Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier: Gw6vBt/jIDbmzUnZNSShcR9g8gk+bBG4JyW1BOMy8Kk=
Subject key identifier: 25:35:04:CE:57:9A:AD:BC:3D:52:6B:4A:FA:63:F0:BE:8E:F5:A1:00
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial: 019E2F96AD77B75F83216C039B06CE42EF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number: 0881
Signing time: Sat 16 May 2026 07:01:04 +0000
Manifest this update: Sat 16 May 2026 07:01:04 +0000
Manifest next update: Sun 17 May 2026 07:01:04 +0000
Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: GVD1Gq6/U19/MV1eyU2fPzg+Ru9gPyokHzKEfWfj5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:ad:77:b7:5f:83:21:6c:03:9b:06:ce:42:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Validity
Not Before: May 16 07:01:04 2026 GMT
Not After : May 17 07:01:04 2026 GMT
Subject: CN=253504ce579aadbc3d526b4afa63f0be8ef5a100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6e:66:2a:e0:e5:9f:09:e4:08:69:66:36:da:
f7:89:58:2b:c9:79:38:cc:93:3c:a1:57:ab:16:31:
69:b2:10:1f:fe:f2:b0:c0:ba:f3:70:f6:33:f8:fa:
72:4e:56:3b:71:39:49:b2:34:2f:19:1d:70:73:7f:
62:48:16:61:6d:a2:38:06:da:61:11:4e:c7:0d:e6:
31:57:91:84:29:ef:e9:b2:2e:c2:77:72:8a:94:ee:
d9:b2:cf:c3:c9:1f:f9:bd:ee:5e:10:8e:9f:27:17:
ef:a6:67:d7:71:5d:d2:bb:db:bf:0a:3e:00:10:e5:
6b:3e:f0:08:bb:3b:ea:a3:4c:d6:49:63:73:a7:9a:
55:77:e5:a6:80:d8:be:07:fa:8c:dd:2e:74:3f:2d:
5c:c7:31:57:7c:d7:1c:7a:b8:d9:53:e6:28:cf:e4:
71:ed:5f:f3:9d:55:67:9d:53:33:e9:05:92:b8:77:
22:7b:13:0f:c8:f3:af:7f:ac:c4:74:cd:65:1e:ae:
4b:04:ab:2c:fb:6b:27:87:55:73:98:29:48:c1:d2:
f6:cf:c1:a9:06:2f:7f:0c:fd:32:bd:f9:e0:e6:5e:
4c:c0:35:1e:87:67:63:03:ea:c7:6e:93:ac:34:bc:
c7:c0:6c:79:34:b2:c3:15:8a:44:e7:64:9e:99:4a:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:35:04:CE:57:9A:AD:BC:3D:52:6B:4A:FA:63:F0:BE:8E:F5:A1:00
X509v3 Authority Key Identifier:
keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5b:fc:e5:e9:8d:c3:89:e0:ca:80:b8:f2:e6:41:92:35:31:
7c:dd:de:9e:d4:5b:39:b6:d3:64:e6:10:8f:c2:58:7d:dc:31:
9a:11:35:2f:78:d4:53:1e:ba:b7:ef:10:4c:00:e8:ad:51:64:
fc:28:ca:99:9b:78:82:29:89:38:50:fd:fd:c7:e4:1a:4e:27:
c5:74:f4:7d:57:52:88:7a:67:dc:2e:0f:63:38:77:23:60:f7:
82:22:75:7b:99:6b:33:af:a4:95:b9:1e:1b:70:41:c2:c7:11:
f9:ed:07:f6:e2:80:57:79:87:d2:67:e5:67:e6:7e:54:61:94:
51:b3:87:e6:60:31:03:c7:59:37:db:ae:eb:3e:00:a9:ef:89:
2e:f8:7e:74:2f:28:ed:5e:2b:2b:dd:02:65:cb:13:cb:2e:7a:
54:67:32:57:5e:a1:6e:c4:43:0d:e8:c3:e6:6a:19:85:ff:6e:
88:5e:a5:1d:07:df:ef:fa:c1:7a:57:7a:ca:d1:9b:6a:d2:fd:
0b:03:3c:ef:1e:48:6f:8f:b8:97:e3:56:57:57:eb:da:0a:f7:
7b:92:81:9b:11:a3:8c:c9:22:fa:9b:fe:b0:3f:5d:b7:dc:31:
04:e6:bd:6d:68:cc:0d:7f:d9:45:7a:60:5d:ea:8b:c0:77:59:
4d:00:da:09
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4vlq13t1+DIWwDmwbOQu+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWQyMjg4MDM1ZTQwNTZlYjBjZWMxNTQ0NmEwYzQxODBk
MjZlYTQwHhcNMjYwNTE2MDcwMTA0WhcNMjYwNTE3MDcwMTA0WjAzMTEwLwYDVQQD
EygyNTM1MDRjZTU3OWFhZGJjM2Q1MjZiNGFmYTYzZjBiZThlZjVhMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8W5mKuDlnwnkCGlmNtr3iVgryXk4
zJM8oVerFjFpshAf/vKwwLrzcPYz+PpyTlY7cTlJsjQvGR1wc39iSBZhbaI4Btph
EU7HDeYxV5GEKe/psi7Cd3KKlO7Zss/DyR/5ve5eEI6fJxfvpmfXcV3Su9u/Cj4A
EOVrPvAIuzvqo0zWSWNzp5pVd+WmgNi+B/qM3S50Py1cxzFXfNccerjZU+Yoz+Rx
7V/znVVnnVMz6QWSuHciexMPyPOvf6zEdM1lHq5LBKss+2snh1VzmClIwdL2z8Gp
Bi9/DP0yvfng5l5MwDUeh2djA+rHbpOsNLzHwGx5NLLDFYpE52SemUqVhQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCU1BM5Xmq28PVJrSvpj8L6O9aEAMB8GA1UdIwQY
MBaAFPutIogDXkBW6wzsFURqDEGA0m6kMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02MGlpQU5lUUZickRPd1ZSR29NUVlEU2JxUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJmLWMwNjUtNDhkMS1hZmNl
LTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dWUkdvTVFZRFNicVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IyL2E2YjBiZi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1
Y2IvMS8xLTYwaWlBTmVRRmJyRE93VlJHb01RWURTYnFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFv8
5emNw4ngyoC48uZBkjUxfN3entRbObbTZOYQj8JYfdwxmhE1L3jUUx66t+8QTADo
rVFk/CjKmZt4gimJOFD9/cfkGk4nxXT0fVdSiHpn3C4PYzh3I2D3giJ1e5lrM6+k
lbkeG3BBwscR+e0H9uKAV3mH0mflZ+Z+VGGUUbOH5mAxA8dZN9uu6z4Aqe+JLvh+
dC8o7V4rK90CZcsTyy56VGcyV16hbsRDDejD5moZhf9uiF6lHQff7/rBeld6ytGb
atL9CwM87x5Ib4+4l+NWV1fr2gr3e5KBmxGjjMki+pv+sD9dt9wxBOa9bWjMDX/Z
RXpgXeqLwHdZTQDaCQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:17 2026 by rpki-client