
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: PDe17eQWJjOLm315a4p4lkh4/ipS9eLurGTCB6DYnC8=
Subject key identifier: BE:C8:2E:6D:C7:31:62:F0:8A:75:C7:C1:77:3F:1C:D3:E4:70:78:F8
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019F18D626450FADE2FC25EF7531C5D763BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 198E
Signing time: Tue 30 Jun 2026 14:01:55 +0000
Manifest this update: Tue 30 Jun 2026 14:01:55 +0000
Manifest next update: Wed 01 Jul 2026 14:01:55 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: ndD5kQ0DSVNAa1pv6Uv9HrA5/EcQBNp7P4SrNAf/kzs=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:26:45:0f:ad:e2:fc:25:ef:75:31:c5:d7:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jun 30 14:01:55 2026 GMT
Not After : Jul 1 14:01:55 2026 GMT
Subject: CN=bec82e6dc73162f08a75c7c1773f1cd3e47078f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:80:e6:8e:55:d4:fa:e6:1e:52:93:87:5a:
43:af:b6:37:3c:b9:10:3a:2e:d3:aa:5e:d7:b6:c3:
ce:f9:f5:0b:18:03:4f:81:8d:08:58:8c:1b:0f:62:
dd:1b:fc:74:83:74:2f:2d:f7:c2:53:ec:a1:87:16:
94:7c:e2:d4:cc:b5:f8:1a:25:2b:9d:af:28:10:7c:
fe:15:b5:3a:f9:bb:36:d8:a4:02:83:fb:d3:ea:b4:
64:4c:bd:2d:c4:6d:91:1b:20:f0:c6:83:ad:94:e6:
ce:76:22:b0:b6:b1:68:02:81:45:e3:15:9e:e2:19:
ef:4b:73:68:81:9c:36:54:ee:88:c1:aa:fd:9d:d8:
10:5b:7b:66:92:1f:b2:d9:70:0d:a5:a3:7b:54:d5:
d8:3d:89:73:2d:fa:61:3b:be:58:9d:2a:0c:f7:9a:
9b:0a:13:e2:97:64:53:a4:9b:3d:be:7e:69:45:e7:
25:14:7d:0f:89:53:f1:8c:05:7d:95:ca:74:ec:28:
6d:a9:d9:ce:ee:ff:88:04:85:9a:e0:1c:49:37:6d:
ad:0d:a1:33:16:98:3b:98:bc:3c:17:cf:40:bf:da:
d8:e6:30:d5:fb:d6:3d:ff:dd:47:5b:23:cc:0b:e6:
41:2a:5c:94:a7:f1:51:53:0d:fb:ae:bc:56:12:38:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:2E:6D:C7:31:62:F0:8A:75:C7:C1:77:3F:1C:D3:E4:70:78:F8
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:47:e7:5e:6d:08:5b:75:fd:a8:52:1e:fc:46:04:9b:89:09:
d4:e8:a0:9b:66:40:20:b2:69:d4:b2:3f:14:14:bf:1f:a5:f5:
aa:45:95:d9:c7:3c:ab:07:13:3d:74:e0:4b:d3:dd:10:57:3a:
05:73:11:bc:f7:74:bb:4f:3d:8b:6f:37:63:3a:48:ca:d6:28:
7b:4c:a3:fd:02:3f:d4:85:5c:4d:5e:b2:83:3a:26:65:dd:55:
7a:3a:c8:07:03:fb:3f:fd:a5:7f:42:31:c4:8b:a9:d5:ca:12:
e9:9f:df:a9:77:c6:19:b5:fd:2d:f2:94:98:a2:13:6f:c1:69:
b2:85:d5:18:90:60:59:c1:99:aa:5f:2c:5d:a8:e5:ac:92:2d:
2b:00:b4:b7:60:78:e4:05:c8:a9:d7:24:52:fe:a5:ff:37:1f:
72:65:74:1f:91:82:2c:20:8b:27:79:1d:1a:66:7f:76:34:d4:
f2:8c:f5:f5:4f:4e:36:d2:1f:52:c4:fe:c9:18:42:8e:d9:62:
71:f3:a8:38:b8:ed:60:02:34:f8:a1:64:85:d6:1a:0b:da:92:
ff:d4:7a:92:b5:84:12:30:4c:31:71:2d:59:b7:21:d9:44:89:
da:de:5c:a0:25:ef:e2:b8:25:b7:12:2d:5a:02:54:06:6f:03:
ba:12:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:21 2026 by rpki-client