Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: opEVb5MgMOtbY1zfyN67TNarZRWnhcy9d++23xqtHxQ=
Subject key identifier: 3B:12:1A:07:48:13:E1:0E:28:1F:6C:B9:F9:00:B5:9A:FE:BD:D9:D9
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 019F17F9E8BB1B3B324DAD721DB820560F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 0DFC
Signing time: Tue 30 Jun 2026 10:01:21 +0000
Manifest this update: Tue 30 Jun 2026 10:01:21 +0000
Manifest next update: Wed 01 Jul 2026 10:01:21 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: IDSruDyPMljBi9QE8EiiFYOKVtEHtQX+QNp1O0t2a5w=)
2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:e8:bb:1b:3b:32:4d:ad:72:1d:b8:20:56:0f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Jun 30 10:01:21 2026 GMT
Not After : Jul 1 10:01:21 2026 GMT
Subject: CN=3b121a074813e10e281f6cb9f900b59afebdd9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:57:b1:ac:d7:46:40:ae:63:5d:54:69:b8:
06:34:97:27:1a:b8:aa:24:4d:6c:c3:94:2f:5c:f0:
9e:5c:7e:96:8e:d2:fc:1f:65:8e:dc:e0:ef:17:ca:
04:c1:42:64:5d:45:97:b5:ae:ab:27:b3:2a:f2:a9:
f8:37:7b:ed:9f:53:9c:2c:bd:cf:9a:7f:95:63:8d:
d6:f1:b3:fa:8d:8f:10:82:d2:1a:6d:9b:54:15:07:
9e:6d:02:39:82:84:6e:75:fe:a3:89:8f:7a:fe:1e:
b8:ff:85:82:4c:5b:c8:a9:bf:fd:41:5b:a9:92:e0:
af:d8:85:4a:99:d9:5e:a2:6d:8e:cd:87:4d:3e:6c:
e8:c7:54:7b:c7:f3:7b:9b:dc:32:25:e3:59:98:a4:
65:4a:15:da:23:49:cf:6e:65:1a:92:b6:09:67:31:
c2:e7:c9:eb:50:22:1d:ec:81:bd:da:37:c7:b4:b1:
2c:71:60:2b:56:08:ec:48:32:e3:8f:33:17:80:84:
62:34:08:40:8c:37:44:ec:86:a3:f5:c9:50:1e:2e:
72:e3:30:21:24:f8:b8:c4:dd:94:f9:e2:54:39:40:
2e:85:0c:86:e5:a8:4e:f6:bd:65:ba:2a:3f:97:40:
57:8f:0e:5d:25:b1:6d:46:2b:7e:17:90:9d:56:46:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:1A:07:48:13:E1:0E:28:1F:6C:B9:F9:00:B5:9A:FE:BD:D9:D9
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:38:ea:8b:80:5d:81:b9:2a:fa:00:b4:4b:32:75:32:34:
78:1e:23:d9:a0:2f:01:a3:bd:b2:f2:08:e7:15:87:95:7d:ac:
28:ef:a3:2e:f0:03:5d:83:ed:b7:76:79:65:bd:fb:b0:1e:53:
76:56:75:78:a0:c8:a9:ff:00:e4:96:0d:f6:73:37:20:6d:4a:
68:a0:f6:a0:29:18:bc:6f:83:73:a1:26:3c:25:77:2f:89:b0:
c2:3b:91:c5:4a:1c:0b:0a:69:b9:cd:16:08:ee:8b:75:b8:e3:
69:c5:71:e3:54:4f:c0:85:bd:fe:df:a2:6b:91:04:bd:f2:02:
09:0d:4c:c3:a1:19:d3:73:3c:fa:23:87:96:08:f3:26:67:23:
08:db:b6:d3:f5:1c:af:66:31:40:8b:b5:1b:36:f4:82:3c:78:
c9:12:7a:b9:d5:25:02:0a:b6:66:1a:53:e0:cf:a8:61:37:ff:
6b:82:fd:50:dc:7f:90:b2:6e:b8:96:23:87:0a:a2:59:d1:39:
d1:1e:a4:a8:d7:e1:35:86:9d:20:a7:d4:4e:43:c5:1e:c0:67:
82:75:33:fa:ce:dd:bb:3c:b0:73:77:56:88:57:09:d3:e1:67:
e9:79:df:73:70:ce:95:9f:a7:d9:90:88:69:a3:9a:93:53:2f:
53:a4:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:03 2026 by rpki-client