Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: RW2LhTZ93vt7MVZY2pFO38bNdCyn4prmIHbdBZN2UDs=
Subject key identifier: 5D:9E:BC:43:37:8D:1B:48:27:52:E4:9E:46:9B:E0:0C:28:60:82:23
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 019D3909A50C4FFD8386D399FD0A0FA0E0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 0D04
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: YKAEV1m5XmvgJTRrjLwD6CFrSx4EwJhc/Tj1xnNnPtE=)
2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a5:0c:4f:fd:83:86:d3:99:fd:0a:0f:a0:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=5d9ebc43378d1b482752e49e469be00c28608223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:44:2e:52:05:d9:52:43:8c:33:d1:4a:f5:
30:1a:2d:f1:9b:f2:13:75:19:5a:f8:76:c9:d7:52:
b7:08:b8:25:69:ab:5f:d2:79:0b:1d:29:a5:28:b8:
0c:e4:6c:13:3d:27:08:ae:29:f0:d3:c5:c2:a6:a4:
79:7b:d6:a3:d6:e5:c5:13:0f:ad:63:20:7c:80:d1:
bf:26:a0:4c:8c:22:90:b1:1d:f6:ae:41:a7:e8:40:
7f:70:42:d4:92:ac:a0:5c:a7:9f:a3:fe:6e:16:07:
23:5e:e9:e7:d7:e4:de:88:af:cc:2c:14:4f:cc:8e:
5b:70:df:d9:d2:58:ba:18:d4:36:dd:41:3f:31:b6:
a3:16:55:f2:35:88:1f:ce:94:19:4b:fd:21:20:bd:
0a:66:cc:9a:4f:20:40:0b:f9:23:7c:52:3a:94:81:
6c:d0:f7:f1:1e:1f:f4:07:32:b2:64:7a:40:65:d7:
0b:fc:03:de:fc:8e:81:29:55:17:9d:07:40:e5:98:
68:83:05:69:42:00:62:94:7d:5c:ae:83:96:9e:e4:
74:77:e1:e8:25:30:b8:79:9f:63:ad:37:37:d9:c0:
63:eb:96:0c:19:67:67:0f:b0:b9:17:15:8a:ae:b8:
b8:08:18:6f:89:d5:2a:16:95:40:a0:a2:5f:2e:39:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9E:BC:43:37:8D:1B:48:27:52:E4:9E:46:9B:E0:0C:28:60:82:23
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:89:27:d8:db:22:39:31:e7:47:1f:23:61:4a:cd:3c:72:79:
a7:e5:ed:ba:4d:6d:15:5d:2a:bf:83:11:b1:09:14:e6:93:bb:
fb:61:2e:d2:36:ee:f0:d1:e3:c9:e9:c1:62:31:69:41:53:f6:
57:47:ac:59:3b:10:c2:a7:3b:1b:2e:17:27:52:c1:f9:36:df:
10:51:0d:36:2a:31:ae:9b:c5:34:02:8a:5b:3d:81:68:94:39:
3b:3f:38:1c:33:a1:b6:b4:d0:51:f2:34:55:d2:e1:96:44:a9:
c1:22:c3:26:d2:e4:9a:52:89:6c:e3:dd:7c:7d:3b:12:4c:b6:
5d:37:c5:86:9a:d2:34:8c:b1:a9:fb:2c:49:90:c7:e6:83:27:
8b:ea:72:2c:a0:20:0c:df:b0:37:54:4f:c8:de:79:7e:94:b9:
9e:30:c3:16:bf:6f:bf:da:52:18:f2:da:04:55:0f:07:d6:56:
f5:a9:ef:e7:2c:36:f3:3a:e2:67:4a:85:69:ee:db:4f:25:a9:
2c:fd:53:0e:b7:a4:11:0e:af:a9:5a:e6:d4:87:c4:a9:08:7d:
38:f9:a5:a2:35:0d:0d:df:2b:8c:9e:5f:cf:95:05:36:a7:9b:
fa:5d:03:1a:af:a3:b2:f6:66:08:06:4c:08:e2:b1:ef:ce:6d:
6f:22:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:31 2026 by rpki-client