Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier: P3tgNwk5L3vp0VkyTq6glxDMz9abSpbsodDMDf3Xj6k=
Subject key identifier: C0:85:9C:A5:2C:AB:B8:32:44:1B:6B:70:E3:1C:12:B5:65:90:88:E9
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial: 019D38D2DB6481E4D6C2A2E00C088B0B8D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: Ni5NJ9xjAkq6h3FT5TNEC3MpmAPKgxiGiL51m2uNcJk=)
2: rQtAzEA3IuNuehdcnThK_xXRMt4.roa (hash: cRYFONZaNIX4ZtEkAVHlLM1U8vITX1Zqs8J2LZhQlqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:db:64:81:e4:d6:c2:a2:e0:0c:08:8b:0b:8d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=c0859ca52cabb832441b6b70e31c12b5659088e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:38:42:fd:a3:0f:a1:2e:8a:3e:88:e4:01:
44:64:2d:27:c6:05:95:dd:89:69:5d:89:11:4d:1d:
61:85:ac:9f:46:90:4d:93:3e:9f:f1:02:50:92:46:
06:4b:a5:34:d7:dc:b1:ed:93:4f:ea:e7:1f:90:fe:
db:ee:31:e2:05:76:73:4f:3d:3e:58:0b:e2:2e:07:
32:c9:46:c1:c5:6d:d6:0f:f9:6a:f1:c0:e2:14:9d:
60:34:f5:f7:eb:a5:90:61:b6:d8:fc:53:57:a0:d5:
87:f9:67:01:e2:fa:92:2b:a6:7c:04:39:42:bf:52:
8b:9d:71:d1:93:d3:a3:bf:e2:67:e9:83:6e:2b:00:
bc:fe:88:93:a8:9e:03:1c:c4:47:c0:54:29:61:83:
e2:da:f1:e5:c0:bf:12:0c:a7:a4:27:b4:78:be:e6:
58:b9:eb:b9:15:41:d9:b4:cb:84:eb:aa:b6:67:de:
fe:f3:ba:33:25:12:c4:ac:46:4d:3e:8e:f9:bb:95:
10:ee:d3:f7:e6:41:1f:04:6f:61:df:7e:e9:a5:cd:
07:e4:2c:b1:e8:9e:29:ac:fe:f4:95:99:7b:f4:4f:
fb:b0:c7:7c:b6:39:7e:15:27:09:ba:00:52:40:f0:
cb:dc:6f:63:fa:f9:d7:bb:90:cb:3d:01:a6:e7:0c:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:9C:A5:2C:AB:B8:32:44:1B:6B:70:E3:1C:12:B5:65:90:88:E9
X509v3 Authority Key Identifier:
keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:8c:ba:bd:9d:00:65:a2:fd:21:73:be:5a:ec:d3:1f:8f:
d8:8a:af:77:3e:4a:32:87:59:df:ad:3a:e5:71:e7:a5:17:06:
ea:d4:a7:5c:75:f7:4d:5a:82:ad:7d:58:32:f1:cf:46:83:ca:
e6:76:cc:8a:00:72:6b:e2:09:f8:f8:49:4f:60:f4:c4:17:8c:
e8:19:88:4f:1c:d4:33:91:3d:32:37:d3:a9:7d:30:ee:f9:39:
b1:52:58:02:59:4b:ba:fb:ee:d8:35:db:74:90:28:11:bc:ac:
ae:ca:01:5d:90:d6:37:03:af:5b:7d:0d:c3:d0:0e:7b:7a:78:
2a:52:f9:94:d3:c4:0e:07:b6:96:b4:18:19:e6:d9:b9:83:79:
f6:3a:63:49:84:d8:f2:38:bf:fb:ef:4b:ba:87:99:60:da:8d:
01:a1:88:1b:ed:7d:96:c5:47:3a:2a:f1:aa:51:3b:41:0b:6f:
d1:40:48:57:9d:1a:aa:b0:e7:b8:2b:a7:d0:51:90:78:e5:0e:
a1:92:5f:2f:a0:6d:4e:70:c6:15:3c:23:60:79:76:5c:5d:01:
2a:60:a3:db:21:5c:97:29:df:6a:bd:ee:ac:d5:91:e8:a1:b4:
e6:12:e6:f3:4f:60:b1:ee:53:1c:40:ef:0b:19:32:da:a3:e7:
1f:1e:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:53 2026 by rpki-client