Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier: c4hA5QJ7LpEPckZ43++Z7O5P0syhIjTelCuuhxOBem8=
Subject key identifier: B5:B6:07:4D:0C:F6:41:D7:6C:80:9F:68:92:D8:4A:95:00:3C:59:84
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial: 019D3865D0BB5D2E81C9EBF5CFC6CA0D1C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number: 0801
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: 6TtJ0bIRBlAdz17KWzjm1ddrInkdw6kkxmcFUUj+A7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d0:bb:5d:2e:81:c9:eb:f5:cf:c6:ca:0d:1c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=b5b6074d0cf641d76c809f6892d84a95003c5984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:64:79:65:e4:92:e6:b5:95:0d:90:2a:a3:a2:
20:e8:0c:25:71:fc:7e:36:85:07:cc:27:30:24:56:
1c:d8:61:f9:fe:d1:98:6d:68:45:9d:ca:9d:36:c9:
86:05:0c:42:75:6a:ac:5b:f8:ee:57:81:d9:b7:f8:
11:2a:df:dc:77:39:99:99:0a:1c:e1:1d:3e:bd:fc:
bc:cd:85:a3:3b:df:01:4d:38:1c:25:b1:f0:f0:1a:
b0:76:fa:68:cd:af:d6:c6:b9:78:e6:0c:3a:5e:bb:
db:e5:d8:82:66:ec:b2:33:0e:36:29:5a:44:ff:15:
13:e3:32:35:2c:28:d6:f8:5b:6b:70:2f:e5:15:ba:
68:d1:50:45:2f:95:7b:96:6d:e0:3a:74:16:e2:3b:
2c:ac:25:00:8e:60:04:42:ab:f0:49:33:5e:ac:59:
2e:ab:d6:14:f4:a3:be:29:2e:40:ae:da:0d:fd:90:
13:5a:65:9f:13:88:ca:e1:1f:b8:4a:b8:86:de:9c:
bf:1c:c4:c7:42:e4:ec:8c:9b:bb:77:67:48:0f:b4:
84:a0:8b:59:48:91:e5:87:2a:8e:d7:3d:2e:89:56:
7a:b8:49:5d:ae:27:fc:b7:e1:78:92:df:b0:7c:4a:
a7:78:96:85:05:1a:8a:f3:12:71:02:25:e0:a0:40:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B6:07:4D:0C:F6:41:D7:6C:80:9F:68:92:D8:4A:95:00:3C:59:84
X509v3 Authority Key Identifier:
keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0b:61:e0:32:5e:9a:12:46:6c:c6:f0:01:b8:6a:71:3f:67:
7b:28:2e:ed:20:4b:d5:1a:61:d0:5e:2b:da:f3:7b:bf:e7:bc:
51:12:74:c0:26:fe:9a:07:0a:ed:24:b5:d8:3f:9e:66:29:e0:
01:2d:09:8e:94:91:22:36:90:19:8b:7d:fc:02:6f:5c:97:cf:
70:6f:54:ea:1c:10:77:8d:98:4d:12:9b:8d:0c:c6:fc:5e:92:
b7:db:3e:76:2c:80:97:4a:1f:ad:29:e1:a1:97:c0:61:8e:f5:
38:da:2e:ed:15:0a:97:32:2d:df:da:54:09:2e:0b:89:82:f2:
2d:c0:ad:d5:d9:66:96:ab:9f:51:8d:8f:a6:9a:c7:5b:42:ba:
36:38:23:a0:e6:61:c0:a5:3d:aa:b1:d7:df:3c:a7:03:2b:e9:
07:64:f6:4c:24:7a:a2:99:72:56:86:0d:2b:97:5e:7e:cd:cf:
da:79:96:b9:42:d5:7e:b4:52:d9:12:de:96:2c:2f:f3:c4:51:
78:05:12:80:42:29:c4:a6:e4:73:d3:35:52:ef:37:90:32:f5:
27:af:d1:da:5f:bb:c5:76:b5:75:ef:23:a6:6e:ca:e5:01:1d:
2b:1f:39:6d:a8:fb:18:61:20:2e:57:17:98:50:ca:85:7c:39:
e3:1d:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:34 2026 by rpki-client