Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: MmBXusS8sbULmmWVItPI6HMyaA6jcVAoHpCi4w+QRsI=
Subject key identifier: 9C:4D:1B:D5:CB:56:CC:DC:12:29:F6:1F:FB:16:5E:3B:38:D6:4F:84
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019E2F293B211E468304FE54E9E6D574D256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 05:01:31 +0000
Manifest this update: Sat 16 May 2026 05:01:31 +0000
Manifest next update: Sun 17 May 2026 05:01:31 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: FHm9hX92801K8P2U0DBiLxk9tOBIVy1WBurir95vSGw=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:29:3b:21:1e:46:83:04:fe:54:e9:e6:d5:74:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: May 16 05:01:31 2026 GMT
Not After : May 17 05:01:31 2026 GMT
Subject: CN=9c4d1bd5cb56ccdc1229f61ffb165e3b38d64f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:c1:2d:b3:9b:33:2c:81:83:62:d4:1d:45:
75:b4:91:d4:58:63:65:d6:d5:34:f0:75:bd:4d:66:
23:3b:ae:3a:73:0a:6e:03:14:79:30:ba:af:6d:85:
ae:65:41:95:59:a1:72:59:76:45:60:d8:58:06:46:
0b:89:32:6e:99:a9:32:20:e1:8a:29:06:9d:8a:8e:
08:06:46:0e:bb:a6:f5:fc:ff:1d:bb:55:16:57:49:
80:fe:56:94:44:f2:af:27:38:e4:52:5f:77:a5:87:
5b:f3:b8:ac:aa:ef:ab:aa:5b:0e:77:2b:4b:ec:41:
a3:61:09:84:dc:a3:10:af:ab:3a:c0:0b:a4:ee:c6:
fa:1a:75:d9:f6:61:4a:0d:65:a9:85:d6:f1:6d:ee:
e6:a6:e8:e5:ed:a5:18:d5:d5:6a:f4:df:ef:41:e9:
e1:50:d2:f2:66:c0:f1:76:b8:92:0c:7f:cc:ac:90:
51:89:40:1f:3b:49:58:83:ee:5c:24:12:ad:13:c9:
4b:c3:70:a9:78:37:59:52:3f:86:65:60:72:d2:72:
83:68:d1:69:65:0b:fc:75:1b:20:5c:73:bb:a9:23:
a9:c5:e1:fb:15:6d:ee:70:3e:9e:e3:ab:88:29:9d:
60:2f:91:bc:26:2a:19:e9:d3:b5:60:20:da:fd:09:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:1B:D5:CB:56:CC:DC:12:29:F6:1F:FB:16:5E:3B:38:D6:4F:84
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:92:af:9d:53:32:0b:e0:d8:0e:fa:91:21:f7:fd:7b:01:aa:
cf:29:08:94:39:88:75:5f:65:18:09:7f:97:47:58:5f:ed:28:
49:d7:44:9e:d0:03:6a:35:9b:6b:2d:74:b7:c5:50:96:d8:65:
1f:4a:6a:2f:a4:62:05:94:46:00:3b:2b:74:cc:40:fe:0b:54:
4c:77:7b:6e:af:bc:c0:85:6c:3b:1a:83:47:b7:bc:04:0d:52:
9c:68:62:de:a0:70:62:b9:01:b3:5b:d6:da:82:74:a2:27:64:
79:9d:6d:73:57:ce:54:5c:23:2c:f2:dd:cd:21:35:4f:c9:0c:
95:7d:6e:08:e7:a4:b3:9e:3c:ff:74:49:7d:e1:d1:e5:8c:77:
32:a2:28:1c:1f:a7:91:47:80:07:5d:27:44:00:57:fe:1d:25:
29:01:c6:6c:71:fc:6b:eb:cb:d0:fd:0c:01:af:a3:e7:06:c8:
e5:59:f1:15:fb:98:cc:09:7f:28:f4:a6:bf:73:3b:08:cb:88:
25:a0:30:b2:d8:d5:94:d3:82:64:89:e7:0a:21:f9:67:94:e7:
72:f2:36:e0:46:af:b2:0f:fd:db:30:85:4f:32:c9:0b:b3:2d:
9c:9a:28:28:66:dc:22:ea:02:ca:65:6d:c7:c6:52:d0:d2:36:
de:e4:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:51 2026 by rpki-client