Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: IQZDPZvo+ds6/m6ZiJO3zu7n5iwaWFP8omwtBDSDiOk=
Subject key identifier: 18:8B:0F:AE:34:A5:CF:64:A2:C9:18:AF:E8:56:0A:F1:9B:3E:89:E9
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019CC93E6BE439314DD808F009F7A503B169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1211
Signing time: Sat 07 Mar 2026 17:00:37 +0000
Manifest this update: Sat 07 Mar 2026 17:00:37 +0000
Manifest next update: Sun 08 Mar 2026 17:00:37 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: zaothoHqak1y/ORL0wBC7pKkQji4MUUrghYOjp3w0TQ=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:6b:e4:39:31:4d:d8:08:f0:09:f7:a5:03:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Mar 7 17:00:37 2026 GMT
Not After : Mar 8 17:00:37 2026 GMT
Subject: CN=188b0fae34a5cf64a2c918afe8560af19b3e89e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:1e:12:39:81:42:ac:3c:49:2b:d6:f4:51:
13:09:5d:f1:08:79:fd:fc:d5:4b:f4:84:31:a0:5b:
a2:a7:4c:d7:b6:4c:0e:c8:3a:21:a8:ef:3d:d9:d6:
a5:f8:4b:5e:34:5a:47:6f:eb:4d:21:30:9b:e1:57:
92:65:5c:3a:af:33:d8:4b:8c:ac:35:9c:87:9e:ed:
6e:14:37:c6:02:6a:1b:3d:34:63:76:5d:70:f9:f9:
74:49:6c:09:92:dc:15:a2:b4:81:fa:74:d2:99:0e:
3a:29:87:80:67:cb:22:16:e7:3c:d0:3a:ce:ae:29:
99:40:bd:6e:00:3d:f1:9d:62:bb:d3:2f:89:48:56:
07:c4:7f:64:80:6c:fd:ce:63:36:4f:d3:2b:73:9a:
6a:ed:da:91:00:2f:62:53:5b:09:84:c4:30:5c:87:
69:c0:27:e0:53:f5:35:05:a4:7a:5d:64:e3:3a:e7:
05:5c:9e:7a:d4:b5:0d:2d:e8:0e:20:da:ff:e7:4b:
61:a9:eb:79:f3:ee:d2:90:13:3f:cc:62:1f:fa:d5:
2f:54:4d:9e:9a:6b:70:8f:6d:7c:c6:80:76:cf:90:
ba:3d:07:b1:de:14:63:00:e3:be:36:b7:bb:30:bb:
d7:9b:13:fe:96:58:e4:db:6b:40:36:02:59:95:b3:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8B:0F:AE:34:A5:CF:64:A2:C9:18:AF:E8:56:0A:F1:9B:3E:89:E9
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:17:19:61:69:22:0d:37:6e:66:51:18:d3:68:08:0d:9d:52:
f8:7d:55:5a:90:0f:fb:c8:e8:82:ec:64:b5:31:1f:48:d8:61:
82:57:29:12:88:b6:8d:2d:f7:5f:a4:12:66:b1:52:c4:28:ff:
a2:10:bb:98:0a:9f:2b:64:e0:6d:5a:b5:99:47:f4:59:75:3a:
69:4d:10:70:b5:5d:8e:b0:52:54:f5:88:09:b4:c6:37:92:4a:
cf:69:94:ce:2b:4a:94:c7:04:3b:64:75:93:70:f3:01:a4:33:
85:5e:b7:fc:fa:4f:4b:d2:49:17:b2:9e:fa:97:87:d0:e1:57:
4c:2b:d0:45:7b:d3:db:ab:7b:2d:71:18:a2:19:fc:06:93:bd:
48:96:cc:82:c9:4b:dc:56:d5:97:98:f9:b0:8b:e2:56:6a:21:
d2:69:d3:1e:c6:04:9a:01:f4:d6:12:0f:58:84:8c:63:c6:79:
f4:ca:11:e4:48:a1:04:2f:c7:9f:14:b5:0b:a3:8e:ba:bc:44:
97:4e:27:7b:3b:b3:8e:09:7c:60:3f:f8:8b:b4:13:4c:f5:87:
2d:a8:d4:9a:88:18:ca:ea:e6:0e:97:b2:4c:de:dd:f5:c0:72:
47:f6:c9:f8:b7:b6:b0:6d:18:2c:31:7f:d7:c6:5c:aa:ef:7e:
ea:29:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:03:52 2026 by rpki-client