Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: QmmTzM+fWrB/Ndka4EOfIba6GeIoneG5z2XEdUgM7QQ=
Subject key identifier: 60:FE:73:7B:73:0F:D6:35:60:AF:31:45:7B:C0:24:35:EF:7E:D1:02
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 019D26CCE25677580191DC709BDADEBC0D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: dmRSGfB6ZwLUiWCd+TE2mqsA+iR4mzQtren7WjfWWYU=)
2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e2:56:77:58:01:91:dc:70:9b:da:de:bc:0d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=60fe737b730fd63560af31457bc02435ef7ed102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:e1:85:e8:2c:53:8b:85:4c:33:8a:e2:c6:
99:18:af:e7:cc:fc:f2:40:b7:7a:f6:f2:3f:3b:c8:
53:36:b8:db:ad:e3:37:f5:c2:9c:d0:4e:82:e4:ec:
bd:a7:9d:4f:74:ec:f3:cd:06:78:24:1a:cd:47:28:
4e:6d:49:6e:12:3b:68:7e:2a:7c:06:5e:f2:03:f0:
51:82:a9:b4:b9:c2:df:24:1e:a2:00:7d:bf:05:8a:
ac:5d:d9:e8:38:c8:de:2f:05:ab:08:32:3b:05:7a:
6b:24:21:4c:0b:91:55:b3:de:f7:bc:e1:27:e8:7e:
2d:7a:a3:77:54:b0:f7:20:e3:8b:3c:14:22:7a:62:
40:72:d0:22:fd:bf:23:c8:45:02:be:48:8d:c7:06:
4b:1e:67:5d:82:dd:b7:70:14:be:3c:01:3f:dc:78:
21:1a:b9:ce:da:66:03:07:c6:12:e7:2a:c8:55:78:
66:ca:54:5f:19:ec:91:f9:a4:74:ca:7a:d3:a0:e8:
c5:73:b1:7d:ee:6d:0e:30:41:c5:36:87:21:02:2d:
41:4d:1d:b2:1f:12:90:af:36:92:6b:ff:48:98:0c:
0b:ca:19:03:1e:b9:7e:ad:fa:e2:85:93:74:d6:e5:
a6:21:c8:47:e6:ad:53:b7:8c:8f:26:2f:37:1b:a8:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:73:7B:73:0F:D6:35:60:AF:31:45:7B:C0:24:35:EF:7E:D1:02
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f8:60:ff:df:11:7f:69:35:4f:13:26:38:ee:57:56:ac:fb:
cf:0e:ca:b5:1a:3f:e2:3f:03:8c:a7:67:ad:f3:13:7c:88:0c:
1a:32:aa:33:b4:44:8b:c1:92:45:40:36:a5:a5:79:06:1e:2f:
7d:8b:6c:17:f9:f2:75:b6:0c:fe:aa:c9:3e:fd:d8:4c:d0:9f:
17:1e:2a:55:dd:ff:e9:51:9a:a9:28:97:d3:19:fa:a0:93:1a:
99:6b:5c:f0:08:89:7d:38:0c:c3:e3:cc:3f:bb:e2:c9:d4:a2:
05:05:e2:0a:6c:13:7c:5a:4d:87:e1:80:05:9f:48:9a:b8:ec:
ae:21:4e:b7:20:7b:b2:dc:c7:1c:ed:03:2c:11:e6:5f:5e:8d:
69:fb:d4:cb:76:73:7c:7f:cb:95:fd:23:7d:3a:58:0f:60:15:
77:42:b4:7c:96:04:3f:c0:99:c9:36:b1:71:e4:af:eb:9c:ef:
e0:ba:41:de:4e:a6:e7:5e:1c:77:df:36:4c:ab:ce:1d:20:15:
56:d4:67:6b:55:d7:b5:ee:b9:6f:29:f8:4c:bd:24:72:d6:25:
87:3d:3e:2c:e6:60:62:ec:72:f7:fa:c3:e3:29:d3:52:a9:77:
be:9c:75:85:17:4b:f9:80:ba:f1:65:64:4d:d8:a8:18:b0:fb:
91:40:e7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOJWd1gBkdxwm9revA2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNTliY2U2MWJhOWQyYTBlMzU1YmUwMWYxMzQxYjhkZjc2
YWViZGIwHhcNMjYwMzI1MjEwMDU0WhcNMjYwMzI2MjEwMDU0WjAzMTEwLwYDVQQD
Eyg2MGZlNzM3YjczMGZkNjM1NjBhZjMxNDU3YmMwMjQzNWVmN2VkMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfXhhegsU4uFTDOK4saZGK/nzPzy
QLd69vI/O8hTNrjbreM39cKc0E6C5Oy9p51PdOzzzQZ4JBrNRyhObUluEjtofip8
Bl7yA/BRgqm0ucLfJB6iAH2/BYqsXdnoOMjeLwWrCDI7BXprJCFMC5FVs973vOEn
6H4teqN3VLD3IOOLPBQiemJActAi/b8jyEUCvkiNxwZLHmddgt23cBS+PAE/3Hgh
GrnO2mYDB8YS5yrIVXhmylRfGeyR+aR0ynrToOjFc7F97m0OMEHFNochAi1BTR2y
HxKQrzaSa/9ImAwLyhkDHrl+rfrihZN01uWmIchH5q1Tt4yPJi83G6ju3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD+c3tzD9Y1YK8xRXvAJDXvftECMB8GA1UdIwQY
MBaAFNtZvOYbqdKg41W+AfE0G433auvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWIt
M2EwNDJmNzdiNzM4LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWItM2EwNDJmNzdiNzM4
LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfhg/98R
f2k1TxMmOO5XVqz7zw7KtRo/4j8DjKdnrfMTfIgMGjKqM7REi8GSRUA2paV5Bh4v
fYtsF/nydbYM/qrJPv3YTNCfFx4qVd3/6VGaqSiX0xn6oJMamWtc8AiJfTgMw+PM
P7viydSiBQXiCmwTfFpNh+GABZ9ImrjsriFOtyB7stzHHO0DLBHmX16NafvUy3Zz
fH/Llf0jfTpYD2AVd0K0fJYEP8CZyTaxceSv65zv4LpB3k6m514cd982TKvOHSAV
VtRna1XXte65byn4TL0kctYlhz0+LOZgYuxy9/rD4ynTUql3vpx1hRdL+YC68WVk
TdioGLD7kUDnQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:03 2026 by rpki-client