:fb:70:59:b5:be:89:c1:c1:78:d0:61:58:
cb:ec:e0:72:39:5e:7d:d4:a1:96:c5:dd:52:77:7e:e9:14:36:
5f:9a:27:fc:8d:ca:f3:76:ed:c1:b2:0b:42:0f:d3:e4:13:c1:
19:80:3a:15:5e:ac:4f:7e:f7:51:75:f6:2b:f9:3e:81:a5:14:
db:bc:80:bd:da:f4:f4:a8:58:bd:db:bf:40:43:26:62:82:9e:
4a:12:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:33 2026 by rpki-client