Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
File: i60BoLmQw5T9iervn-IbiCjdd2A.mft (raw, json)
Hash identifier: NjP9qMk3rEo3rhdXsjN/w2R9rIxKV0l0HqTeL5aDOHg=
Subject key identifier: 0F:8B:0A:2A:59:D8:5F:13:4C:AE:B9:04:92:91:44:36:35:DA:89:EB
Authority key identifier: 8B:AD:01:A0:B9:90:C3:94:FD:89:EA:EF:9F:E2:1B:88:28:DD:77:60
Certificate issuer: /CN=8bad01a0b990c394fd89eaef9fe21b8828dd7760
Certificate serial: 01A0DD60209DF31674A4D40D45A5FCD3A60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
Manifest number: 71
Signing time: Sat 26 Sep 2026 11:00:59 +0000
Manifest this update: Sat 26 Sep 2026 11:00:59 +0000
Manifest next update: Sun 27 Sep 2026 11:00:59 +0000
Files and hashes: 1: N6vQ7eGFbv_RL9EdI5U6EBK2p18.asa (hash: Fch7QVZ3P8cmumoOPv9qqT9H9WtThkx1Vup3ZvTYhII=)
2: i60BoLmQw5T9iervn-IbiCjdd2A.crl (hash: 4neDKNvm9LGL0WsD10qV7p/jBYcwKj2Ei7zAXOBoWbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:20:9d:f3:16:74:a4:d4:0d:45:a5:fc:d3:a6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bad01a0b990c394fd89eaef9fe21b8828dd7760
Validity
Not Before: Sep 26 11:00:59 2026 GMT
Not After : Sep 27 11:00:59 2026 GMT
Subject: CN=0f8b0a2a59d85f134caeb9049291443635da89eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:db:f6:4f:4a:32:b7:99:45:70:42:0f:e5:
d7:0d:ad:72:f9:50:e8:d7:14:2a:8c:e5:eb:cb:2d:
12:50:b6:d6:aa:00:f1:63:f1:ea:66:81:73:1d:66:
1e:aa:ca:f3:5f:79:f7:aa:9d:9f:af:83:a9:4a:79:
35:8a:ef:25:bb:fc:4e:55:c4:45:f7:bf:9f:2b:bb:
fc:00:38:94:dd:34:13:10:10:c8:05:e2:ab:98:53:
8a:37:69:43:82:26:9d:26:6e:eb:58:3c:d2:1d:9d:
44:90:04:7e:21:dc:2b:db:39:86:b5:2c:bf:48:a4:
38:10:d3:b8:39:bd:3f:9c:c0:2d:72:9d:38:e5:4c:
8e:50:71:2d:44:76:54:23:a8:80:80:2c:dd:f2:d0:
23:f7:d0:e7:68:6a:44:3e:03:b6:d5:38:73:78:c7:
34:8e:4a:e9:76:14:d8:5c:34:a6:4f:62:db:71:1e:
28:44:7b:13:ae:b6:fc:12:df:e8:69:85:02:f4:ce:
f4:8c:38:61:22:89:c0:c4:8e:ea:83:37:6a:66:7f:
1b:92:4e:11:8b:df:b3:b4:e2:31:97:c0:06:e1:c9:
bc:9c:e4:46:0d:c1:1d:37:c4:44:db:d7:ae:02:7a:
ad:a4:9d:b0:78:95:22:7f:44:bb:70:d2:9e:95:7b:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:0A:2A:59:D8:5F:13:4C:AE:B9:04:92:91:44:36:35:DA:89:EB
X509v3 Authority Key Identifier:
keyid:8B:AD:01:A0:B9:90:C3:94:FD:89:EA:EF:9F:E2:1B:88:28:DD:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:66:65:98:21:2d:44:c6:ed:72:4b:c4:2d:e4:3c:b1:cc:
39:c8:83:e8:ea:67:a1:3c:c8:a5:9e:76:ff:29:7d:da:83:5d:
31:8a:9c:3d:43:17:db:fe:e2:4c:85:81:ba:1f:7c:a0:6c:60:
df:0c:f1:9b:33:4e:9e:0d:1d:c7:b2:bf:b7:53:4d:52:07:bf:
6b:4b:bf:d7:14:1d:ec:9e:f5:9e:cf:42:76:1f:46:0c:34:da:
cf:28:2c:1d:74:db:02:b6:9f:4a:29:04:2b:b1:02:06:38:52:
da:50:98:13:fe:f7:54:2b:4c:52:14:cb:c7:b8:59:86:5f:6b:
41:3b:d9:7f:a0:24:9c:7d:b0:a8:ea:3c:9c:52:fd:11:71:57:
5d:89:08:7a:00:8d:9c:a0:bd:86:8e:53:7c:80:82:8b:22:f0:
b4:54:52:03:1f:25:72:c2:4d:2e:3e:0d:13:d5:53:7b:14:2b:
2a:bf:5a:fe:c5:00:c2:63:1f:11:bf:45:28:bf:23:cc:ee:fb:
d1:22:84:0f:ee:ab:4f:af:4b:e1:2e:da:c3:78:d3:67:c5:b4:
cb:1a:e3:fb:e5:38:bf:4c:b8:a9:f4:d2:c7:5a:c6:43:2c:18:
43:28:58:f8:22:7f:e0:d4:0f:4d:4a:ff:62:95:48:4e:b0:68:
b6:2e:aa:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYCCd8xZ0pNQNRaX806YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWQwMWEwYjk5MGMzOTRmZDg5ZWFlZjlmZTIxYjg4Mjhk
ZDc3NjAwHhcNMjYwOTI2MTEwMDU5WhcNMjYwOTI3MTEwMDU5WjAzMTEwLwYDVQQD
EygwZjhiMGEyYTU5ZDg1ZjEzNGNhZWI5MDQ5MjkxNDQzNjM1ZGE4OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ3b9k9KMreZRXBCD+XXDa1y+VDo
1xQqjOXryy0SULbWqgDxY/HqZoFzHWYeqsrzX3n3qp2fr4OpSnk1iu8lu/xOVcRF
97+fK7v8ADiU3TQTEBDIBeKrmFOKN2lDgiadJm7rWDzSHZ1EkAR+Idwr2zmGtSy/
SKQ4ENO4Ob0/nMAtcp045UyOUHEtRHZUI6iAgCzd8tAj99DnaGpEPgO21ThzeMc0
jkrpdhTYXDSmT2LbcR4oRHsTrrb8Et/oaYUC9M70jDhhIonAxI7qgzdqZn8bkk4R
i9+ztOIxl8AG4cm8nORGDcEdN8RE29euAnqtpJ2weJUif0S7cNKelXtw0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+LCipZ2F8TTK65BJKRRDY12onrMB8GA1UdIwQY
MBaAFIutAaC5kMOU/Ynq75/iG4go3XdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTYwQm9MbVF3NVQ5aWVydm4tSWJpQ2pkZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iOGJhN2MtM2MwNC00ZWY5LTk4OWQt
ZGZhODY0OTE0Y2NlLzEvaTYwQm9MbVF3NVQ5aWVydm4tSWJpQ2pkZDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iOGJhN2MtM2MwNC00ZWY5LTk4OWQtZGZhODY0OTE0Y2Nl
LzEvaTYwQm9MbVF3NVQ5aWVydm4tSWJpQ2pkZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwFmZZgh
LUTG7XJLxC3kPLHMOciD6OpnoTzIpZ52/yl92oNdMYqcPUMX2/7iTIWBuh98oGxg
3wzxmzNOng0dx7K/t1NNUge/a0u/1xQd7J71ns9Cdh9GDDTazygsHXTbArafSikE
K7ECBjhS2lCYE/73VCtMUhTLx7hZhl9rQTvZf6AknH2wqOo8nFL9EXFXXYkIegCN
nKC9ho5TfICCiyLwtFRSAx8lcsJNLj4NE9VTexQrKr9a/sUAwmMfEb9FKL8jzO77
0SKED+6rT69L4S7aw3jTZ8W0yxrj++U4v0y4qfTSx1rGQywYQyhY+CJ/4NQPTUr/
YpVITrBoti6qDA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:16 2026 by rpki-client