Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
File: 960EaCOkpawZj0BdOYQ0moNlwWE.mft (raw, json)
Hash identifier: mZTvGVPCOzOHd3988MZ8aUiPnV+sgYRMmNKoS1NIo/8=
Subject key identifier: 1F:A6:7C:65:9F:66:E1:78:5C:B4:CE:4B:59:50:3B:06:74:68:93:18
Authority key identifier: F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
Certificate issuer: /CN=f7ad046823a4a5ac198f405d3984349a8365c161
Certificate serial: 01A0E92DBF680D9F009A2FC42F61F98E2D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:24 +0000
Manifest this update: Mon 28 Sep 2026 18:01:24 +0000
Manifest next update: Tue 29 Sep 2026 18:01:24 +0000
Files and hashes: 1: 960EaCOkpawZj0BdOYQ0moNlwWE.crl (hash: S6P5D+2hE+GovYcfGn/f2KQ5Sf32a1gIGSPX7V/H6J4=)
2: bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa (hash: FrGHJvzVXHIulkPnWqo3gyts46hg4UH5BktvMTcKuRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:bf:68:0d:9f:00:9a:2f:c4:2f:61:f9:8e:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ad046823a4a5ac198f405d3984349a8365c161
Validity
Not Before: Sep 28 18:01:24 2026 GMT
Not After : Sep 29 18:01:24 2026 GMT
Subject: CN=1fa67c659f66e1785cb4ce4b59503b0674689318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9f:59:55:43:2b:3c:d6:6c:5e:25:fb:70:b9:
6c:93:3e:86:81:28:55:94:6f:17:8c:1d:a6:5d:0d:
2e:02:98:f6:c8:16:76:19:d7:87:c5:a8:7a:cc:9d:
d3:7d:96:f1:24:ab:61:11:29:9f:fe:39:d2:21:4e:
41:d1:b0:4c:42:0f:46:45:68:68:ac:e2:55:a7:1f:
ec:84:56:f7:66:e9:d9:18:6a:57:92:c2:ea:2d:25:
77:ef:c9:ea:a9:1e:92:50:6a:7a:47:37:45:8e:7d:
b7:f0:87:70:cc:31:37:60:c4:b8:5b:cc:3b:e0:93:
2a:b3:bc:0a:87:1b:5b:a3:24:31:16:af:59:72:1b:
c7:57:7f:0e:77:de:c9:8b:6e:6d:19:fc:09:17:54:
b3:83:f0:4c:df:60:14:03:fd:76:34:06:4d:a9:a7:
48:4f:0b:d2:d8:fd:97:18:fa:69:85:c8:f3:14:dc:
dc:46:81:95:06:80:d2:86:4e:62:56:7c:67:7a:cb:
aa:dc:9e:16:eb:4c:be:85:5f:53:b4:8d:e4:0b:83:
45:e7:7f:ff:b6:9d:a7:e3:a7:42:fc:77:8d:9c:80:
ad:97:e2:e4:bb:0f:f9:fd:b8:b7:f1:13:6b:06:72:
c7:3c:a2:f7:eb:dd:fb:54:b1:96:41:8d:5d:6c:1d:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:7C:65:9F:66:E1:78:5C:B4:CE:4B:59:50:3B:06:74:68:93:18
X509v3 Authority Key Identifier:
keyid:F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ec:ec:67:64:c6:64:f7:22:b2:5d:9c:ff:42:5d:ef:16:e3:
4b:5c:d0:b8:b6:8b:12:c3:4c:eb:2f:cd:d1:ed:5b:e6:ad:6e:
e5:c7:5e:4a:57:84:52:c9:7e:9e:e4:09:45:b4:82:93:47:c2:
81:07:19:f7:c4:78:b1:0e:c1:57:d6:15:4b:bc:59:13:0c:6c:
e9:fd:fe:c7:47:b9:aa:53:87:93:55:de:61:69:b1:f3:6c:77:
cc:13:dc:4f:e2:7b:f7:40:4b:e0:5e:1a:46:4e:31:1e:cf:6c:
90:e9:98:a5:5b:2c:95:b3:7f:05:e5:0c:b0:02:07:e4:af:e6:
db:90:fa:08:be:97:15:87:00:6f:53:a2:9f:68:95:68:1a:1f:
4d:9e:ed:7b:21:63:dc:d1:83:12:e5:a6:a6:07:89:80:55:14:
c8:7a:55:5c:a4:7a:c3:b6:ba:fd:70:19:1b:ff:cb:cf:e1:d5:
2b:39:14:db:b3:95:1f:f7:62:d3:91:53:7b:2b:de:d3:48:80:
23:45:59:0b:e2:4e:77:03:73:08:92:15:34:e5:6b:0c:e9:d6:
49:6e:ee:5d:31:fa:95:29:76:a6:f2:7c:6d:29:4d:f8:32:55:
d0:d8:9b:58:e5:13:72:8e:6b:87:54:a3:df:9b:6c:d0:4b:5a:
b5:5f:16:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLb9oDZ8Ami/EL2H5ji1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWQwNDY4MjNhNGE1YWMxOThmNDA1ZDM5ODQzNDlhODM2
NWMxNjEwHhcNMjYwOTI4MTgwMTI0WhcNMjYwOTI5MTgwMTI0WjAzMTEwLwYDVQQD
EygxZmE2N2M2NTlmNjZlMTc4NWNiNGNlNGI1OTUwM2IwNjc0Njg5MzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9p9ZVUMrPNZsXiX7cLlskz6GgShV
lG8XjB2mXQ0uApj2yBZ2GdeHxah6zJ3TfZbxJKthESmf/jnSIU5B0bBMQg9GRWho
rOJVpx/shFb3ZunZGGpXksLqLSV378nqqR6SUGp6RzdFjn238IdwzDE3YMS4W8w7
4JMqs7wKhxtboyQxFq9ZchvHV38Od97Ji25tGfwJF1Szg/BM32AUA/12NAZNqadI
TwvS2P2XGPpphcjzFNzcRoGVBoDShk5iVnxnesuq3J4W60y+hV9TtI3kC4NF53//
tp2n46dC/HeNnICtl+Lkuw/5/bi38RNrBnLHPKL36937VLGWQY1dbB25DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+mfGWfZuF4XLTOS1lQOwZ0aJMYMB8GA1UdIwQY
MBaAFPetBGgjpKWsGY9AXTmENJqDZcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTYwRWFDT2twYXdaajBCZE9ZUTBtb05sd1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMt
NmU1NjIxMmNkZjVjLzEvOTYwRWFDT2twYXdaajBCZE9ZUTBtb05sd1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMtNmU1NjIxMmNkZjVj
LzEvOTYwRWFDT2twYXdaajBCZE9ZUTBtb05sd1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+zsZ2TG
ZPcisl2c/0Jd7xbjS1zQuLaLEsNM6y/N0e1b5q1u5cdeSleEUsl+nuQJRbSCk0fC
gQcZ98R4sQ7BV9YVS7xZEwxs6f3+x0e5qlOHk1XeYWmx82x3zBPcT+J790BL4F4a
Rk4xHs9skOmYpVsslbN/BeUMsAIH5K/m25D6CL6XFYcAb1Oin2iVaBofTZ7teyFj
3NGDEuWmpgeJgFUUyHpVXKR6w7a6/XAZG//Lz+HVKzkU27OVH/di05FTeyve00iA
I0VZC+JOdwNzCJIVNOVrDOnWSW7uXTH6lSl2pvJ8bSlN+DJV0NibWOUTco5rh1Sj
35ts0EtatV8W2Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:49:50 2026 by rpki-client