Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: KVOAJ4+XBMZ5awFQ1XFOd4MBBewctawGrzayP8LMUpI=
Subject key identifier: C6:7A:17:51:AB:BF:0F:17:09:15:6A:B1:11:AB:82:69:31:C4:8F:50
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 01A000933D3E99F5A52818154A8A98B00A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 14:00:44 +0000
Manifest this update: Fri 14 Aug 2026 14:00:44 +0000
Manifest next update: Sat 15 Aug 2026 14:00:44 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: /acaA7ibDr4QyLZUhdTzEIvMUZitm82Q47ttSzVk8pk=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:3d:3e:99:f5:a5:28:18:15:4a:8a:98:b0:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Aug 14 14:00:44 2026 GMT
Not After : Aug 15 14:00:44 2026 GMT
Subject: CN=c67a1751abbf0f1709156ab111ab826931c48f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:04:c6:41:6f:2d:af:fb:c2:6c:2f:60:0d:
9b:02:3e:e0:92:87:fd:1e:08:01:1f:86:3b:c8:36:
7e:44:6f:13:64:db:f3:dd:06:64:90:6b:c7:51:ec:
1e:e4:a1:4d:8f:20:2b:d2:b5:7b:e4:54:4b:d0:b6:
b2:14:6e:47:18:9e:41:19:4b:5e:6d:58:7d:08:49:
f1:c6:d6:37:cb:e1:cb:4f:68:ad:d6:09:3d:2b:08:
c5:41:03:b6:07:ea:af:0a:6a:12:67:1d:47:d0:31:
2e:72:17:e3:bf:11:21:1d:12:c5:6c:dc:fd:db:f0:
3f:3e:26:bf:96:79:19:e5:1d:30:aa:0c:6e:2a:3e:
ca:ce:27:43:6b:84:99:54:a6:cf:ec:bb:08:4c:71:
cc:4b:28:78:d8:1c:15:60:16:a3:23:b4:fd:d2:62:
17:cd:1c:8f:c0:da:3e:be:96:c6:df:54:c7:83:de:
4c:cd:86:79:15:7c:c2:94:4d:74:43:eb:76:fa:aa:
e3:9f:b9:bf:38:8e:07:96:f3:b0:c5:df:e6:c4:55:
0c:84:92:f1:60:77:11:2b:30:92:c0:7c:5c:32:86:
bf:48:e3:f8:98:55:82:86:6e:30:6f:92:56:d2:d5:
9e:3d:71:12:64:ec:b7:f7:d6:1a:3b:3e:af:1d:72:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:17:51:AB:BF:0F:17:09:15:6A:B1:11:AB:82:69:31:C4:8F:50
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:25:0d:75:42:00:9f:a2:93:51:7f:21:89:67:11:e2:d0:4a:
6a:cb:ed:22:53:6d:4a:a1:c3:2f:06:12:1f:ff:2f:54:9f:f3:
d1:41:7a:83:4c:bd:cc:9a:10:e1:3b:37:b3:2a:bc:86:01:b6:
6f:fa:49:0b:d6:e9:fb:e0:f0:27:ff:5b:0f:de:ae:d4:b1:59:
48:53:44:bf:98:f6:5d:2a:0a:27:54:e5:80:9e:ec:3f:51:86:
bc:78:1d:07:e8:4c:1f:75:4c:46:e9:a3:20:dc:6c:13:a8:19:
fa:19:b5:c6:03:67:8f:fe:a7:c7:c0:25:52:e3:1f:e6:98:38:
d1:1c:14:6f:19:67:25:bc:0e:b5:e0:7c:ab:2f:40:66:87:22:
82:a0:0f:43:76:df:8f:4e:f5:c7:54:2e:c9:05:43:48:89:fa:
68:73:13:d0:08:30:3c:ec:cd:22:2d:16:96:b2:3c:d5:1c:54:
2d:bc:2b:54:6e:90:a7:23:fe:7e:1a:4a:00:c3:83:21:ba:49:
ca:d6:9f:05:81:d0:2c:f1:88:78:56:dd:4b:3e:00:1b:1a:fa:
6b:ef:e3:99:1e:5a:b3:2e:b3:c9:90:66:7e:79:49:d8:ca:81:
77:f1:e4:a5:f8:03:4b:d3:30:f9:6b:04:fe:7d:9a:74:0c:35:
b6:2b:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client