Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: z+9aJUfXO4CwK5NtWtBBATc/UD/ZnIuJbQcPpsrLaeA=
Subject key identifier: 8F:DF:70:07:1C:BB:55:79:49:21:EB:1D:65:10:AD:06:F3:E1:AF:A7
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019F8455BB98494ED415820984265E008426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 137B
Signing time: Tue 21 Jul 2026 11:00:38 +0000
Manifest this update: Tue 21 Jul 2026 11:00:38 +0000
Manifest next update: Wed 22 Jul 2026 11:00:38 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: /7oDKq/9ohyodF4bhN+zbYOgSCgGOp+QGRJ6HVMeKt0=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:bb:98:49:4e:d4:15:82:09:84:26:5e:00:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jul 21 11:00:38 2026 GMT
Not After : Jul 22 11:00:38 2026 GMT
Subject: CN=8fdf70071cbb55794921eb1d6510ad06f3e1afa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:ba:94:6a:af:05:ee:e0:bc:09:3c:1f:07:
d8:cc:2e:89:40:18:69:b9:f9:5f:db:a1:13:8f:65:
f1:58:ee:85:c4:03:3a:90:8a:be:57:57:c7:f4:8d:
c5:fe:8d:1e:8c:77:ad:45:af:7f:10:98:5a:dc:dc:
09:e1:1e:12:19:93:11:70:21:f8:d5:12:98:60:65:
b6:cb:6d:3b:33:37:8f:16:07:60:ee:61:98:f9:c0:
14:dc:15:2a:ec:64:d7:da:27:35:18:e2:8f:dc:62:
ce:aa:2e:ee:e0:37:91:cf:0b:50:18:fa:6f:b8:3a:
ea:6a:ff:b0:8e:51:93:dd:77:ee:35:e0:ed:a4:90:
36:62:4a:25:92:fe:73:6c:85:32:79:16:d4:bc:87:
55:af:46:71:ec:43:cd:bc:42:a1:13:b0:cc:80:b0:
00:da:a1:f7:ab:50:66:e9:77:a2:08:9e:aa:81:45:
73:0b:cb:39:61:f9:b8:d4:4e:96:95:63:89:e0:b0:
6c:0c:82:ec:c7:ed:58:fb:2e:86:8a:03:dc:da:09:
71:3a:e0:a1:0b:c7:5f:5d:c8:47:73:52:4e:92:51:
b7:36:10:f6:be:96:5d:16:16:fa:b5:40:fc:b2:d7:
44:ec:06:59:e5:8b:ca:d1:cb:d9:05:3b:7b:88:b6:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:70:07:1C:BB:55:79:49:21:EB:1D:65:10:AD:06:F3:E1:AF:A7
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:60:56:7f:25:6f:fc:68:ee:c0:bc:34:8a:72:7f:2f:6f:ce:
dd:8b:67:41:70:f6:cd:72:49:69:f5:50:f8:82:87:67:3d:12:
38:91:ce:5e:a6:6a:fa:38:f6:ba:91:35:af:de:b8:a0:8d:2f:
3e:7f:d2:d8:0f:ee:ad:0b:08:6e:e5:ed:ff:aa:c8:66:41:34:
1e:f4:cb:7c:58:93:6d:60:9d:f9:1a:ce:03:1c:f2:60:0d:ec:
b0:2c:d9:77:c5:0c:46:fb:96:65:e0:54:58:a4:44:aa:53:81:
bf:2e:fd:d3:3a:f5:1d:4d:d2:5e:46:d4:54:2d:ca:2c:90:5b:
6a:48:85:2a:aa:b8:6d:ef:be:2b:89:a3:51:82:c6:88:85:6a:
30:c9:a2:d1:c0:e4:6e:58:67:1a:4b:b8:60:3c:b1:10:c9:6d:
45:b9:99:82:2e:0c:b9:74:7e:38:67:18:e9:39:30:a3:82:10:
61:92:b5:3e:8f:42:7a:a9:65:5b:5c:c9:9f:4c:ec:5e:28:7e:
5f:f2:c5:40:c3:32:5a:68:e1:6a:0e:50:7b:58:60:07:38:38:
b4:a1:aa:80:9e:35:5c:38:38:94:a1:55:7d:a2:a9:4e:8a:84:
06:95:d2:00:98:e2:18:c9:98:9c:64:75:80:db:26:f6:8c:4a:
bc:c5:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:20 2026 by rpki-client