Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: mxTWnJ0Z00/Ae/IpWbe23VWOfdfXnpPvi1OS4LHW8yA=
Subject key identifier: 1F:C4:E9:BF:8F:A0:45:3E:74:35:76:3D:AF:0A:FA:F8:B8:0E:F8:BA
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 01A181505918EC5636203E5391CF2A29002D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 12A2
Signing time: Wed 28 Oct 2026 07:01:28 +0000
Manifest this update: Wed 28 Oct 2026 07:01:28 +0000
Manifest next update: Thu 29 Oct 2026 07:01:28 +0000
Files and hashes: 1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: +N4MtjhM57zDXfNhKTsbaMRb03Mxi2hVqfU6XOGspGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:59:18:ec:56:36:20:3e:53:91:cf:2a:29:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Oct 28 07:01:28 2026 GMT
Not After : Oct 29 07:01:28 2026 GMT
Subject: CN=1fc4e9bf8fa0453e7435763daf0afaf8b80ef8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:d0:e6:1e:5f:05:03:8f:98:31:01:8a:ee:
03:c0:03:50:fa:6f:75:c0:14:ec:b9:03:bb:99:05:
07:1f:ce:eb:c2:aa:73:b3:74:93:41:13:58:67:5d:
e7:03:38:4e:fa:b8:ed:b7:39:94:8d:14:a2:b5:0b:
ef:7a:ac:15:a8:79:20:48:9a:c9:95:88:9b:f3:90:
7e:68:5b:40:82:a2:c8:8f:b8:77:2f:18:ee:c7:56:
83:54:35:36:75:9e:21:d7:6a:3b:32:ff:8c:64:be:
66:7e:f0:70:a2:8e:7b:15:47:b7:cf:ec:83:69:e6:
c8:48:de:f7:9f:5e:ef:6b:ba:1c:e5:57:94:ab:be:
75:8e:8a:38:3f:80:29:bc:a8:4f:e4:ee:cd:9a:81:
27:6f:f3:2c:dd:7f:01:bc:9c:fe:3f:24:a2:c5:bc:
75:76:a2:87:cb:12:7c:ab:79:26:49:38:b8:94:80:
00:e4:23:11:4a:4b:d3:49:59:f3:96:60:b8:c1:95:
07:90:5a:a4:34:c2:af:93:67:82:5a:7a:fe:a8:de:
e5:ad:2a:68:ea:ba:91:36:7f:c8:b3:a0:d7:c9:a9:
90:65:91:a7:e1:59:5f:15:37:36:f9:b4:a9:1f:13:
67:e8:f5:7c:a4:87:bc:58:07:6a:7a:1e:5a:7a:9f:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:E9:BF:8F:A0:45:3E:74:35:76:3D:AF:0A:FA:F8:B8:0E:F8:BA
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a6:fb:3e:4f:bf:74:3d:a0:20:4b:7c:89:fc:ab:4f:ac:97:
d6:85:4d:a1:53:f3:db:70:55:42:18:bd:46:c6:d3:32:3b:b2:
f2:58:49:86:3f:0d:1d:3e:fd:3f:3e:fd:d0:8b:76:71:8e:0a:
a6:bb:96:05:46:79:bc:d2:7d:1d:a0:48:1a:b9:a6:d0:3b:5b:
25:1e:e5:46:02:a5:c3:f5:35:9d:74:b9:68:0a:3e:8f:1a:d1:
31:e0:1c:d0:ff:76:00:61:6e:2a:54:c3:b3:c4:de:fe:1b:45:
ea:50:8a:e0:ed:df:9a:20:0b:8d:b8:07:8d:15:7a:a1:87:5b:
e6:02:45:8b:80:c8:e1:0d:75:6e:c1:d1:9e:e7:3d:0b:73:8f:
0d:25:28:b1:95:f1:41:62:77:42:a2:f2:43:03:0a:8e:e1:c1:
eb:0d:fd:c8:38:63:e6:9b:ae:0e:29:8d:06:de:43:2f:fc:95:
24:33:68:bc:c7:ca:0a:dc:25:3e:4d:74:ff:26:f5:88:11:9f:
76:48:46:9b:03:ed:51:72:a5:a7:78:8d:56:a5:9f:41:d8:dc:
e3:78:e3:83:95:fa:d4:3d:72:f4:3a:62:87:e5:ec:07:20:b7:
52:c0:63:7d:13:ec:14:45:12:0d:6a:5e:ff:3b:4f:58:82:8c:
4f:6f:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:52:11 2026 by rpki-client