Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: gSpMdfsEZnsdRgB2x90/OcWbRgWMiBWQtCAIS9XrxKw=
Subject key identifier: 60:E5:59:1F:AD:25:98:1E:09:1C:09:CA:37:B9:07:C6:1C:4E:EE:30
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019D3909850CAF036CB42B9B567CF8C91EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 097A
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (hash: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc=)
2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: Lq6vvoYqraeuHePv5spCz8n72UHDiaqrkYol+7Eyxm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:85:0c:af:03:6c:b4:2b:9b:56:7c:f8:c9:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=60e5591fad25981e091c09ca37b907c61c4eee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:62:08:e0:95:86:25:b5:84:ee:4c:c0:7d:
63:dd:2b:ba:6f:a4:d8:c3:99:7a:6d:88:49:0a:05:
66:99:b6:e6:d5:0c:cc:f3:1e:fd:19:e5:e7:ed:c4:
ad:0f:c7:bf:51:1e:f4:b3:88:e8:7f:b2:5c:29:96:
ff:69:f7:8d:50:b5:cc:41:48:fe:25:10:77:e7:d3:
3b:71:8e:3a:47:5d:9b:e9:6e:db:06:5a:37:2d:14:
9e:2c:73:75:19:62:35:df:b7:e0:c9:75:ad:03:e6:
2b:4e:35:8b:44:3f:dc:d8:4d:85:23:d6:ab:0a:b1:
35:5c:3e:cf:33:8e:15:fe:bb:38:97:57:2b:d3:84:
ff:b1:91:4a:fa:0c:89:dc:e5:81:97:d6:ac:84:fe:
ce:97:57:fe:83:f1:07:68:a5:70:d3:42:64:dc:48:
ff:6a:9e:5d:e0:c3:05:6a:11:a1:e0:f1:a2:c6:29:
2b:88:42:e3:3b:2c:b6:01:36:b2:31:11:5a:9a:55:
3d:58:a3:58:1f:de:01:4a:33:a2:30:5e:b8:04:bf:
67:d6:ad:fe:9b:b2:81:c2:09:6b:d7:52:a4:c8:11:
3e:a9:f5:dd:57:b4:aa:b3:54:d2:e6:86:21:b4:ef:
d2:53:0b:35:a0:8c:ec:e6:cd:2f:79:17:30:e0:6e:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E5:59:1F:AD:25:98:1E:09:1C:09:CA:37:B9:07:C6:1C:4E:EE:30
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:df:87:8a:a6:aa:79:1e:f4:ed:18:c8:d4:6c:8b:f1:9e:f0:
22:0a:eb:4c:18:34:63:47:63:e2:8d:63:c8:2b:55:05:30:c5:
6d:4d:c7:c5:a9:88:02:f6:51:17:a7:0b:07:ba:85:76:af:78:
d3:af:d4:57:46:3a:d7:34:8b:4f:72:5e:35:99:ae:ea:34:1d:
e1:4d:ea:87:8a:d0:e6:06:60:af:07:ab:a6:f2:f7:6d:37:76:
70:33:86:2f:6b:10:35:c4:f1:86:17:2f:e5:bc:fe:62:3d:cf:
6b:ba:9f:45:5d:05:67:71:84:5f:96:65:cb:17:00:df:5c:b8:
55:cd:92:26:f6:fe:ad:68:4f:ac:9c:90:c2:2c:9e:d3:c1:4c:
4e:33:ad:b5:e7:74:b7:14:1c:f2:a5:6c:69:fb:5c:0e:10:12:
2b:12:1f:b1:4e:3d:7e:80:85:60:a3:17:c3:6e:96:0b:d9:1b:
ad:c6:11:f6:ea:1b:1c:08:2f:e8:06:f9:1f:5d:5e:8b:56:f3:
8a:35:97:a5:d3:5d:66:1c:dd:b5:4d:a5:1a:fc:28:59:d5:5e:
c9:bf:df:00:63:7a:8f:b5:bc:30:c8:5d:43:88:19:67:75:1d:
58:13:95:cc:a4:04:e7:1c:99:6c:ee:b2:f8:9a:63:6f:0b:2e:
b0:ce:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:42 2026 by rpki-client