Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: OJ8T/QofrAyAct8vPOLQzlmUFczspRYXhGtqWytXl2A=
Subject key identifier: 41:0F:B5:2E:EC:6D:98:56:DD:C8:4E:F3:DF:40:0C:A1:0B:0D:77:38
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 019CAB6AC9C1929529AB36BC971207952A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 1021
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: EbvFNBcCcdIu68uCX5NVz9fPeFsQoGfZ/i9RmzlTsrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c9:c1:92:95:29:ab:36:bc:97:12:07:95:2a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=410fb52eec6d9856ddc84ef3df400ca10b0d7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:e7:25:a4:4d:ab:f3:db:f4:e5:2b:d1:83:
1a:c3:97:ae:3f:d2:84:fd:b1:c1:42:10:d9:b3:15:
06:b3:cf:e2:74:d9:82:b2:3d:5c:4f:61:fd:ed:5b:
56:d1:fc:7b:5d:da:da:51:94:ed:18:a9:19:72:cc:
02:02:52:c7:b1:8d:92:67:9f:03:0b:47:ac:64:ac:
0e:03:e3:2c:99:45:40:31:f2:b6:e0:59:f2:aa:b2:
0c:ca:5b:7c:07:d9:5b:82:0b:57:f6:56:f1:38:d3:
de:23:ac:79:43:14:f1:7a:67:a1:8e:00:b5:71:d1:
63:5f:22:23:19:27:8c:32:b0:5a:54:c1:11:aa:ab:
ad:f6:f5:02:3e:ab:f0:7e:c4:c1:4f:2b:1e:bf:a9:
aa:83:8c:c7:16:60:cf:c2:8b:7a:e4:9c:4a:e4:f6:
04:36:dd:20:16:70:c9:ed:43:82:3e:6a:cc:db:fa:
e3:1d:2d:a0:30:ea:8b:cc:ea:55:3c:92:ba:83:95:
dc:b9:ab:1d:4a:46:b6:88:46:8f:cd:9f:44:a3:b8:
a7:6a:4a:79:8a:11:4d:12:ba:03:e4:de:4a:da:d4:
dd:8d:63:40:75:43:1f:1b:a6:ba:45:e0:2a:e2:f9:
f8:e8:75:9b:a8:7b:fc:27:2d:94:6e:42:15:f0:c4:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:B5:2E:EC:6D:98:56:DD:C8:4E:F3:DF:40:0C:A1:0B:0D:77:38
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0c:56:a6:f6:ea:66:1d:26:65:ca:b4:6d:ea:e9:48:73:9c:
85:50:9e:39:e7:07:50:57:83:cb:06:d2:b2:a9:27:31:e3:a1:
48:60:db:ff:ed:85:02:36:af:d1:90:d7:69:31:c2:1a:20:c4:
37:47:72:00:38:1a:22:2a:1a:c7:6b:ad:4e:8e:77:b7:c4:dd:
15:b1:20:7e:65:fd:9b:51:25:0e:28:a0:68:c0:fb:2e:78:03:
c9:aa:0f:b3:18:a2:2a:30:15:2e:4f:7d:cb:fb:db:3c:5a:33:
d3:1f:41:07:c7:0e:15:a3:79:da:8e:e1:d6:c2:c2:85:54:53:
6a:59:c4:18:8f:38:cc:5f:45:c1:f7:db:4c:b5:e4:2f:0c:ea:
7f:1f:fc:ee:90:eb:ae:46:d8:d1:d6:03:ef:39:22:e6:2d:da:
66:7b:dc:c4:94:3f:c5:d1:8c:c4:64:b9:8c:e7:c8:77:17:82:
2c:dd:36:a4:81:99:78:d1:2b:39:63:09:de:f7:f1:5e:af:a0:
5c:8e:bc:4e:57:58:93:01:e0:80:36:7c:34:d8:1a:fa:a8:f5:
06:fd:7c:b6:42:3a:86:90:d6:9b:e4:62:8d:12:ea:25:e6:bf:
35:b4:c9:ae:74:d8:d3:9e:60:88:2d:09:34:11:ec:50:bd:15:
4b:8c:da:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrasnBkpUpqza8lxIHlSqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi
YjgyZmMwHhcNMjYwMzAxMjIwMDI4WhcNMjYwMzAyMjIwMDI4WjAzMTEwLwYDVQQD
Eyg0MTBmYjUyZWVjNmQ5ODU2ZGRjODRlZjNkZjQwMGNhMTBiMGQ3NzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0PnJaRNq/Pb9OUr0YMaw5euP9KE
/bHBQhDZsxUGs8/idNmCsj1cT2H97VtW0fx7XdraUZTtGKkZcswCAlLHsY2SZ58D
C0esZKwOA+MsmUVAMfK24FnyqrIMylt8B9lbggtX9lbxONPeI6x5QxTxemehjgC1
cdFjXyIjGSeMMrBaVMERqqut9vUCPqvwfsTBTysev6mqg4zHFmDPwot65JxK5PYE
Nt0gFnDJ7UOCPmrM2/rjHS2gMOqLzOpVPJK6g5XcuasdSka2iEaPzZ9Eo7inakp5
ihFNEroD5N5K2tTdjWNAdUMfG6a6ReAq4vn46HWbqHv8Jy2UbkIV8MRpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEPtS7sbZhW3chO899ADKELDXc4MB8GA1UdIwQY
MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt
MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm
LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAxWpvbq
Zh0mZcq0berpSHOchVCeOecHUFeDywbSsqknMeOhSGDb/+2FAjav0ZDXaTHCGiDE
N0dyADgaIioax2utTo53t8TdFbEgfmX9m1ElDiigaMD7LngDyaoPsxiiKjAVLk99
y/vbPFoz0x9BB8cOFaN52o7h1sLChVRTalnEGI84zF9FwffbTLXkLwzqfx/87pDr
rkbY0dYD7zki5i3aZnvcxJQ/xdGMxGS5jOfIdxeCLN02pIGZeNErOWMJ3vfxXq+g
XI68TldYkwHggDZ8NNga+qj1Bv18tkI6hpDWm+RijRLqJea/NbTJrnTY055giC0J
NBHsUL0VS4za/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:14 2026 by rpki-client