Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: 57wRh3ulEXnAIIHbUuB09OsRP1snNZ4nv+LlepRv6Xc=
Subject key identifier: C2:AE:90:1A:BA:52:1F:C2:1E:3E:58:A3:81:3F:51:BE:7E:B6:82:47
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019DB0FD4B16A3B8E994616D078032A5753E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1289
Signing time: Tue 21 Apr 2026 17:01:22 +0000
Manifest this update: Tue 21 Apr 2026 17:01:22 +0000
Manifest next update: Wed 22 Apr 2026 17:01:22 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: renGFNBjVqhBA406sfQgdydTlyWUEmQO5jI+7It3XZI=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:4b:16:a3:b8:e9:94:61:6d:07:80:32:a5:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Apr 21 17:01:22 2026 GMT
Not After : Apr 22 17:01:22 2026 GMT
Subject: CN=c2ae901aba521fc21e3e58a3813f51be7eb68247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:ee:ba:00:8c:23:50:26:dc:0e:3f:29:4a:
e1:c5:d7:3a:e5:ba:5b:b3:5d:39:d4:b2:dd:54:a6:
0d:67:6b:9c:1a:4c:08:6e:35:ad:10:2c:d5:28:fc:
e6:a7:aa:6b:41:90:fe:5d:a9:2b:1e:e0:b3:b9:8f:
d0:20:8a:6a:cd:d5:b1:7f:a6:4d:e7:a5:8e:cc:77:
c8:ea:9b:ff:95:40:a4:ce:8e:93:24:0c:ab:83:10:
0b:0c:de:09:8f:a0:5c:62:aa:75:fb:49:24:09:06:
dc:d8:13:5d:76:87:ca:62:a0:a6:d7:78:63:a5:80:
94:38:7d:e0:61:f4:b1:bd:15:9e:c5:c1:2d:13:8b:
0f:bb:89:e6:8f:54:72:89:a3:a7:e1:06:8d:8a:8d:
76:cb:7d:8d:ec:f2:9a:53:a4:8f:90:16:4a:73:e7:
5a:c7:81:c3:a7:00:9c:51:76:b3:67:d0:2b:83:ab:
1f:3a:d0:5a:c2:f7:85:16:c7:f9:4a:d8:ba:0c:0d:
e5:24:19:63:63:df:a8:83:cb:cd:b4:ab:58:3e:b3:
71:33:77:f4:4c:78:67:3e:a2:71:94:8a:31:3a:ab:
26:11:34:ac:0f:17:0c:56:f9:7a:7d:74:9e:bd:f6:
6e:f6:58:d9:af:d5:ea:34:0b:1d:fe:ff:eb:18:e7:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:90:1A:BA:52:1F:C2:1E:3E:58:A3:81:3F:51:BE:7E:B6:82:47
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:4c:7a:4c:80:99:49:86:a4:56:2b:7f:d4:22:4d:9a:3c:
e6:26:1d:a7:36:5e:b5:7e:1f:e3:b0:19:fa:9b:5c:78:5e:84:
ca:89:8d:82:c1:c6:cf:da:6b:92:65:b8:32:1f:4e:2c:c5:c4:
4b:0c:2a:a5:9e:62:40:ad:e4:3f:14:9d:ce:c4:81:9d:7d:a2:
95:47:83:4a:26:bc:f5:e5:d0:9e:2b:37:77:99:bb:3e:de:60:
66:b7:c6:74:7f:25:db:82:6f:b4:13:1b:49:45:60:ee:08:fb:
e9:de:0f:a0:7d:c5:a6:b8:e0:b3:2e:68:d1:64:1d:45:3a:5d:
29:df:03:f1:19:38:55:45:0a:fa:46:ee:6c:7f:b1:de:2e:2b:
60:3d:05:81:bb:a4:75:be:e3:2d:dc:32:8b:2a:ea:58:5d:77:
d4:88:4d:69:46:13:b3:93:35:34:ac:98:f3:a5:5d:93:38:63:
ed:48:cf:a3:cf:e4:a1:2d:93:e1:18:5a:78:d3:17:de:56:e4:
e6:64:69:23:05:98:17:69:8c:a7:7c:50:9e:4e:ce:c3:87:4b:
ba:ee:94:00:8c:31:f5:cc:61:8d:a6:8b:a2:0d:00:e4:59:c1:
e1:05:c8:ed:01:1e:79:a3:e8:d4:5f:d7:0f:75:e2:b5:ff:e8:
67:15:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:32 2026 by rpki-client