Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: RDqGbWAAKHEYXKSg+LZqWEEs+wsAHkzBB25ntCjXSN4=
Subject key identifier: F6:B5:9E:7B:9B:5F:73:BE:70:82:D0:59:9D:95:4F:64:4A:F9:1D:DA
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 019D3909B3C282265ACDECC4841FFF887258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: 9pOLutQz6nwawK9uu8NVQ+iikXe1aGmoblGJjqcIixk=)
2: svKIx-V6M8-Dgvm8-ydnbsPhfl0.roa (hash: 1Gdov46zDBd4IfBZ7HkYYkXCBemGU+SkHwwE4d+buOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b3:c2:82:26:5a:cd:ec:c4:84:1f:ff:88:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=f6b59e7b9b5f73be7082d0599d954f644af91dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:27:ef:23:ca:7b:0c:4b:a2:b5:d0:20:6a:
ca:33:6a:cc:6c:cb:45:ee:90:da:8e:d4:57:19:d5:
89:15:a0:16:6b:58:39:77:fd:cd:ff:69:ef:a9:4a:
b2:97:07:ad:b8:7e:98:bb:2b:a4:96:b1:81:19:6f:
0e:15:ba:e3:28:26:80:a7:d1:6f:2c:9e:d9:26:8f:
94:aa:83:ad:cd:fc:22:28:da:14:32:8a:a4:c0:44:
ce:5d:7e:b5:ed:62:71:8b:8d:60:4f:2a:0d:df:67:
f7:30:43:47:e0:aa:f3:3a:78:01:61:4a:6a:cb:82:
ab:e3:b8:12:46:aa:ad:83:68:b0:7f:3b:97:05:c6:
2b:5a:f8:d0:cf:5e:4d:1b:cd:c4:09:b6:e6:64:62:
35:c8:77:01:cc:0e:5f:b2:f1:77:00:ef:ff:cc:c3:
0c:8a:83:12:3f:b6:a4:7f:27:6a:51:03:04:c0:f5:
73:9e:41:3a:fb:55:0e:7c:fd:d3:70:77:f4:71:02:
b2:29:fc:b9:b7:56:70:87:42:99:f2:00:6f:da:10:
68:45:65:2d:47:39:e6:c2:c9:2a:75:fd:6e:09:f6:
fd:60:07:dd:c8:ad:b1:99:e9:d8:81:12:4b:de:3e:
88:ce:f0:cf:91:c4:28:2a:35:94:70:c0:dd:99:08:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:9E:7B:9B:5F:73:BE:70:82:D0:59:9D:95:4F:64:4A:F9:1D:DA
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:28:f5:20:23:8c:51:ed:3a:d9:c9:3c:47:67:c8:6b:bb:83:
37:65:45:5c:31:e5:31:e3:53:df:79:b6:53:96:20:70:a6:fe:
81:76:bf:e9:26:ec:bd:fc:7b:11:f1:d2:ec:12:28:96:10:a9:
8e:e1:24:05:27:0c:aa:ee:4a:ed:4f:29:5e:4b:43:6e:4a:44:
a9:f5:f8:77:36:dd:56:79:bd:6b:40:92:91:78:94:16:9f:cc:
6f:16:53:45:8e:02:9a:ae:74:7c:1d:27:fb:6f:65:a4:e9:7f:
4d:31:d7:8c:04:70:0d:2d:61:8a:f1:04:0d:dc:64:79:38:a7:
2a:13:8c:f2:3c:f7:f0:9d:e0:e5:3d:b3:4e:d3:43:2e:1e:2a:
4e:0f:4c:16:bf:1d:c2:ea:32:a3:04:f4:11:82:7a:09:02:dc:
06:a8:33:28:91:eb:e9:8d:1c:01:5a:00:0a:24:2b:45:4b:0a:
cc:38:23:5d:11:57:2f:bd:38:12:30:39:ba:6f:39:28:b2:7b:
93:95:3f:3e:ad:44:ce:fb:e5:b2:db:a7:71:58:f7:ae:ee:d7:
c3:bd:b3:e4:fc:a9:79:04:b6:b8:25:b0:03:c9:7f:d6:69:e0:
e9:1c:bc:f9:23:24:dc:5a:cc:14:4f:da:1f:d4:61:1f:73:2f:
50:b4:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:26 2026 by rpki-client