Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
File: 960EaCOkpawZj0BdOYQ0moNlwWE.mft (raw, json)
Hash identifier: NsgRYAPvhNf2HzS3IJtHCtBVqESys2U0d0z+4S7hcDo=
Subject key identifier: 4F:21:9B:E7:A3:20:0C:13:DD:0E:0E:F5:4E:99:56:03:01:84:DD:E8
Authority key identifier: F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
Certificate issuer: /CN=f7ad046823a4a5ac198f405d3984349a8365c161
Certificate serial: 019FD3165D256128DF6AE0564AB49E924B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
Manifest number: 62
Signing time: Wed 05 Aug 2026 18:01:25 +0000
Manifest this update: Wed 05 Aug 2026 18:01:25 +0000
Manifest next update: Thu 06 Aug 2026 18:01:25 +0000
Files and hashes: 1: 960EaCOkpawZj0BdOYQ0moNlwWE.crl (hash: l/JIxQMr2q0Gxb4a/3YlylrajfkwNtNL+B7IN3CXtV8=)
2: bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa (hash: FrGHJvzVXHIulkPnWqo3gyts46hg4UH5BktvMTcKuRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:16:5d:25:61:28:df:6a:e0:56:4a:b4:9e:92:4b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ad046823a4a5ac198f405d3984349a8365c161
Validity
Not Before: Aug 5 18:01:25 2026 GMT
Not After : Aug 6 18:01:25 2026 GMT
Subject: CN=4f219be7a3200c13dd0e0ef54e9956030184dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:be:c0:1f:50:d5:60:ad:59:7f:d9:e2:ee:
8b:03:53:29:07:49:52:dd:5e:bb:6d:90:58:4f:53:
9c:75:99:63:b4:9b:98:dd:49:76:da:52:8e:40:ca:
88:9f:95:bf:69:d0:65:9d:e6:b0:17:16:c7:a3:44:
9c:c8:ef:d8:78:d5:0e:cc:e6:c7:34:a5:52:ef:dc:
c3:5c:71:1f:83:98:e4:18:15:a5:1c:4d:4f:7e:8c:
85:95:67:ce:8e:09:c7:21:b4:a8:d0:0a:9b:e2:e0:
ae:66:6b:c9:a2:3d:a3:a3:4c:41:40:20:b0:bf:0a:
0b:c3:81:fe:d9:19:ec:00:15:f5:14:4b:80:f7:57:
04:30:de:8a:85:27:0f:e4:60:0e:c5:00:ea:bd:60:
98:8c:09:39:f5:01:fe:ca:3b:a3:2b:51:18:30:17:
70:9d:a0:e5:dc:6a:d6:06:e0:37:75:28:f7:6a:60:
e4:42:ef:6e:a4:48:56:a7:40:ba:51:70:c8:a3:c9:
03:57:74:ad:c4:8d:8b:bf:a4:88:fe:83:a1:ed:a0:
9c:d8:4c:9b:46:4e:7e:5a:ce:db:45:cd:df:46:86:
6f:92:d4:df:23:5e:46:e8:ab:a1:67:5b:c6:f9:68:
92:07:42:2e:fa:a7:19:c6:9f:e3:96:d7:fd:ec:c5:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:9B:E7:A3:20:0C:13:DD:0E:0E:F5:4E:99:56:03:01:84:DD:E8
X509v3 Authority Key Identifier:
keyid:F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c5:87:c1:20:16:da:ef:b2:46:65:cf:5e:56:a2:1e:83:0f:
b2:55:0a:6f:50:2b:55:31:17:b6:99:9f:cd:68:f1:4f:ca:c9:
9a:92:e5:c6:41:cc:35:da:0b:b6:dc:4c:77:b0:14:10:6b:dc:
c9:06:0c:95:03:02:ae:db:b2:9b:5a:68:80:9c:22:e9:7f:27:
3c:a6:4e:ff:2f:24:4a:4a:73:64:8e:c2:e3:9a:ce:18:8b:9c:
4b:c2:cf:3a:71:31:e8:4e:21:5a:f2:fb:e2:e3:a9:6e:15:5e:
3c:03:a1:21:73:08:38:50:dc:6a:fa:0d:26:8e:57:d0:fc:1c:
39:76:98:29:4c:25:07:25:64:f3:87:fc:f4:88:15:8a:d8:99:
dc:a3:c5:9d:86:b3:dd:11:1f:51:ea:2e:60:af:17:91:9d:f3:
f8:82:9c:1c:47:cc:f1:f7:8e:57:83:61:d0:aa:95:ba:df:c1:
8a:5d:ae:40:c4:01:2a:9b:7d:85:df:6e:68:c7:b1:eb:63:9e:
d2:cd:c1:c2:09:07:12:e9:50:19:28:12:eb:02:64:d5:71:56:
d1:f6:3b:ab:5c:18:72:c9:86:e1:a9:0b:f2:24:6c:ed:53:d6:
7b:2f:a2:96:17:85:ea:8e:f9:e6:43:8c:8b:76:85:f0:41:73:
92:46:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:31:40 2026 by rpki-client