Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: JRhZy3MsLmOyPr61fapD4P2uGXBpKMkLbbhk+RPZQlg=
Subject key identifier: F3:9D:14:99:60:7D:86:1B:35:98:AF:5C:0B:21:7B:15:C3:C5:83:5C
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 019FAC08B34EC5819A27483D3057ED6082B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 11AF
Signing time: Wed 29 Jul 2026 04:01:19 +0000
Manifest this update: Wed 29 Jul 2026 04:01:19 +0000
Manifest next update: Thu 30 Jul 2026 04:01:19 +0000
Files and hashes: 1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: 4O5v5VyDd+YwzfGnHYzry2wBA3xI+Cr99ukn+4SYbY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:b3:4e:c5:81:9a:27:48:3d:30:57:ed:60:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jul 29 04:01:19 2026 GMT
Not After : Jul 30 04:01:19 2026 GMT
Subject: CN=f39d1499607d861b3598af5c0b217b15c3c5835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:03:ab:f7:10:5f:19:70:03:97:61:fd:09:
97:93:47:c3:44:93:a9:23:c4:7f:b9:fd:38:6a:44:
79:fb:85:75:54:c8:8e:12:e9:dd:21:ea:09:23:8e:
83:76:c9:fc:3e:79:61:4f:9c:74:9f:4d:8f:c8:06:
bb:a5:79:84:53:21:7d:49:16:8c:95:b1:80:00:d3:
29:de:36:17:89:83:12:28:b8:71:ab:cd:4f:f9:1e:
be:d9:a3:40:dd:58:17:a8:26:5c:3f:5c:5f:20:68:
80:b3:0c:06:ea:a2:da:c7:c8:e0:c3:0c:dd:db:5c:
44:3f:95:fd:5c:61:86:38:81:3f:5e:b5:cf:02:8e:
41:83:1b:e0:b0:75:8d:99:1f:b9:d0:61:27:43:e2:
d1:9e:fd:47:98:f2:ef:01:f3:b6:f7:20:0e:8b:83:
a9:62:c7:7a:c7:0c:6e:1d:a3:b4:33:8b:7d:0c:be:
61:38:75:83:91:63:ef:4b:ed:93:a7:e2:63:87:60:
e1:63:5c:4d:e4:ab:3b:6f:31:fd:bd:c8:05:eb:a4:
e7:bd:55:41:f0:7e:e8:5b:3a:0b:6b:4e:36:6f:13:
1b:47:61:8f:9f:a7:b7:68:86:3f:34:8a:31:c5:70:
01:21:8d:f3:ee:af:cf:75:19:f3:71:a4:3c:1f:ed:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:14:99:60:7D:86:1B:35:98:AF:5C:0B:21:7B:15:C3:C5:83:5C
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:08:8e:13:ac:f0:f5:55:5e:55:27:b1:81:9c:67:2c:af:22:
16:2a:c1:cb:d8:36:01:7c:54:0a:50:b9:2a:8c:66:15:cc:0e:
99:00:4d:56:09:26:3d:2e:27:58:f4:b5:2b:5c:5f:ec:d7:92:
fa:82:2e:81:31:d5:98:9b:06:ac:1b:84:cf:7f:54:47:6f:af:
21:be:2e:d4:be:76:1d:cf:9c:38:fa:b3:a1:36:c7:ab:de:2b:
60:9b:26:76:8a:7f:f2:99:99:68:9e:e6:7f:f5:eb:f4:bf:66:
7e:6d:c7:d3:29:ec:46:68:eb:c1:27:02:90:87:db:95:29:de:
45:f1:3c:b5:e3:33:6b:92:f9:1e:8e:7e:62:a2:98:91:87:2a:
24:bf:7f:22:b3:bc:4a:6b:bc:fa:03:c8:42:b6:ee:92:73:e5:
eb:88:31:a1:f1:9f:75:51:5a:3a:a8:c4:a4:a9:cf:10:64:50:
5a:32:41:3b:08:d6:40:2f:27:5b:b8:af:e1:05:1f:4a:7c:1b:
b5:5e:b8:9c:db:22:a7:aa:4a:e8:1c:1a:0c:12:32:b9:18:fa:
4b:ec:be:c2:23:fa:51:27:99:18:02:8f:9a:5e:b7:91:c6:79:
5d:0f:d3:a3:3f:2d:e2:b6:2f:22:2c:86:b2:f0:de:04:ed:c0:
79:c5:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:50 2026 by rpki-client