Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: gihzZ/7xzgvys+xJxwepP4vo0f4FAKcZGsUeYg3hiVc=
Subject key identifier: 07:B5:69:EF:B7:08:54:80:45:BD:D0:DC:B1:D2:AA:27:B5:DF:06:51
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 019D99991F813901A4C21E9A951118722AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 0D36
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: n25tUvS0mjqQ5gFeyDAJTe52Q4fzgRbs1cKUtl6MrOM=)
2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1f:81:39:01:a4:c2:1e:9a:95:11:18:72:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=07b569efb708548045bdd0dcb1d2aa27b5df0651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:67:ae:8e:45:c9:e3:0e:89:f2:d5:1e:ed:
0f:14:c6:fc:34:ca:74:e5:28:d4:a9:6a:cc:cc:29:
ff:e5:46:b1:84:63:87:ab:a7:e7:9e:6b:b7:1e:02:
89:59:42:81:37:4b:cb:47:8f:90:2f:f8:12:1e:b4:
26:83:d8:ca:d1:de:a8:30:59:a3:c8:b3:a5:24:51:
5b:ed:ba:e7:e0:4e:0c:37:2a:af:44:8c:c6:cd:ce:
32:f7:78:75:58:31:9c:03:c1:aa:cf:ac:e1:88:a3:
04:d3:2e:c5:bd:db:49:5a:8f:03:28:d5:4b:cc:35:
dc:5b:34:61:33:ee:10:c6:52:ec:69:83:85:c7:a8:
1c:9a:bd:9a:23:da:a4:bd:1d:c6:45:ee:08:8e:18:
fa:ba:ef:c9:70:c0:3a:e6:c3:ad:aa:60:f9:a2:c9:
1d:4b:17:e7:44:58:a5:78:80:ea:65:f9:da:3c:b0:
3c:96:8a:93:17:ba:06:6c:8d:21:e4:ba:90:ba:f4:
27:79:d3:ed:0f:95:58:e0:1d:d6:1e:23:c6:4f:3c:
97:16:b5:ea:22:5d:b3:81:f5:6d:53:3e:0a:55:60:
61:7d:c0:ba:bb:c6:aa:15:bc:ef:be:26:7e:0f:06:
65:9f:ab:2d:95:33:8a:68:9b:ff:f4:3d:77:5e:30:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:69:EF:B7:08:54:80:45:BD:D0:DC:B1:D2:AA:27:B5:DF:06:51
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b9:dc:43:a6:a0:b9:e8:f9:89:23:04:cf:b0:e8:07:14:35:
36:10:4e:ed:02:96:53:19:c5:7a:9b:c9:cb:be:71:58:16:fa:
1d:6b:99:89:dd:91:bd:cc:22:15:e8:83:df:f2:c2:7e:98:ed:
2a:67:95:3f:e9:98:f3:ae:44:92:4c:cc:b5:a5:20:0f:ed:6b:
50:03:72:16:80:58:9a:71:b5:d7:87:d2:c4:91:aa:6c:52:76:
80:97:dc:f8:fb:4d:30:cf:df:8e:bb:52:a7:72:5d:cb:11:42:
c9:d9:b9:87:43:ff:45:55:e4:ef:8b:c1:6b:0b:d8:c7:aa:83:
ff:74:e7:a1:a1:a0:01:d6:53:1f:46:e3:80:92:c1:44:8e:a2:
05:f0:81:62:05:87:ea:6b:f7:7b:e5:d2:a5:fe:43:ec:70:ac:
ef:43:ea:b5:88:1e:49:01:13:bd:a7:6b:27:a4:73:53:75:87:
3e:2a:26:76:7f:46:d0:6b:cb:88:c9:c4:a6:c4:1f:3e:94:12:
85:95:23:7f:e9:2e:d8:7f:76:83:10:9d:fb:3c:4f:c6:06:dc:
bb:88:1a:3b:87:41:43:98:4b:e8:71:10:ed:8e:aa:3f:4e:45:
f1:d7:d9:05:55:8f:63:29:1a:2b:40:77:13:50:53:4b:77:3f:
20:d4:eb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmR+BOQGkwh6alREYciq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjYwNDE3MDQwMDQyWhcNMjYwNDE4MDQwMDQyWjAzMTEwLwYDVQQD
EygwN2I1NjllZmI3MDg1NDgwNDViZGQwZGNiMWQyYWEyN2I1ZGYwNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAVnro5FyeMOifLVHu0PFMb8NMp0
5SjUqWrMzCn/5UaxhGOHq6fnnmu3HgKJWUKBN0vLR4+QL/gSHrQmg9jK0d6oMFmj
yLOlJFFb7brn4E4MNyqvRIzGzc4y93h1WDGcA8Gqz6zhiKME0y7FvdtJWo8DKNVL
zDXcWzRhM+4QxlLsaYOFx6gcmr2aI9qkvR3GRe4Ijhj6uu/JcMA65sOtqmD5oskd
SxfnRFileIDqZfnaPLA8loqTF7oGbI0h5LqQuvQnedPtD5VY4B3WHiPGTzyXFrXq
Il2zgfVtUz4KVWBhfcC6u8aqFbzvviZ+DwZln6stlTOKaJv/9D13XjABzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe1ae+3CFSARb3Q3LHSqie13wZRMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrncQ6ag
uej5iSMEz7DoBxQ1NhBO7QKWUxnFepvJy75xWBb6HWuZid2RvcwiFeiD3/LCfpjt
KmeVP+mY865EkkzMtaUgD+1rUANyFoBYmnG114fSxJGqbFJ2gJfc+PtNMM/fjrtS
p3JdyxFCydm5h0P/RVXk74vBawvYx6qD/3TnoaGgAdZTH0bjgJLBRI6iBfCBYgWH
6mv3e+XSpf5D7HCs70PqtYgeSQETvadrJ6RzU3WHPiomdn9G0GvLiMnEpsQfPpQS
hZUjf+ku2H92gxCd+zxPxgbcu4gaO4dBQ5hL6HEQ7Y6qP05F8dfZBVWPYykaK0B3
E1BTS3c/INTrPw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:13 2026 by rpki-client