Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
File: i60BoLmQw5T9iervn-IbiCjdd2A.mft (raw, json)
Hash identifier: XX6C2PVXtAkEMlzGB7CTWVeGmCXLPNctntpWdqiGQiQ=
Subject key identifier: 64:E9:A6:C6:10:02:AA:F9:5D:03:EE:64:D9:6E:82:F8:6C:9E:23:DE
Authority key identifier: 8B:AD:01:A0:B9:90:C3:94:FD:89:EA:EF:9F:E2:1B:88:28:DD:77:60
Certificate issuer: /CN=8bad01a0b990c394fd89eaef9fe21b8828dd7760
Certificate serial: 01A04C88D44D59E756257A1822A40C9D3F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
Manifest number: 26
Signing time: Sat 29 Aug 2026 08:00:30 +0000
Manifest this update: Sat 29 Aug 2026 08:00:30 +0000
Manifest next update: Sun 30 Aug 2026 08:00:30 +0000
Files and hashes: 1: N6vQ7eGFbv_RL9EdI5U6EBK2p18.asa (hash: Fch7QVZ3P8cmumoOPv9qqT9H9WtThkx1Vup3ZvTYhII=)
2: i60BoLmQw5T9iervn-IbiCjdd2A.crl (hash: CjzP/ST7a/iXoy6k+aem0VnHsJ96M0XYrLWT23pmEiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:88:d4:4d:59:e7:56:25:7a:18:22:a4:0c:9d:3f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bad01a0b990c394fd89eaef9fe21b8828dd7760
Validity
Not Before: Aug 29 08:00:30 2026 GMT
Not After : Aug 30 08:00:30 2026 GMT
Subject: CN=64e9a6c61002aaf95d03ee64d96e82f86c9e23de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:d2:96:4a:c8:e0:29:06:60:5b:3f:ed:0c:
0d:de:9f:56:4b:23:91:ae:1f:86:ff:60:33:b6:94:
78:17:d0:86:d2:ee:64:00:00:a8:8c:3d:80:61:46:
dc:a4:e8:31:f1:fb:33:9d:ff:24:52:09:8e:fe:ae:
54:76:d2:c0:e2:e1:37:ec:2e:95:ba:e0:3d:ea:43:
d3:a2:d3:4a:b9:ff:88:bb:09:65:bf:5b:61:dc:49:
5e:bb:02:e4:13:6c:a1:73:5b:d1:19:13:c9:3d:9c:
b3:02:17:72:e7:cc:65:ee:73:49:6f:7a:ba:dc:b0:
23:b0:ef:77:eb:20:a0:7d:87:3f:e2:83:d6:d5:3a:
59:5b:0f:2d:df:ed:3a:41:9d:a1:c4:be:e9:2c:9f:
35:aa:32:b5:dc:11:03:10:25:37:db:af:11:58:f0:
21:ea:66:1b:a8:8d:47:1f:f1:d0:67:c1:a6:24:66:
97:e6:76:b6:00:f6:60:85:f8:ba:0e:f5:35:08:ef:
2e:ef:03:e3:a7:b1:31:57:5e:9d:0d:8c:f5:59:a7:
f1:db:32:bf:49:ba:c1:e5:5a:65:1b:ba:04:f0:39:
3f:9b:a3:19:fa:fb:15:21:d7:a0:b8:b6:49:29:28:
ac:1f:26:0c:c0:3b:e7:b5:5f:c6:66:f3:73:99:78:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:A6:C6:10:02:AA:F9:5D:03:EE:64:D9:6E:82:F8:6C:9E:23:DE
X509v3 Authority Key Identifier:
keyid:8B:AD:01:A0:B9:90:C3:94:FD:89:EA:EF:9F:E2:1B:88:28:DD:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bf:ef:ef:3c:47:2e:62:c3:44:fc:21:71:9f:7e:b0:9a:af:
31:5e:f5:eb:ee:52:a7:b4:71:3d:51:95:00:40:fc:0f:23:ff:
21:c5:d8:b3:00:41:21:d6:65:f1:13:63:76:8a:71:bf:d7:78:
f1:cd:b4:9b:27:38:06:c8:92:84:f3:47:64:59:af:48:2a:8b:
c4:5f:6c:8c:a8:78:ff:3d:2b:b3:c8:93:63:37:5f:a4:1d:2a:
a7:ac:08:32:1c:bf:7e:e7:50:24:a0:2b:43:32:e2:8e:18:6a:
3d:d9:9e:cf:ef:76:5e:84:ab:11:22:d8:91:b6:dd:26:61:6d:
77:c1:26:d4:96:10:ff:eb:d0:8b:4c:56:75:57:fc:eb:4e:57:
c9:e4:f2:17:8d:26:46:af:e5:59:33:34:69:60:4e:1a:18:f9:
a9:18:83:c9:b1:20:0c:f6:7c:3c:2e:65:1e:29:39:13:c1:53:
99:d0:b1:1a:2e:24:a0:c3:03:78:37:01:f1:0b:86:3f:0b:84:
b2:03:ab:f5:74:8e:96:a4:77:07:99:68:c4:97:fd:53:bd:a3:
12:35:9e:3b:18:e1:b5:7c:73:3b:3a:f7:d8:70:6b:09:a1:88:
c3:52:f5:a8:26:38:28:23:31:18:7e:1c:fc:62:93:68:6c:6b:
9f:15:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:53:06 2026 by rpki-client