Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier: 1HMwl18bsHKWps8zk4EczOk26T+6YNZu1tw3FxfJjYI=
Subject key identifier: 1A:B0:9C:6A:69:CA:AD:08:F9:A4:C5:02:A0:06:83:E8:A4:AC:48:5D
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial: 019F90FEAF9486A6CB0C4A7D5333EC5E7F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number: 0938
Signing time: Thu 23 Jul 2026 22:00:37 +0000
Manifest this update: Thu 23 Jul 2026 22:00:37 +0000
Manifest next update: Fri 24 Jul 2026 22:00:37 +0000
Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: bQATcGGK3sToClxq3Ev1/qiGozVDlWFnGr6XVlIKIDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:af:94:86:a6:cb:0c:4a:7d:53:33:ec:5e:7f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Validity
Not Before: Jul 23 22:00:37 2026 GMT
Not After : Jul 24 22:00:37 2026 GMT
Subject: CN=1ab09c6a69caad08f9a4c502a00683e8a4ac485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:be:61:57:64:6c:3a:9c:b4:16:a2:37:03:
70:a6:e5:83:25:27:1a:39:2b:ff:00:73:c6:dd:61:
c2:99:df:20:bb:0a:cc:f7:1b:7d:4c:b8:4d:8a:65:
e3:54:6e:82:a9:cc:80:ff:4f:30:cf:2d:e9:ad:41:
12:1f:d2:4b:0a:5e:0e:b2:70:f8:c4:c1:5d:7f:51:
f7:6b:98:42:3d:5a:cd:05:86:19:6f:07:74:77:27:
ab:06:e7:ea:e9:9e:ff:b6:75:9e:d5:69:bc:0f:b1:
06:70:86:2b:c0:67:cc:cd:79:39:db:08:3c:f4:06:
b1:b2:4f:12:cb:48:0a:6c:10:29:0b:71:48:36:cc:
80:d6:1d:d9:5f:0c:5a:1a:dd:4f:e7:0e:e3:3a:60:
68:44:80:bf:d4:38:82:8e:0e:5a:d3:ba:a7:54:e6:
16:8b:ea:8b:3e:11:c4:39:57:25:44:f2:98:5f:f1:
5c:b1:7e:aa:5d:75:58:cf:fa:3b:67:9b:ff:25:4e:
84:a8:c2:49:01:69:dd:35:9a:47:c8:cf:84:24:6f:
01:13:f2:9e:7b:1f:3d:66:01:50:78:e3:38:e6:2b:
dd:c1:c7:5e:b2:e8:7b:06:08:9c:57:8b:f6:b0:5f:
d3:4e:71:ae:09:00:58:fe:3c:30:33:66:2b:e6:92:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:9C:6A:69:CA:AD:08:F9:A4:C5:02:A0:06:83:E8:A4:AC:48:5D
X509v3 Authority Key Identifier:
keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:91:a9:52:c0:84:dc:4b:bf:bf:66:60:7e:b5:29:31:2b:31:
f2:af:d2:89:a7:65:d5:48:b9:2c:20:cb:20:db:10:26:90:e0:
9d:17:ce:56:ae:13:5d:5a:ea:35:4f:31:89:a9:2d:e3:53:ab:
ff:e7:bd:7d:7e:f1:3f:4e:74:b6:65:7f:95:9f:20:0b:53:25:
2c:83:bd:a6:80:db:01:1c:12:62:e8:04:66:b7:6e:f5:12:69:
95:f0:26:41:cd:95:02:68:85:ab:67:06:28:c3:ac:9a:91:9b:
16:1e:1e:ce:d2:60:8c:45:65:c4:ed:3a:05:46:7f:d5:16:74:
f3:87:4d:0b:f2:be:a4:da:10:2c:2d:4b:92:b7:7c:a2:ea:f0:
fb:b1:7a:c1:20:99:33:c7:16:01:f5:1a:1b:73:af:6e:c6:e7:
ec:4b:0a:d1:7d:8e:e0:3b:9d:17:fb:01:eb:6c:06:a4:e0:bb:
b5:99:86:4c:00:f8:61:ab:8c:72:a4:05:d2:ee:39:f5:1d:f9:
da:b0:3b:b0:9f:0a:9d:e1:c6:25:c2:40:d0:b3:9c:56:c1:84:
8f:a4:c1:93:78:2c:be:95:df:e3:01:2f:c2:8d:16:bd:41:49:
16:53:75:a1:bf:1e:d2:25:4c:33:b6:64:ec:9a:b2:fd:df:7f:
89:01:14:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Q/q+UhqbLDEp9UzPsXn+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWQyMjg4MDM1ZTQwNTZlYjBjZWMxNTQ0NmEwYzQxODBk
MjZlYTQwHhcNMjYwNzIzMjIwMDM3WhcNMjYwNzI0MjIwMDM3WjAzMTEwLwYDVQQD
EygxYWIwOWM2YTY5Y2FhZDA4ZjlhNGM1MDJhMDA2ODNlOGE0YWM0ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgy+YVdkbDqctBaiNwNwpuWDJSca
OSv/AHPG3WHCmd8guwrM9xt9TLhNimXjVG6CqcyA/08wzy3prUESH9JLCl4OsnD4
xMFdf1H3a5hCPVrNBYYZbwd0dyerBufq6Z7/tnWe1Wm8D7EGcIYrwGfMzXk52wg8
9Aaxsk8Sy0gKbBApC3FINsyA1h3ZXwxaGt1P5w7jOmBoRIC/1DiCjg5a07qnVOYW
i+qLPhHEOVclRPKYX/FcsX6qXXVYz/o7Z5v/JU6EqMJJAWndNZpHyM+EJG8BE/Ke
ex89ZgFQeOM45ivdwcdesuh7BgicV4v2sF/TTnGuCQBY/jwwM2Yr5pLa2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBqwnGppyq0I+aTFAqAGg+ikrEhdMB8GA1UdIwQY
MBaAFPutIogDXkBW6wzsFURqDEGA0m6kMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02MGlpQU5lUUZickRPd1ZSR29NUVlEU2JxUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJmLWMwNjUtNDhkMS1hZmNl
LTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dWUkdvTVFZRFNicVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IyL2E2YjBiZi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1
Y2IvMS8xLTYwaWlBTmVRRmJyRE93VlJHb01RWURTYnFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZGp
UsCE3Eu/v2ZgfrUpMSsx8q/Siadl1Ui5LCDLINsQJpDgnRfOVq4TXVrqNU8xiakt
41Or/+e9fX7xP050tmV/lZ8gC1MlLIO9poDbARwSYugEZrdu9RJplfAmQc2VAmiF
q2cGKMOsmpGbFh4eztJgjEVlxO06BUZ/1RZ084dNC/K+pNoQLC1Lkrd8ourw+7F6
wSCZM8cWAfUaG3Ovbsbn7EsK0X2O4DudF/sB62wGpOC7tZmGTAD4YauMcqQF0u45
9R352rA7sJ8KneHGJcJA0LOcVsGEj6TBk3gsvpXf4wEvwo0WvUFJFlN1ob8e0iVM
M7Zk7Jqy/d9/iQEUqA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:17 2026 by rpki-client