Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: gwVF+W47Vxa7tUzpQmQ5FWmM5RG0Cts828bh+NAalBs=
Subject key identifier: 8D:CD:FC:A5:F7:FF:D6:45:F3:CD:43:CF:9C:FE:2D:2D:E0:49:36:21
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 01A116AA8072799EF719CC051FEBC3F0ED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1A96
Signing time: Wed 07 Oct 2026 14:00:35 +0000
Manifest this update: Wed 07 Oct 2026 14:00:35 +0000
Manifest next update: Thu 08 Oct 2026 14:00:35 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: bU3ibAeCj5s65Evs+HCdyhbevodvicFFOCQ8s2aopPY=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:80:72:79:9e:f7:19:cc:05:1f:eb:c3:f0:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Oct 7 14:00:35 2026 GMT
Not After : Oct 8 14:00:35 2026 GMT
Subject: CN=8dcdfca5f7ffd645f3cd43cf9cfe2d2de0493621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:9c:8c:25:b1:1e:f1:59:9b:df:ac:3a:1a:
03:4f:a2:a5:7f:39:0d:5d:51:e6:0b:3f:07:97:c2:
fd:95:f8:7b:a5:06:05:4b:3a:28:7e:36:6c:22:53:
93:cb:35:85:f9:84:5c:42:8a:64:93:38:73:a3:93:
13:47:b2:40:d3:a8:8f:cc:02:12:f5:2b:87:18:f1:
72:f0:18:15:00:df:c8:30:18:ed:95:13:6e:e1:4f:
37:50:a2:09:ca:6c:db:cf:37:b7:68:d2:25:fa:66:
a9:0e:07:71:40:05:a3:4b:a1:c6:a9:9b:0b:41:7e:
22:7f:ac:85:79:2a:8f:11:53:86:b6:2a:af:96:f9:
bb:b9:d6:fd:67:1c:12:dc:9d:77:f7:eb:ab:4f:b5:
bb:92:f7:34:54:c9:bb:90:f4:07:c3:2c:8c:6c:0f:
82:05:ab:d3:0c:b2:f7:9d:2d:06:0d:c7:ea:41:97:
9f:36:87:56:37:79:f3:70:84:ce:a8:20:54:b0:80:
2a:bb:a5:47:83:95:78:08:71:6c:6d:eb:52:b9:5d:
c0:33:db:e9:59:85:25:5a:c8:44:33:1a:1c:ef:d3:
87:2f:be:69:5b:17:f3:9f:e4:f8:3d:86:73:cd:aa:
fd:b1:5f:e3:21:11:9b:71:76:0f:ea:45:cf:d5:22:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:FC:A5:F7:FF:D6:45:F3:CD:43:CF:9C:FE:2D:2D:E0:49:36:21
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cc:a1:95:40:f5:be:44:f5:9c:90:c0:0c:2b:11:22:59:bb:
3c:67:a6:90:95:71:da:23:56:1f:4b:f8:f3:bb:40:89:16:f5:
ea:ca:a4:95:3f:2e:fe:59:06:8c:0b:73:5b:15:3b:77:9c:ed:
b9:d0:e6:df:8f:3a:78:8e:10:af:6f:c5:ea:91:26:2c:e0:23:
cc:08:3f:57:22:6f:9d:6c:98:89:32:d0:26:33:27:a1:4d:b3:
45:c0:d0:ab:89:0b:a5:8a:38:2e:67:bd:f4:7b:fd:c5:50:3a:
13:5a:bb:14:63:0a:78:ec:85:e7:04:31:18:17:8c:3e:2a:67:
4d:81:05:56:89:66:e0:88:98:a4:5b:19:42:15:14:2d:1d:42:
c0:0d:21:b4:6d:e1:58:3f:b1:f7:7d:11:41:d1:31:35:39:da:
53:99:fd:26:2e:cf:43:3a:c7:18:f8:50:9f:a4:14:8e:85:27:
9c:2c:db:12:8b:7b:bb:e3:f8:08:ce:c3:26:50:f8:3c:7e:97:
9c:6d:c0:f9:98:1f:60:44:e7:cd:31:92:43:8b:64:58:90:1a:
8d:87:55:fc:96:77:c3:8e:3f:d4:4b:c2:b8:2c:cf:31:41:f0:
7d:4c:f8:e1:e0:24:04:0c:34:14:29:31:6d:34:ba:66:1a:f1:
75:40:25:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:23 2026 by rpki-client