Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
File: o_60EOB9CI-2UbkTdJuBJX47mVI.mft (raw, json)
Hash identifier: fINff5FuE6/y66SxRnsilDCrHY91PJLFsTdPSpkua34=
Subject key identifier: C3:CE:24:BF:9C:67:C1:CE:AC:2B:34:59:38:3C:39:A7:E9:11:E0:90
Authority key identifier: A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
Certificate issuer: /CN=a3feb410e07d088fb651b913749b81257e3b9952
Certificate serial: 019D3A549AC0ACECC10724F76490F2E23A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
Manifest number: 12DA
Signing time: Sun 29 Mar 2026 16:01:56 +0000
Manifest this update: Sun 29 Mar 2026 16:01:56 +0000
Manifest next update: Mon 30 Mar 2026 16:01:56 +0000
Files and hashes: 1: o_60EOB9CI-2UbkTdJuBJX47mVI.crl (hash: +H8uTWjl27xInfQF2SaVetARnCS9kAMFe/09f1QYmg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:9a:c0:ac:ec:c1:07:24:f7:64:90:f2:e2:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3feb410e07d088fb651b913749b81257e3b9952
Validity
Not Before: Mar 29 16:01:56 2026 GMT
Not After : Mar 30 16:01:56 2026 GMT
Subject: CN=c3ce24bf9c67c1ceac2b3459383c39a7e911e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:43:cf:90:0f:e4:69:68:63:06:18:26:a5:
26:63:1a:e5:97:12:68:6f:f0:5b:f2:7e:2d:e2:3c:
52:8e:fd:8c:54:d0:8a:bb:8b:e0:eb:1e:e9:2c:26:
dd:af:44:94:c8:67:cd:18:3a:f8:d5:2a:dc:52:43:
98:ff:b2:87:d6:1e:d7:3d:d7:7b:9b:23:5f:1b:ed:
0e:39:0e:0a:67:68:eb:d5:a7:d8:b2:30:b5:55:3f:
eb:eb:8f:c8:2d:5b:a2:ce:4f:0f:9c:25:b0:0a:60:
42:b2:ce:0d:0d:0c:58:df:14:63:d7:a7:ad:7b:2d:
b3:f1:8f:1c:89:de:90:07:5d:f5:ce:fb:7e:6a:8c:
7c:5c:4f:a8:ff:07:72:b5:32:f4:e9:e7:9a:bb:5f:
b6:29:8c:72:0b:f8:ed:bd:ba:35:04:9b:35:32:09:
68:10:4e:35:80:0a:f6:e4:f5:87:6f:9b:8e:2a:58:
c7:15:64:ab:64:e7:e2:e0:0a:15:27:e5:b5:da:24:
bc:93:f3:ad:70:0e:78:53:d8:3d:77:7e:26:36:b2:
6a:cb:90:54:81:6d:fc:08:1f:0a:40:5e:a9:83:a7:
b8:33:78:17:d7:20:d1:d2:be:ee:fb:c2:d9:d4:c0:
40:d7:38:87:98:ea:bf:dd:2a:30:b6:cb:50:b0:58:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:24:BF:9C:67:C1:CE:AC:2B:34:59:38:3C:39:A7:E9:11:E0:90
X509v3 Authority Key Identifier:
keyid:A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a5:a5:eb:46:7a:64:86:91:24:57:de:c1:10:83:38:cd:2d:
e1:4a:a3:62:28:27:37:19:9c:34:d0:96:20:a7:4a:1e:ee:1e:
ae:be:33:43:37:95:3a:d3:9e:d7:de:b0:10:b8:b5:38:11:dd:
f1:a2:29:86:2c:db:73:9c:3f:7f:7f:8b:82:af:f7:9b:76:1b:
b9:f4:6c:6c:a4:a8:91:f0:2c:07:14:4d:c4:cf:b3:65:6c:7e:
ae:64:52:53:bf:d8:78:ef:df:e4:40:3e:bd:e6:b5:db:d8:22:
d6:c8:81:02:1c:3e:ab:ae:d0:6d:f0:4e:1b:41:ac:78:31:7f:
1d:35:e3:10:13:a7:4a:2f:a4:55:3e:89:f2:60:79:11:bd:13:
56:cd:f5:72:2a:b2:5c:ee:9e:34:3d:22:3d:06:77:21:5c:76:
38:57:92:ab:7c:05:10:dc:8d:cb:5e:4f:a9:61:a3:47:cf:65:
4f:8a:0d:be:06:fb:4c:3e:5f:c6:91:80:c0:6c:f3:3a:ea:e0:
18:58:a8:e0:86:2b:e8:41:cb:b0:9c:db:6d:0a:af:ac:4a:77:
8f:a5:9f:8f:b9:c0:66:84:35:42:9c:9d:eb:3b:8f:8e:78:72:
bf:e0:b4:bd:c9:b4:06:c9:eb:26:85:6a:6c:18:d5:1b:a4:51:
07:7e:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:27 2026 by rpki-client