Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: OabKf0+bOkv9/xwXPzBpQzKERxOqpJJFuPI8eR3N+T8=
Subject key identifier: 1C:B0:8F:8F:70:F5:01:6F:50:01:F4:B4:B3:6F:D5:5C:86:F5:3A:93
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019E9AA99D600F33962822A7FE5EE0578835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1302
Signing time: Sat 06 Jun 2026 02:01:07 +0000
Manifest this update: Sat 06 Jun 2026 02:01:07 +0000
Manifest next update: Sun 07 Jun 2026 02:01:07 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: QWzYb4oZUJb/+VvGdLhaqlkuvF5q4lcLpgtNn95pwM4=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:9d:60:0f:33:96:28:22:a7:fe:5e:e0:57:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jun 6 02:01:07 2026 GMT
Not After : Jun 7 02:01:07 2026 GMT
Subject: CN=1cb08f8f70f5016f5001f4b4b36fd55c86f53a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:a3:94:a3:4d:ba:d8:47:00:74:4c:0c:6f:
4b:54:5f:bd:c0:d9:4e:21:62:47:60:fb:96:d3:83:
58:ad:8c:7f:a0:9e:d7:68:a7:24:62:f3:db:33:be:
08:ea:bf:84:81:d1:27:62:e5:d3:64:cc:75:1f:af:
d9:eb:00:73:78:d0:4c:25:d7:c8:cd:0a:5d:67:d7:
a7:04:a2:09:88:27:49:63:49:76:ab:b9:ca:c5:63:
b7:32:df:84:b3:aa:fe:92:b5:0e:91:bf:97:38:e6:
4f:13:f2:9e:5b:76:bf:a2:e5:2c:b6:e1:00:c3:93:
b2:72:16:67:9b:a0:95:b4:6c:05:2f:61:f5:8b:97:
cd:be:47:a1:fe:7c:a0:7e:ca:9e:8e:b6:5f:31:f2:
50:69:eb:27:7f:9b:ee:53:c0:de:f2:c5:3a:a4:80:
fe:9b:d4:c5:85:6a:bb:51:68:5a:cd:4f:9b:79:78:
7d:bf:50:2f:14:d6:4c:86:d6:46:bf:44:80:db:a8:
78:3e:f1:e0:3a:ee:ca:17:d0:b1:a0:3b:d1:a3:48:
08:7f:d1:4d:9e:06:bc:08:27:36:93:c3:2f:da:1e:
b4:2a:54:9e:c1:70:c9:40:f7:cf:46:12:95:04:82:
be:34:20:9f:33:5e:17:4b:72:3c:3b:28:d2:54:c6:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:8F:8F:70:F5:01:6F:50:01:F4:B4:B3:6F:D5:5C:86:F5:3A:93
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:9d:31:25:a1:72:95:4a:db:00:45:12:26:f4:1e:fd:5d:
53:85:3a:3a:28:4c:13:a2:48:d2:a8:47:54:9e:e7:33:a2:fc:
95:8c:e7:13:08:0c:e0:79:5c:9d:55:ff:13:b9:6a:63:e7:6d:
a3:59:29:05:58:ba:bc:79:6f:07:a1:d5:52:96:79:78:80:50:
85:b6:5f:d1:2f:a8:91:59:67:f0:ff:c9:44:f4:1a:2a:82:02:
f1:d9:3f:a2:ab:75:24:e3:a0:93:af:e8:30:66:0e:00:f2:ef:
05:5c:90:a0:a2:cd:43:1e:ea:64:52:4d:bb:34:63:09:bb:63:
c8:c5:09:4a:64:b3:91:9f:a8:2a:9d:34:49:5b:02:80:c2:76:
b3:55:ff:b9:9c:1d:1e:72:41:fe:56:03:7f:b3:46:cd:0b:3b:
17:b9:c6:65:5f:32:f3:bc:af:76:9f:f4:66:a0:76:be:2b:81:
4d:52:7a:e7:d5:90:a7:01:c5:97:68:e0:95:e8:f8:ec:02:99:
90:28:a2:61:b5:76:a2:fd:63:57:50:2e:14:3b:c1:14:66:23:
0b:43:f7:49:6b:c4:e3:c2:dc:fa:25:46:71:1c:5d:b8:ce:37:
11:1f:65:dd:5a:7f:6a:71:4f:21:29:a3:b7:2d:04:1a:18:62:
60:5d:8b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aqZ1gDzOWKCKn/l7gV4g1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjYwNjA2MDIwMTA3WhcNMjYwNjA3MDIwMTA3WjAzMTEwLwYDVQQD
EygxY2IwOGY4ZjcwZjUwMTZmNTAwMWY0YjRiMzZmZDU1Yzg2ZjUzYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0SjlKNNuthHAHRMDG9LVF+9wNlO
IWJHYPuW04NYrYx/oJ7XaKckYvPbM74I6r+EgdEnYuXTZMx1H6/Z6wBzeNBMJdfI
zQpdZ9enBKIJiCdJY0l2q7nKxWO3Mt+Es6r+krUOkb+XOOZPE/KeW3a/ouUstuEA
w5OychZnm6CVtGwFL2H1i5fNvkeh/nygfsqejrZfMfJQaesnf5vuU8De8sU6pID+
m9TFhWq7UWhazU+beXh9v1AvFNZMhtZGv0SA26h4PvHgOu7KF9CxoDvRo0gIf9FN
nga8CCc2k8Mv2h60KlSewXDJQPfPRhKVBIK+NCCfM14XS3I8OyjSVMZMZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBywj49w9QFvUAH0tLNv1VyG9TqTMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLudMSWh
cpVK2wBFEib0Hv1dU4U6OihME6JI0qhHVJ7nM6L8lYznEwgM4HlcnVX/E7lqY+dt
o1kpBVi6vHlvB6HVUpZ5eIBQhbZf0S+okVln8P/JRPQaKoIC8dk/oqt1JOOgk6/o
MGYOAPLvBVyQoKLNQx7qZFJNuzRjCbtjyMUJSmSzkZ+oKp00SVsCgMJ2s1X/uZwd
HnJB/lYDf7NGzQs7F7nGZV8y87yvdp/0ZqB2viuBTVJ659WQpwHFl2jglej47AKZ
kCiiYbV2ov1jV1AuFDvBFGYjC0P3SWvE48Lc+iVGcRxduM43ER9l3Vp/anFPISmj
ty0EGhhiYF2L/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:14 2026 by rpki-client